Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85230b1a-b149-3de2-928b-3e323dee805f.roa
File:                     85230b1a-b149-3de2-928b-3e323dee805f.roa (raw, json)
Hash identifier:          Z4Nhwo8ZEK7b+VJrbMaoDjdjshWfW1TIOsEjBg5OU7k=
Subject key identifier:   68:48:09:4F:5E:61:74:C5:A0:10:B0:42:31:9A:1C:0B:BB:DD:AA:12
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858479DFB6AF3E66F466719CF1C00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85230b1a-b149-3de2-928b-3e323dee805f.roa
Signing time:             Mon 21 Oct 2024 17:28:26 +0000
ROA not before:           Mon 21 Oct 2024 17:28:26 +0000
ROA not after:            Sun 19 Jan 2025 18:28:26 +0000
asID:                     15197
IP address blocks:        209.133.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:fb:6a:f3:e6:6f:46:67:19:cf:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 21 17:28:26 2024 GMT
            Not After : Jan 19 18:28:26 2025 GMT
        Subject: CN=1e68f8fb-3999-4330-84e0-2238943cb593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:e4:bc:23:5d:18:3e:27:19:c8:92:f5:2f:
                    4c:98:d4:ff:1e:09:65:f3:7d:7d:bf:42:1c:cf:51:
                    d2:26:f2:19:1a:d1:f9:63:b4:44:52:b4:f9:18:0f:
                    d7:68:13:cd:51:3b:cc:c7:06:e8:33:e8:0a:08:0f:
                    aa:85:7c:55:36:44:fb:08:c5:0b:d4:cb:07:53:f3:
                    ae:b3:d6:e3:6b:60:6e:73:8b:42:ef:d9:cb:26:ed:
                    27:b2:a3:c3:fe:37:08:e0:5f:31:73:aa:b7:62:01:
                    f3:bd:a2:f4:ad:29:2e:c2:38:75:8b:68:dd:5b:7d:
                    64:35:e1:d5:79:48:e9:c8:a9:2e:3f:5c:42:75:06:
                    43:b1:16:cb:93:85:d2:95:1f:ac:c9:e7:fe:17:c9:
                    3e:6a:94:1d:ba:28:85:80:e3:7a:dd:8e:0f:b2:5b:
                    ed:b8:4c:78:6a:9a:27:a7:b4:c8:ef:0c:9a:95:82:
                    28:62:d5:13:f9:3e:4a:7f:3c:27:ed:d0:ae:dd:e6:
                    87:8d:af:af:85:cd:f4:e5:bc:b4:de:e8:96:5c:e7:
                    c5:e1:45:03:31:9e:b0:5e:7f:77:61:73:90:b4:6a:
                    dd:aa:39:fc:24:fb:7e:bd:2f:6f:85:c5:ed:75:07:
                    fc:8b:96:0a:e7:d6:ce:14:6d:99:d3:50:af:0a:3d:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:48:09:4F:5E:61:74:C5:A0:10:B0:42:31:9A:1C:0B:BB:DD:AA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/85230b1a-b149-3de2-928b-3e323dee805f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:b2:56:73:f6:69:30:99:95:04:65:51:ac:3f:0f:8a:94:2c:
         ef:2a:15:74:10:e4:b8:9d:57:5d:6b:e0:42:b3:92:17:fb:67:
         04:1f:6d:73:cd:99:62:76:17:4f:9c:5e:e6:04:7f:8b:df:f9:
         0b:a8:e9:7d:00:16:ee:b3:f0:e0:32:6f:a0:66:f5:f3:2c:05:
         57:26:fd:da:26:e4:cf:41:f9:d5:f1:1f:0b:19:8d:5e:65:9e:
         f8:fc:12:9c:fd:34:fb:0c:8f:d8:97:dd:ed:91:f8:b2:11:23:
         b0:dc:e8:3c:57:24:7e:99:ea:e4:f5:51:84:6c:43:ac:01:3c:
         47:14:ea:9e:61:7b:23:01:be:8a:e8:43:24:c5:df:38:06:aa:
         80:c5:a3:41:e1:f6:66:e1:bc:87:85:66:eb:9a:d9:bf:ae:68:
         ef:9d:94:09:8c:fd:11:21:12:3c:8d:61:9e:64:b9:39:0a:c4:
         d3:d3:21:73:e0:c1:aa:fe:03:57:39:af:c6:a6:53:d0:6f:c1:
         41:b4:0d:be:93:18:eb:82:ab:52:bc:30:ab:fc:05:6e:36:4e:
         a8:68:b7:52:66:bb:3a:ce:49:e6:6e:41:84:ff:a3:47:e4:09:
         a0:a6:85:fa:81:7a:a0:08:ab:ba:d1:67:04:cd:47:cf:61:8f:
         70:ef:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:57 2024 by rpki-client on console-fra.rpki-client.org