Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b72e6b6-9586-338a-a41b-56eac502661c.roa
File:                     8b72e6b6-9586-338a-a41b-56eac502661c.roa (raw, json)
Hash identifier:          8dYqIahRvqE0+ScTIOXXn0L31eTWcDSksWsUJHtEvAw=
Subject key identifier:   04:8B:30:F8:A2:8B:11:01:4F:78:32:74:D7:27:D6:D0:96:64:BB:8E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285847C05C13CD3F93C1DA6AFB8100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b72e6b6-9586-338a-a41b-56eac502661c.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     17025
IP address blocks:        2001:438:8022::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:13:cd:3f:93:c1:da:6a:fb:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=2139324d-6192-49cd-b92f-08e22215acd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:0c:41:a2:72:91:fd:2b:f2:9b:a8:24:21:
                    18:12:b3:4e:cb:0b:0d:db:20:69:fc:85:c2:5c:a6:
                    f2:5c:0a:34:b5:59:73:df:90:41:c6:1f:22:2f:99:
                    b4:f1:68:f6:03:90:fa:ec:c7:19:d0:e6:be:19:74:
                    7e:2a:0c:e0:b0:55:35:fa:6d:62:fa:14:30:d0:02:
                    9b:aa:8d:fd:9f:5a:83:ff:02:e5:b9:a3:57:90:f3:
                    78:6f:be:dc:ab:11:8d:f3:80:be:6a:9a:b0:72:eb:
                    55:77:da:89:1e:15:34:27:a3:fd:86:b6:55:a1:81:
                    08:c0:d8:6d:a7:0c:23:76:71:e0:e4:f0:0e:c8:fd:
                    3a:a9:c2:bc:e9:13:5e:68:95:6b:cc:53:fd:dd:1f:
                    6a:c9:7d:33:f8:6e:24:51:7d:3e:4e:39:06:27:f0:
                    b1:51:b0:a4:f3:cd:23:29:f2:2b:dc:c3:a8:31:e5:
                    fd:e4:b8:c2:f9:f8:27:ba:39:4f:f3:09:4c:d5:88:
                    fb:75:42:5c:1b:76:20:43:5e:36:9e:af:f0:f1:18:
                    e9:19:93:36:df:2b:ca:da:0f:d7:4c:70:9a:f3:5f:
                    3b:60:e7:97:f1:bb:4d:57:79:65:16:cb:26:1f:8b:
                    a9:5e:9e:4b:1e:07:e0:84:4c:41:16:9c:6f:44:da:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:30:F8:A2:8B:11:01:4F:78:32:74:D7:27:D6:D0:96:64:BB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b72e6b6-9586-338a-a41b-56eac502661c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:8022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:ae:d4:ed:0f:7a:0b:49:f6:18:12:bd:e2:d5:c5:8a:16:
         0f:72:2a:8a:5b:a3:5e:27:5c:1a:fa:60:c1:5d:b2:67:f2:2e:
         8a:9e:f4:c5:75:5e:8f:94:42:ff:05:3c:f4:8b:d2:b9:a7:08:
         7c:94:8c:15:5d:84:48:b6:4a:22:ed:db:03:b0:39:30:cd:3e:
         76:8f:ff:27:d5:05:29:7d:3a:66:46:ab:2f:7e:59:ea:2b:9e:
         de:9d:be:44:7f:01:08:8f:f5:31:9f:3d:d7:6b:85:b5:b7:6f:
         ba:d0:50:ab:1a:c2:68:cf:80:24:e1:46:4e:c7:3d:41:c8:fe:
         23:aa:9e:b3:3b:cc:fa:ca:14:47:62:aa:d1:0b:f7:d5:0f:70:
         be:f3:57:ab:bc:83:b4:7b:c0:d1:fc:17:2f:55:dd:ac:ca:17:
         33:ca:a2:d1:8d:c5:4f:5a:19:b8:90:b8:a1:bc:72:0c:bc:8a:
         91:35:72:bd:2f:96:1b:02:bd:06:01:7c:dc:f0:39:e3:38:ed:
         94:b1:fb:bf:3c:ea:01:fc:a3:b2:17:cb:33:a4:3d:4a:49:43:
         5f:bb:39:2d:93:cd:e2:42:fe:10:52:bc:ea:19:5c:d5:68:5d:
         a7:91:56:e2:07:49:13:43:c6:1a:4e:78:db:46:d9:af:ff:da:
         78:f9:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:57 2024 by rpki-client on console-fra.rpki-client.org