Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a605cd20-3807-3bb4-b36e-0e3afa6586d3.roa
File:                     a605cd20-3807-3bb4-b36e-0e3afa6586d3.roa (raw, json)
Hash identifier:          vnbsZT/+1hmqJrQN7Gf16yO4fDjzk6GliKpg7sYKuzA=
Subject key identifier:   56:47:8B:20:CC:A2:1F:2C:54:87:89:C9:F0:D3:EA:EC:39:0C:E8:9F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858459A6344E8A32BD130A14D5500
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a605cd20-3807-3bb4-b36e-0e3afa6586d3.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     19955
IP address blocks:        209.221.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:44:e8:a3:2b:d1:30:a1:4d:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=a191de22-03f7-4ab5-8634-5dedff79129a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:59:2d:7c:1e:b1:1a:46:9e:1a:00:73:8a:
                    34:06:a5:6f:00:a9:95:b9:c4:37:d2:27:37:ab:94:
                    d3:09:90:d9:cf:93:ac:8a:dd:4a:85:fc:aa:0c:df:
                    a9:67:4a:fe:4f:d9:dd:dd:2f:3a:6e:29:f0:4a:07:
                    73:e6:41:ab:28:f8:a6:ea:17:9c:1f:7e:90:73:09:
                    8f:14:d4:23:55:d8:ef:f8:0f:7d:01:c4:e8:90:56:
                    d1:b9:1c:8d:dc:7f:b3:42:5c:0c:36:d6:8f:61:c4:
                    a1:53:f1:50:12:36:19:d0:b0:4a:45:fe:e0:89:ce:
                    63:96:8d:ee:c6:76:90:95:ca:70:01:53:e0:86:fe:
                    c2:f3:92:e9:11:4b:65:7a:d7:35:a0:c5:9d:42:0f:
                    cf:7b:cb:4c:cb:a5:f5:80:b3:b0:e0:ec:d0:9a:86:
                    ea:87:62:31:87:c7:de:f9:df:40:34:aa:6a:e6:e5:
                    95:34:af:1b:e5:87:ba:5a:33:06:22:9d:60:10:c3:
                    da:23:57:0a:e7:8a:25:10:d2:e6:08:ee:e9:45:4a:
                    79:12:2f:06:72:cc:ff:b3:9b:43:b4:29:1e:61:93:
                    a2:3b:6c:ae:1b:92:78:d0:89:7f:dd:89:be:22:e1:
                    f7:ab:da:b8:ac:ce:c6:78:a8:2d:0c:2a:1b:b1:37:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:47:8B:20:CC:A2:1F:2C:54:87:89:C9:F0:D3:EA:EC:39:0C:E8:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a605cd20-3807-3bb4-b36e-0e3afa6586d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:72:5b:9f:21:f3:08:b9:11:58:1c:a0:ec:fb:59:8b:d8:
         86:3d:e0:2b:8c:b8:07:ae:f0:f6:b1:d7:e9:40:54:21:fa:30:
         0e:e9:59:80:66:39:65:4f:3d:58:10:b7:8c:d2:8d:85:87:35:
         9f:32:03:3c:62:59:d9:90:31:4c:05:6e:66:e4:35:5f:da:88:
         34:d6:61:2d:6e:4a:f1:28:cf:02:3d:fb:03:55:88:f5:0a:ad:
         1a:d0:e9:06:f0:d4:7c:61:62:a8:9a:a9:84:16:59:e0:1e:52:
         c5:00:35:76:3a:db:92:95:95:6b:a2:11:ba:35:f0:a7:a9:0f:
         96:83:5c:97:a2:b8:68:3c:de:5a:36:a2:31:11:64:ec:cd:28:
         9c:52:74:0a:a8:31:c6:ec:93:26:36:a4:93:be:45:b1:72:d4:
         fc:58:f0:99:fa:69:63:1f:c6:b6:a0:77:0b:b1:a1:b2:3d:28:
         69:a8:db:e2:6d:1b:de:08:3e:e1:60:95:6b:a7:2b:dc:c3:a3:
         60:ea:ba:0a:c3:5e:45:93:08:42:12:28:9d:19:e3:52:01:0e:
         f8:d9:d4:87:28:d8:46:55:ed:08:18:a2:53:cd:44:45:0a:47:
         81:03:aa:16:d1:62:ac:a5:46:be:8a:96:02:f9:3a:91:f1:f0:
         52:0f:a1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:27:12 2024 by rpki-client on console-ams.rpki-client.org