Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a7c7f631-0029-3249-8334-5347bb4ed272.roa
File:                     a7c7f631-0029-3249-8334-5347bb4ed272.roa (raw, json)
Hash identifier:          bHxnaovYvjlDc40XnzU0tKVBn0nHN0ZWQP2aJNV1fcg=
Subject key identifier:   E2:A9:82:B9:B8:3D:A1:40:4A:7D:53:3E:85:54:81:4C:01:D4:D1:2A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858459A6335CDD5D801FBA8BF3080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a7c7f631-0029-3249-8334-5347bb4ed272.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     397942
IP address blocks:        2001:438:6e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:35:cd:d5:d8:01:fb:a8:bf:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=3f8ebe37-f862-4004-a344-c30c0e47b230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:02:3d:ca:86:83:06:51:c0:55:7c:f8:e6:
                    08:e3:28:6a:81:f9:95:5a:e5:2c:30:e7:36:22:09:
                    b3:00:dd:1a:fd:73:b2:dc:01:d6:74:30:7d:3d:b1:
                    ab:55:8a:b8:83:08:1b:07:99:98:60:26:03:66:be:
                    e1:fa:92:fb:b0:bf:91:f2:d6:0b:a7:91:8f:e2:98:
                    b8:dd:86:45:31:13:81:51:53:d8:a6:7f:dd:f0:bd:
                    05:ed:cc:87:6d:af:bb:52:4d:2b:4f:4a:e9:12:a6:
                    31:a1:cb:f9:6e:b6:f3:33:b7:50:a9:0c:c1:40:82:
                    01:be:13:7a:91:23:d5:a0:b4:be:69:c1:57:ea:1e:
                    d2:bd:0c:dc:d0:71:11:18:31:60:ae:4e:ce:5f:7f:
                    66:61:70:0f:fa:ad:83:53:fd:82:bc:19:8e:bd:ab:
                    50:92:a1:fc:78:80:65:bb:b2:58:f5:6b:d3:6d:0a:
                    60:85:ae:12:a8:c1:bd:32:6a:24:04:46:2e:85:1a:
                    1b:ef:a3:e8:a8:4b:8d:6e:81:37:d9:86:16:0c:2e:
                    bf:24:33:a2:c3:2a:8d:ba:e0:fa:40:20:a0:f2:8f:
                    15:9f:c8:a7:8a:df:06:98:d3:f2:bf:9f:72:32:f8:
                    eb:1d:28:9b:c4:0c:72:c9:70:5e:ac:85:2e:79:7b:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A9:82:B9:B8:3D:A1:40:4A:7D:53:3E:85:54:81:4C:01:D4:D1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a7c7f631-0029-3249-8334-5347bb4ed272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:6e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:fb:78:24:2e:20:f6:dd:cf:33:d3:79:c1:01:f6:2c:51:
         55:88:9e:a9:db:64:cb:b2:b7:4e:25:07:14:81:73:f9:c6:d1:
         89:58:4e:84:e0:8b:bb:3d:b5:c0:b4:66:5d:85:1b:d7:3b:d2:
         a8:42:ee:94:69:3b:a9:31:c7:81:71:48:6c:d6:57:8e:6a:d2:
         1d:91:40:af:8f:1e:8f:95:1f:8c:6c:9a:e6:aa:ee:10:42:ca:
         5e:23:e2:13:b0:4d:bc:7b:e7:3d:e9:90:9a:fd:a2:7a:d5:cc:
         0c:cd:b8:a5:05:25:f4:b6:ae:a8:68:55:c2:8b:d0:ee:55:4b:
         dd:dd:ab:4a:e9:5f:65:43:81:50:59:a2:8c:50:ab:52:13:24:
         45:7a:73:d0:76:60:93:b6:7d:35:e0:3f:82:b7:26:63:6b:29:
         e4:b9:f0:a6:76:ff:c6:93:df:eb:35:fd:38:11:20:06:0f:d1:
         39:cc:b1:ea:e1:32:78:8a:af:b3:66:ad:f4:ea:54:b3:1a:a9:
         f9:1a:35:82:78:ea:bd:20:b9:41:c9:8d:63:f7:73:ae:4b:4f:
         25:24:24:10:70:79:48:6e:db:b5:40:9e:c9:7c:44:51:dd:e3:
         c9:a5:cd:c0:55:a0:33:87:74:c5:8d:a3:bd:7b:c5:a4:ab:24:
         43:4c:c9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:25:30 2024 by rpki-client on console-ams.rpki-client.org