Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa
File:                     d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa (raw, json)
Hash identifier:          v/1dOlYNVAhZCf3QyPDheVqjrIAjcR9Hc1gcVNomF7U=
Subject key identifier:   AC:5D:05:2E:9E:E9:98:44:64:54:EE:53:9E:0E:D1:AA:12:9C:D8:94
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584718DAF8B970D5FAED99B84140
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa
Signing time:             Wed 04 Sep 2024 01:00:32 +0000
ROA not before:           Wed 04 Sep 2024 01:00:32 +0000
ROA not after:            Tue 03 Dec 2024 02:00:32 +0000
asID:                     17025
IP address blocks:        2001:438:38::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:18:da:f8:b9:70:d5:fa:ed:99:b8:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep  4 01:00:32 2024 GMT
            Not After : Dec  3 02:00:32 2024 GMT
        Subject: CN=ce8a829a-ec85-4a25-b0b6-6c7ce1f83a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:82:ff:3e:44:e3:ab:44:51:6a:53:16:c5:a5:
                    90:dd:a8:5c:57:af:6e:ae:70:a2:41:8c:98:cc:31:
                    b3:80:42:1a:dc:4f:62:6f:50:04:cb:9e:3c:5f:f2:
                    20:00:1f:5e:51:53:93:7f:b9:1d:1a:2b:c6:be:5f:
                    11:88:3b:34:36:ed:5e:1b:1b:d1:48:71:e2:dc:68:
                    7e:d3:bf:fd:98:9b:a6:47:2b:4b:04:82:8d:34:91:
                    1b:7f:3a:c7:49:14:5d:13:88:d6:5c:e5:00:fc:62:
                    a1:b1:3f:55:2e:7f:a6:92:15:6a:36:66:0d:8b:eb:
                    3d:ef:d7:89:36:cc:e8:78:12:77:73:d9:d7:31:82:
                    7c:39:ae:f5:26:0b:fa:54:23:eb:4a:a0:8f:8c:11:
                    1b:45:9f:3f:9c:6b:4f:b3:62:59:12:44:a7:ae:96:
                    50:e7:29:7f:6d:76:47:b1:b7:8f:3d:c6:61:42:49:
                    bf:92:00:d9:15:4b:98:ee:cc:b1:54:60:60:2e:2f:
                    6f:c3:10:e4:eb:40:5a:1b:62:d2:cd:4b:51:d7:2b:
                    f2:bb:66:9b:e3:f7:54:09:8d:3f:17:72:6b:18:2f:
                    4a:8e:5f:db:a6:23:23:88:26:fa:8b:2f:8e:cd:69:
                    15:cd:cd:15:0b:04:59:c0:b6:7d:72:24:e9:11:fe:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:05:2E:9E:E9:98:44:64:54:EE:53:9E:0E:D1:AA:12:9C:D8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:6c:c0:1a:31:1f:e1:ed:94:bc:62:ec:0b:43:38:10:9f:
         58:ca:71:59:c6:17:ca:50:7f:34:77:86:1d:cf:ab:64:88:43:
         e6:70:61:6c:90:99:af:83:47:6b:89:eb:fd:cc:0a:51:bd:b9:
         c6:7f:98:49:6f:f5:f0:23:e5:ce:6a:bf:77:78:7c:35:e8:a7:
         06:39:14:f1:f2:8c:8f:c4:e5:5d:17:d3:75:2e:31:89:3c:1b:
         f1:66:38:0f:6c:ae:ef:1d:f6:39:55:84:b4:d7:65:1b:16:4c:
         60:9c:20:e2:32:87:0c:b6:ee:e1:59:fb:8d:63:78:eb:4a:02:
         60:3e:0a:40:b3:1b:c6:92:1a:12:84:c6:07:27:98:5d:5a:c5:
         b6:49:da:d4:a5:8d:f8:03:0d:6d:30:8f:69:ee:ac:f5:af:80:
         ba:7f:01:d0:a4:88:23:7d:d6:2e:79:47:ba:52:2c:23:58:fc:
         57:18:14:c2:80:ca:99:6d:c3:a3:d9:31:a0:8c:a3:bb:51:72:
         75:74:95:5d:be:e7:d3:25:4f:de:84:aa:56:a9:1c:25:02:89:
         34:eb:c8:ba:bc:cb:45:f6:74:d8:ff:1d:e9:b5:00:bd:d3:11:
         48:c3:52:10:60:8e:5d:de:8a:43:c8:54:88:81:fc:b5:a7:76:
         ac:bd:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:59 2024 by rpki-client on console-fra.rpki-client.org