Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/dbf6334a-79ac-353d-afc0-a479109483bf.roa
File:                     dbf6334a-79ac-353d-afc0-a479109483bf.roa (raw, json)
Hash identifier:          Vn/xjhPpkp4bJG+QnoOdES5M7MHPR0ShAzEIgv+hnmc=
Subject key identifier:   A2:6E:02:43:DF:49:2A:EE:40:3E:F0:91:F1:C9:A3:01:DF:0E:92:01
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A76369E7C425B385E5283A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/dbf6334a-79ac-353d-afc0-a479109483bf.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     22110
IP address blocks:        69.160.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:36:9e:7c:42:5b:38:5e:52:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=fa1c3631-af76-458c-86de-4d0021928c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:6a:00:db:0c:73:2d:b8:99:ec:0f:e5:cc:
                    d5:01:f2:e6:95:f8:a2:d5:09:87:c8:3a:da:c0:f2:
                    a8:08:dd:18:b0:2d:3b:7f:98:27:2a:e4:49:0c:e9:
                    c2:24:10:ad:00:b3:b1:69:ff:4f:c6:38:31:37:ca:
                    c5:8f:d1:e2:7f:74:7c:80:b4:23:dd:22:0b:e5:9c:
                    af:2f:44:d4:35:0a:5a:bc:d3:33:e7:9a:e3:75:f9:
                    2f:93:ef:8a:62:ba:8c:0d:93:72:e4:90:41:1a:e7:
                    5b:ff:25:fa:25:37:48:8d:a6:32:82:85:63:82:50:
                    5e:78:24:8d:55:78:1e:aa:32:48:27:be:89:42:a5:
                    fb:e6:73:12:bd:7f:09:7d:ff:c2:d6:fa:c1:d7:09:
                    6f:a5:c3:cb:b5:17:ae:56:c3:48:ca:52:05:3f:59:
                    3a:bf:df:65:49:50:93:55:cb:43:41:9e:f0:0c:6c:
                    60:2e:09:5d:a8:e7:f6:c8:66:56:35:e8:15:12:19:
                    47:9d:74:96:e4:2e:04:b1:f4:14:aa:c8:35:af:3c:
                    f1:3b:15:ec:31:d5:06:b0:a1:31:ee:b0:f4:49:47:
                    00:e0:51:1d:3b:b7:40:5b:4b:d6:71:c9:a2:eb:ed:
                    1f:10:c3:6e:d1:f9:50:b1:88:2f:c4:9b:a8:a3:1f:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6E:02:43:DF:49:2A:EE:40:3E:F0:91:F1:C9:A3:01:DF:0E:92:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/dbf6334a-79ac-353d-afc0-a479109483bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:3a:f6:20:67:53:59:f2:9c:63:a4:09:96:0b:91:63:d3:
         08:fe:41:f9:4c:64:80:cf:ac:2c:f5:1b:8e:a4:5b:36:6c:16:
         3a:aa:50:a7:c2:97:6e:34:78:64:47:53:f4:80:a7:70:f0:c9:
         83:51:f7:e2:b3:c4:cf:0e:e7:73:73:20:7e:bf:bb:7d:1c:e9:
         61:f9:b2:2f:02:26:4d:30:8d:50:b1:a1:76:64:53:b8:ad:8c:
         26:27:c9:9f:82:24:7d:57:0c:9a:c8:3b:8f:c3:9f:8f:a7:fe:
         eb:ad:af:26:0e:3a:cd:fb:58:ef:ff:d5:2c:24:2a:3a:76:80:
         84:4d:f9:5f:e7:25:3b:77:d1:11:71:3f:ad:ac:75:e3:48:5b:
         f5:ec:d8:ce:f9:f3:98:e7:fa:81:f2:c9:fa:0d:54:59:04:5e:
         f4:5a:0c:6c:e9:5a:39:6c:f8:71:87:2d:49:29:64:f5:67:5b:
         b7:8a:71:27:29:fb:fd:47:77:69:5e:ef:aa:b9:1a:69:92:8d:
         64:a3:6e:68:59:c6:a7:01:27:fd:0e:5e:1d:51:34:cf:1a:92:
         15:98:3d:05:4c:22:53:46:d6:19:04:35:b6:7f:9a:95:76:ab:
         c9:9b:38:d5:0c:65:4b:ea:e9:fd:7f:6e:fc:81:4d:56:51:ec:
         cd:da:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:28 2024 by rpki-client on console-fra.rpki-client.org