Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa
File:                     af19f07a-7d1c-34b4-afbe-2f477f28969f.roa (raw, json)
Hash identifier:          vXvtRX8InWOtYNI4wSUjg9EALZGHmTVDq5bZgIgopQQ=
Subject key identifier:   D6:6C:14:41:EB:30:FE:8F:F9:D2:5A:C8:CF:CA:B1:F8:53:6C:95:43
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F5FF6EBD6469D6EEDAE420
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     399033
IP address blocks:        2001:438:4a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:ff:6e:bd:64:69:d6:ee:da:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=0d02ea55-4dee-4618-9c74-68e9b0762553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6d:00:55:11:6b:64:c1:6a:45:6a:be:d1:51:
                    88:f9:dc:a5:73:bb:4c:01:86:de:9f:ed:4d:15:ac:
                    a8:fe:75:b1:98:a1:1a:d6:33:91:bc:5c:5d:fb:2c:
                    f3:7b:03:ff:9e:93:f1:fd:f8:5d:c5:e0:32:5d:b1:
                    e6:08:45:d3:cc:fa:e7:89:9c:a7:d9:9d:fe:cd:48:
                    38:7b:fd:7c:88:d2:45:eb:2c:ea:36:f7:54:51:48:
                    26:e8:58:73:2a:72:a8:dd:da:d7:50:22:12:bf:9a:
                    38:bd:c1:44:4d:30:4d:bd:c4:1c:82:71:1d:e6:62:
                    b6:e9:38:c2:6d:4d:07:af:09:0c:bf:e9:c8:cd:bb:
                    74:bb:9e:fa:b1:55:2b:f3:17:30:3a:e0:6f:01:1f:
                    6d:d1:ab:98:2d:04:95:a1:df:fc:ae:39:e7:05:d0:
                    38:5f:1a:e0:48:26:55:a1:3a:f9:06:41:d5:5f:9e:
                    ac:de:3b:82:64:7d:8f:99:f2:97:e1:e5:db:2b:84:
                    ce:43:a4:8e:33:1a:95:ec:b6:6a:3a:82:aa:ba:cf:
                    12:9c:b8:3b:ec:fd:a5:61:c7:a8:7c:a1:db:d0:f5:
                    70:78:7c:67:ab:12:d2:7b:1c:47:05:8a:c2:96:67:
                    fc:37:3d:46:0d:9f:66:0e:29:df:8f:32:ab:d6:5b:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:14:41:EB:30:FE:8F:F9:D2:5A:C8:CF:CA:B1:F8:53:6C:95:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:4a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:35:de:dc:12:68:d5:b9:aa:48:80:5f:ac:1f:6c:c7:86:14:
         9a:2a:31:e2:3a:ae:48:71:46:58:cd:f8:05:97:e2:b2:45:97:
         18:54:63:1b:e0:ee:7d:52:2e:70:42:e4:c8:0d:49:88:da:e9:
         6c:a4:0c:4a:a9:47:d7:f5:d2:2f:ab:8e:0b:0a:10:fc:65:79:
         0e:de:78:3d:3b:1a:e1:81:f6:73:74:e1:8b:0a:e9:9a:7a:0d:
         75:1e:d1:ae:aa:20:26:5b:d8:bc:63:43:c3:60:f1:00:a0:66:
         54:5d:81:93:e1:9e:08:2c:ec:87:65:7b:72:b7:0e:83:03:f4:
         3d:7e:96:d8:74:79:f9:df:5f:16:28:fd:81:36:1f:87:83:ef:
         00:a2:e3:6c:29:6d:e6:31:c0:c5:83:d1:1e:83:01:54:31:e8:
         71:93:29:2a:3e:6b:ff:e2:02:18:35:7d:0b:21:2e:97:b7:de:
         8f:24:d0:cb:4e:dd:9d:29:3f:d0:3d:3c:3c:59:32:99:f4:8c:
         21:23:bd:c2:be:3d:2c:86:83:bd:5c:2a:87:0a:8f:86:5f:d3:
         09:84:91:14:e3:f6:b0:41:73:f7:26:13:10:45:e2:b9:02:64:
         d8:a1:83:15:af:dc:9b:c4:23:aa:ab:da:a7:b5:10:30:68:cd:
         88:57:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:55 2024 by rpki-client on console-ams.rpki-client.org