Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d56bc9bc-e4b0-353f-9509-71cf2526717d.roa
File:                     d56bc9bc-e4b0-353f-9509-71cf2526717d.roa (raw, json)
Hash identifier:          O8FhtFGCMmP8ehtea95ZfzfFDkBBhZQ0dxDJAQ03Hrg=
Subject key identifier:   1A:C4:4D:1C:43:B4:1A:5A:58:EF:FB:52:1D:5D:0E:2B:8E:AB:91:F3
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858473095FBD847D4895E0AB1D900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d56bc9bc-e4b0-353f-9509-71cf2526717d.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     36321
IP address blocks:        64.124.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:fb:d8:47:d4:89:5e:0a:b1:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=842be64a-d312-4a6d-bed5-d3239fea047a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:35:96:c5:23:c8:af:08:e9:4a:f8:b6:99:
                    56:f5:d9:c5:2f:18:5a:29:23:e4:70:93:68:f1:a4:
                    f4:fe:82:73:30:b8:06:11:29:bf:33:1e:1d:15:7c:
                    99:72:cf:2f:80:5d:83:2b:be:5b:5c:f0:2e:e4:63:
                    6e:b3:e5:48:1c:17:1d:6b:ac:e4:de:8e:b3:8a:71:
                    01:64:6c:c6:af:b8:13:f1:c7:17:56:92:b1:51:cf:
                    29:75:68:db:c1:93:07:05:4f:df:89:6a:e9:0c:55:
                    30:a9:3a:2e:20:f6:9a:1f:79:8c:5e:de:ed:23:c1:
                    4e:e8:95:16:3f:d5:3c:60:02:81:65:75:4c:6e:7e:
                    57:c2:5c:b0:34:15:bb:98:2c:fa:a1:68:e3:0a:61:
                    a4:ba:d7:85:5f:ab:3b:0a:ef:38:e0:a3:69:f0:10:
                    d5:fa:7e:89:e4:98:c7:c5:9f:59:64:40:88:72:b4:
                    fd:9e:8e:75:e0:2f:4e:11:83:4f:a6:8c:8c:a6:65:
                    3b:67:70:a7:69:d0:63:c5:75:bf:a0:45:78:c9:55:
                    80:7e:68:0d:70:bb:47:28:07:68:1c:f9:2c:69:1f:
                    6a:3f:0c:b9:b1:49:e7:76:ad:97:ae:09:0e:1a:a0:
                    33:66:16:2c:54:65:3a:ca:94:98:cd:9e:00:8d:f3:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C4:4D:1C:43:B4:1A:5A:58:EF:FB:52:1D:5D:0E:2B:8E:AB:91:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d56bc9bc-e4b0-353f-9509-71cf2526717d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:cf:62:d9:3f:53:3b:8e:60:25:a2:64:21:7c:b0:81:e8:
         6b:4b:c0:12:8e:09:4d:ee:c2:0c:b5:9f:c8:cd:6a:52:94:56:
         fb:9b:c1:07:4f:db:79:8b:62:78:c0:75:b9:65:5a:c8:87:07:
         48:29:4b:3d:2c:ee:53:b0:f3:2f:1b:3a:de:26:fa:da:1e:59:
         36:2b:3c:3b:5d:e6:5b:1f:b9:ef:29:26:b4:97:f5:54:ce:7c:
         c3:87:01:f5:ad:f2:76:c6:3d:b4:f6:d9:aa:1a:25:93:d3:80:
         b8:7e:d1:70:b3:36:87:5f:85:b4:68:ca:1a:8d:e2:92:a6:eb:
         c3:ac:b6:0c:27:99:3e:39:56:ad:30:b5:93:ab:ea:26:6a:e2:
         dd:3a:7d:f0:cd:95:d9:5b:f1:b2:10:73:5c:d9:85:c4:81:5f:
         9a:2b:46:7e:05:69:bb:68:d8:26:8d:eb:90:81:5e:91:00:9d:
         d8:11:e4:f9:ab:e5:3e:42:0a:c7:e1:a6:f8:91:fd:8a:40:62:
         53:0f:ae:2c:09:61:9b:94:59:77:0d:81:1a:ab:f1:9e:7b:66:
         10:69:61:c3:ef:5b:b3:80:3b:33:fc:73:b9:1d:9b:3c:4c:e3:
         41:ee:84:13:58:b2:8d:31:20:06:cb:55:7e:1e:e3:5c:25:7d:
         d5:f6:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:59 2024 by rpki-client on console-fra.rpki-client.org