Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa
File:                     8aef21de-52d8-31f7-944e-903c3477d4d6.roa (raw, json)
Hash identifier:          hYt4UNvr3cwWqqZ8OIeC8If8+51rXV+p6SUEi9ZEip8=
Subject key identifier:   52:24:46:8B:94:0D:06:96:30:12:74:D6:5B:AA:25:A6:59:D0:9B:B0
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A7633E9AF74EF5E1DD77220
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     3131
IP address blocks:        64.184.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:33:e9:af:74:ef:5e:1d:d7:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=0b15ca16-d842-4b8a-ba33-efdf5e8eade5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:6d:d7:6b:b8:74:4a:0f:74:b0:d1:4d:38:
                    b3:3b:f4:05:0b:59:0c:5d:14:c2:59:11:97:e3:44:
                    0c:99:b3:07:1b:3f:d5:23:85:86:7b:83:dc:25:a9:
                    92:62:d6:4d:9a:d9:e1:1b:50:47:a1:39:05:7c:52:
                    77:d5:40:ed:bc:5e:66:eb:73:cc:e4:41:2e:02:0d:
                    56:48:01:81:d1:fa:82:96:9a:38:b0:57:78:bf:47:
                    15:4d:a5:99:96:1c:d3:2a:8e:9f:7c:58:a2:e0:cd:
                    d4:dd:3f:cb:11:ee:00:04:9f:d2:00:05:12:e6:cc:
                    01:65:9b:e3:65:50:c7:30:ee:b8:9d:e4:fb:1f:5d:
                    00:6a:8b:22:88:99:ee:2f:50:02:92:bb:22:ac:e1:
                    b8:14:7d:3f:96:8c:5d:bb:69:a3:2a:d2:f0:17:e4:
                    4e:47:73:87:89:8c:2d:a8:49:6a:20:85:b9:c5:73:
                    c3:25:41:03:b4:4d:38:c8:06:1a:b7:7a:19:cc:91:
                    2c:7f:b8:af:4f:86:bd:fd:46:d8:46:24:a7:7d:fa:
                    37:25:c8:e6:3d:ad:77:51:52:08:2e:67:0e:0b:cf:
                    54:36:51:15:4b:3c:4e:5b:7e:f0:15:95:96:0d:95:
                    78:c8:48:c7:5f:89:38:ab:58:84:49:8b:cf:a9:88:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:24:46:8B:94:0D:06:96:30:12:74:D6:5B:AA:25:A6:59:D0:9B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8aef21de-52d8-31f7-944e-903c3477d4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:f0:9f:ec:8b:f5:a9:5a:16:13:b7:ba:e9:56:c8:9a:47:
         81:a4:f2:4c:23:b5:6a:45:a5:df:c5:d8:99:8f:89:84:34:c6:
         6d:7d:07:67:3d:c0:4f:73:c3:93:3a:67:74:04:46:80:2d:3f:
         dd:e0:7d:e9:aa:b0:df:17:5d:72:3b:53:c3:1b:63:f8:f0:c5:
         62:75:8b:bd:2f:e1:a4:53:95:b9:8b:75:7b:92:9c:79:7b:94:
         c9:ee:4b:a9:2e:66:5f:ac:58:1c:76:62:00:b6:c8:98:1e:a3:
         00:87:c7:7c:63:05:70:bf:d9:08:0b:df:c4:32:ca:3c:71:60:
         82:34:96:20:32:5c:a5:ce:13:db:a3:a6:3e:f4:b4:c5:79:19:
         02:50:f4:60:81:f2:c2:c3:e9:04:91:f8:80:ac:7f:04:26:3b:
         71:65:0f:62:04:d1:e6:d3:26:d1:74:28:4b:0c:e5:10:c3:e9:
         3f:52:e5:46:c5:b9:44:9c:f8:00:91:55:81:4f:56:ce:42:e8:
         48:45:86:15:65:ba:86:df:56:9d:50:6d:5d:3a:c3:db:0b:63:
         c0:ab:17:c8:8a:65:73:b2:c2:92:ab:69:b0:a7:06:71:51:a4:
         2e:6d:45:db:bb:be:50:4b:b2:31:8b:39:14:44:e7:d0:df:9f:
         b5:5a:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:57 2024 by rpki-client on console-fra.rpki-client.org