Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa
File:                     c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa (raw, json)
Hash identifier:          Gqca6KYVnrww94G5MPmj98XoDP1cbclI0081FMtv8zA=
Subject key identifier:   56:D1:97:4F:38:3A:B4:95:9B:22:70:94:6B:23:94:E8:0B:EC:A0:A2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A76397D9F2599BA66FB9300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     19955
IP address blocks:        209.221.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:39:7d:9f:25:99:ba:66:fb:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=8f5c422e-0e17-47ba-b045-4218428a37a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:e9:91:00:2b:de:2e:73:f3:25:4a:74:fb:
                    d0:3f:99:d2:55:21:63:9e:49:74:14:e9:fb:60:bb:
                    ae:aa:9e:f8:c8:80:26:c4:77:66:fd:10:4c:66:cf:
                    f1:27:2e:24:ae:93:00:c7:88:c9:b8:e9:eb:b6:fb:
                    c0:05:77:1e:06:26:39:79:0e:75:ad:31:19:43:8e:
                    79:f4:ac:b8:db:3b:50:9f:01:b9:f7:2f:ca:ff:a5:
                    6b:9b:bc:e1:6f:56:9c:3a:d5:6b:c3:12:ed:22:0e:
                    7d:3b:f2:39:bb:4b:e4:9b:df:02:c0:09:60:02:07:
                    7a:ed:ac:57:76:98:a0:0e:08:3d:ac:e7:2b:79:99:
                    3a:9b:ac:90:49:0c:10:63:f5:9d:67:50:22:44:c8:
                    5d:a7:33:f6:dd:ac:28:b8:4a:57:41:8d:0f:66:1b:
                    5a:75:ab:ee:2a:c6:72:e3:b2:9e:9f:50:09:71:e4:
                    fb:b4:72:67:26:ac:c8:1a:61:16:57:68:3e:92:cf:
                    b6:d8:bc:cb:2e:36:1c:bf:c7:8f:3a:7f:c8:d7:97:
                    98:39:5d:3b:59:53:60:fc:09:38:16:ec:0a:29:56:
                    53:48:7c:f3:7c:4d:1a:94:2d:80:fa:0d:cb:a4:5a:
                    d9:ce:a2:71:2c:2f:55:5b:56:c1:0e:e4:44:4d:4e:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:97:4F:38:3A:B4:95:9B:22:70:94:6B:23:94:E8:0B:EC:A0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c42a51a5-7de2-3746-870f-8bb2b636bb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:38:a7:92:21:fd:41:c4:00:a4:8b:60:50:06:52:d1:63:
         3a:f2:a5:dd:f7:e6:94:11:6d:ac:3a:4f:e1:65:1e:bc:0e:07:
         22:3c:7f:f1:f6:f8:47:e5:8d:70:e0:b6:d3:c6:47:e6:2e:b6:
         24:6f:88:6b:d4:12:3f:00:6c:e7:62:0b:65:1b:7a:ba:9b:a2:
         eb:bf:54:d8:31:de:47:1f:0a:4e:72:ae:c9:cc:a9:ce:7e:cf:
         3c:e1:fe:75:bc:ca:7a:a0:f8:f3:e7:b7:5c:4b:26:a7:2a:79:
         26:af:48:19:59:21:b6:0e:97:9e:c3:71:91:c3:fa:15:97:32:
         da:a1:42:b9:b1:b7:13:82:bd:34:bd:31:e6:f8:ae:92:e7:ed:
         65:7b:1d:a9:c4:78:47:a5:48:75:0c:f5:42:8a:86:31:7c:9c:
         6d:9e:d5:7d:c3:92:fb:ad:e7:33:f3:95:9f:d9:61:c7:0a:e1:
         25:04:ce:3a:b5:41:b9:c0:0c:ce:b9:f2:89:c9:b9:7e:52:3b:
         42:5a:f0:0f:a4:a6:38:20:32:ad:12:84:67:5a:6c:82:ac:e6:
         2a:78:d7:28:21:96:57:61:ec:1c:ab:79:6a:1f:94:09:f4:bc:
         d5:34:f4:03:35:b6:5b:60:2d:ba:be:11:55:17:7f:22:ec:b0:
         f6:02:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:58 2024 by rpki-client on console-fra.rpki-client.org