Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa
File:                     f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa (raw, json)
Hash identifier:          Ut1+QTeRzTQoNaSYs72u/u3+0ZLg/HtiXvMwmuyI1jo=
Subject key identifier:   E7:5D:A7:4C:FD:A8:1F:C1:D7:26:23:1F:B0:37:3A:F5:CF:04:DE:C6
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB5BC45868009B126CD8C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     19092
IP address blocks:        199.96.34.0/24 maxlen: 24
                          199.96.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5b:c4:58:68:00:9b:12:6c:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=351ce4d2-8fe7-4943-a05f-110dd1f12ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5d:2e:b4:e6:e7:b4:2b:fb:87:99:4a:3a:61:
                    f5:4b:09:3a:76:14:f7:2d:77:cc:e2:ff:48:b2:3f:
                    0d:d0:60:fb:1d:2d:8c:6f:b1:23:d7:80:da:9a:e1:
                    56:32:e3:d8:6e:c5:6b:67:af:53:c4:61:29:b7:2f:
                    0d:0c:0a:e4:7e:86:ac:31:1f:ff:85:13:e2:03:e8:
                    a1:04:14:c1:3e:ce:0c:39:65:e9:f8:33:ea:18:a7:
                    ae:e2:95:a9:2b:7b:ec:a4:ac:1b:fc:bd:cc:c7:ef:
                    6e:80:ad:b7:ec:0b:ef:95:b7:2b:a2:1d:fa:0c:bb:
                    00:5c:6d:e0:0e:3c:1f:01:53:ef:93:16:a7:a5:0a:
                    2f:bd:17:59:a0:f0:11:29:1e:26:56:7f:05:68:da:
                    da:4e:96:f4:59:a5:52:42:6a:cf:40:22:44:a9:98:
                    0c:ec:3e:9e:8a:8a:34:3c:34:ee:d5:58:85:c1:a4:
                    52:b7:44:b2:8f:f3:43:61:f0:7b:6e:98:8d:52:73:
                    c5:41:65:6b:aa:57:35:7f:9f:c1:b0:c1:1f:1c:b0:
                    72:f8:6b:00:16:0d:cc:6d:15:83:34:e3:26:3c:51:
                    96:ae:20:91:94:44:45:a1:a1:2d:11:23:6c:0a:c3:
                    25:c1:b2:15:30:0a:36:f2:20:10:47:20:99:dc:98:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:A7:4C:FD:A8:1F:C1:D7:26:23:1F:B0:37:3A:F5:CF:04:DE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f3b9e335-8187-3cc2-a44e-54adeb546aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:5b:71:24:3d:22:98:48:a2:31:37:ed:4e:33:bb:eb:5a:bc:
         a7:4c:d6:ad:46:df:6f:e3:29:38:2a:ee:30:0e:26:52:37:b0:
         58:f1:5b:6e:7c:34:34:aa:a0:83:d4:69:ec:23:9e:ba:5a:c6:
         ef:c5:dc:db:32:93:e0:06:aa:4b:03:20:cb:89:98:37:23:ce:
         44:2a:4f:19:df:82:97:8d:43:64:ee:69:c3:de:e1:0d:ea:43:
         c2:86:07:f5:c7:b4:23:85:3a:be:a6:eb:63:01:d3:cd:3d:29:
         55:fd:f0:19:5f:7d:db:a2:cc:d8:9f:c5:10:73:16:f1:ac:d7:
         ac:e6:b9:ed:0a:58:07:5c:d9:70:4a:63:9f:0f:4e:17:24:fd:
         15:9f:97:1b:7c:ba:b6:2d:7f:18:a0:b7:16:c3:65:1f:7d:ce:
         f7:91:67:6c:27:46:ac:08:34:d9:ec:8f:07:66:32:62:28:ad:
         1f:59:a6:f3:c4:e4:07:48:31:d4:3b:cd:e5:4a:8b:e4:b3:c3:
         4f:07:90:19:3f:00:06:42:60:a0:0d:7b:6f:9b:1f:45:0a:35:
         ca:85:a8:92:4b:01:4d:58:bf:e7:70:da:65:47:7e:3a:94:b7:
         96:c3:15:68:d4:01:f9:78:81:53:38:97:95:16:e7:c1:9f:43:
         aa:b0:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:28 2024 by rpki-client on console-fra.rpki-client.org