Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d944faf2-80dd-3d57-983e-f715f7ef8b08.roa
File:                     d944faf2-80dd-3d57-983e-f715f7ef8b08.roa (raw, json)
Hash identifier:          Ck4UFzsdYUrKREOHTf7M4sTYUuJsPlN0S9VQoGcUpyc=
Subject key identifier:   6E:E8:A3:6F:FD:42:CC:41:AA:B2:C6:64:B1:B6:82:ED:03:DC:BC:07
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB5FC8BC451F2E95888400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d944faf2-80dd-3d57-983e-f715f7ef8b08.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     395133
IP address blocks:        216.235.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5f:c8:bc:45:1f:2e:95:88:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=6e3e5edd-8b13-404b-959d-3e0248198e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:00:04:f7:05:4a:3c:61:1e:0b:5b:fa:46:
                    d8:a2:f6:96:70:0b:f0:ea:b8:18:a8:80:f9:3b:54:
                    ab:fe:a3:e0:5d:4c:c6:34:67:a0:d1:f3:8d:72:e2:
                    cf:3a:a1:bc:73:00:b4:12:4c:ad:93:8b:35:dc:96:
                    2b:08:59:17:a0:8d:c8:fc:26:04:53:bd:0a:8d:c4:
                    1c:6e:9f:af:f3:12:60:1e:c7:6b:04:b6:2e:62:74:
                    23:41:21:3f:e1:f6:04:e0:1c:81:54:cf:80:66:1c:
                    98:07:28:64:56:9e:9c:0d:0f:7f:b8:d8:9f:96:fb:
                    a5:9c:0e:77:9a:30:bd:b5:41:08:db:af:58:7f:6d:
                    0f:a6:78:06:2e:03:7c:13:b1:b4:f9:e4:4a:72:e8:
                    2b:cf:3c:12:02:ca:03:cf:28:bc:6e:7b:a4:39:85:
                    42:b8:ab:13:2d:28:8e:c6:99:b3:27:d8:a1:1b:42:
                    8d:67:b2:fd:c5:32:d0:43:ea:83:8d:24:9b:4a:4b:
                    09:4f:96:17:06:27:48:fc:a3:3a:fd:9c:7e:d4:52:
                    71:cd:5c:4e:48:7e:1e:31:0d:6a:a9:ab:59:88:78:
                    ec:ee:87:07:cf:51:7f:35:4e:9f:d1:0c:dc:83:dd:
                    47:fc:ed:11:30:f5:36:0f:ac:f0:a8:f3:6a:3b:f3:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E8:A3:6F:FD:42:CC:41:AA:B2:C6:64:B1:B6:82:ED:03:DC:BC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d944faf2-80dd-3d57-983e-f715f7ef8b08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:1b:5e:cc:0c:cd:0a:b0:1b:55:15:4d:6e:dc:3b:3e:f2:cb:
         5e:c3:3f:4d:ff:49:1b:06:21:71:2b:5a:59:fc:3c:4e:27:65:
         fb:09:fa:47:5d:a8:ce:25:65:bf:2c:1f:f9:35:f1:bd:94:55:
         c2:24:f8:02:3a:c0:84:ba:71:e9:b0:d8:fd:ce:06:69:16:c8:
         aa:73:a2:82:f8:05:af:83:c5:56:06:32:ee:94:de:6d:4f:b5:
         76:a5:f1:5c:16:10:83:45:bf:b5:a4:d2:f1:f3:49:bb:f1:23:
         6d:7f:f7:f5:d4:cd:36:ce:eb:3c:2c:2a:02:42:cf:92:ca:d9:
         ae:e6:7c:a7:98:b1:19:40:4d:8f:f7:71:6f:41:7f:a0:50:fd:
         61:38:ac:b4:ab:1b:09:f3:0b:d2:3e:1d:41:2a:73:c5:0c:f9:
         bd:f9:4f:02:5f:53:89:64:32:4e:ab:49:98:dc:29:b2:15:6a:
         ac:30:3c:30:37:3b:92:97:ea:02:6c:53:80:ae:48:5e:73:b8:
         1f:89:54:f5:c1:c2:23:22:ea:d1:0c:7f:e1:cb:43:22:b6:80:
         49:83:39:10:e4:bc:8d:59:03:1f:e7:8b:79:74:7b:a8:19:7b:
         72:21:04:3b:40:1c:45:f3:a1:43:34:ee:24:f0:45:e7:8a:4d:
         bd:a1:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:50 2024 by rpki-client on console-ams.rpki-client.org