Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f485a172-d6b8-3237-ae14-4d7b3153e410.roa
File:                     f485a172-d6b8-3237-ae14-4d7b3153e410.roa (raw, json)
Hash identifier:          UUMvt8hYhnuyxF9I9uDuTOnNSRiHcEp+wuOvViOIYQI=
Subject key identifier:   29:52:63:2B:40:04:5D:04:0A:99:B5:15:36:16:69:B9:41:20:F8:51
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB66298815D8E4A50B9D80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f485a172-d6b8-3237-ae14-4d7b3153e410.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     19955
IP address blocks:        216.119.34.0/24 maxlen: 24
                          216.119.35.0/24 maxlen: 24
                          216.119.36.0/24 maxlen: 24
                          216.119.37.0/24 maxlen: 24
                          216.119.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:66:29:88:15:d8:e4:a5:0b:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=7c8c677e-2685-4be5-8bce-ba7238281bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:4b:75:88:29:79:b3:48:85:bb:da:13:d8:
                    17:bb:87:21:13:d0:32:b6:c7:39:a9:bb:61:07:90:
                    40:ea:c1:1d:0f:89:22:84:14:70:71:b3:d8:a8:1c:
                    f5:0e:33:0f:aa:55:ee:3b:8b:8d:68:da:a6:3e:ce:
                    74:da:95:09:0d:79:a7:e4:35:04:89:72:43:51:26:
                    eb:b2:3b:b5:38:1b:59:e5:46:42:3a:f1:d4:5f:78:
                    0b:0a:8c:b5:32:2b:14:fc:de:33:ab:f6:20:50:97:
                    91:9d:8f:6c:7d:db:9a:47:19:fd:ac:c9:4d:2a:56:
                    97:b0:9c:ae:48:3b:74:b5:52:0e:6f:a8:d1:84:cc:
                    29:75:e7:9a:0e:8f:0e:ec:e2:dc:d7:27:60:b8:24:
                    2b:e9:b1:66:73:41:e7:44:4a:b3:a1:92:3d:b5:ad:
                    67:10:82:29:a8:32:14:a0:8a:75:cc:a5:05:1b:03:
                    9c:fb:73:c6:e7:1d:6c:b0:37:17:51:6d:80:b2:24:
                    e6:3f:95:d0:02:44:d9:18:13:6a:1b:39:7e:26:82:
                    ab:9f:ec:56:9a:8a:53:09:95:7d:10:6f:92:a5:71:
                    a4:84:e9:4f:d3:42:5c:f8:08:e0:63:22:99:c1:db:
                    33:cf:e9:77:8a:f4:c8:b7:50:e8:40:2e:33:22:c5:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:52:63:2B:40:04:5D:04:0A:99:B5:15:36:16:69:B9:41:20:F8:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f485a172-d6b8-3237-ae14-4d7b3153e410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.34.0-216.119.38.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ee:76:42:f8:f7:61:71:13:56:91:e8:56:7f:e8:d3:de:b3:
         8e:aa:3f:69:0e:11:e8:62:f0:69:7d:be:74:9b:9a:2d:4f:44:
         ac:a0:da:f3:e8:5a:6c:24:7d:27:69:d1:af:4b:51:79:5b:dc:
         06:80:da:f1:3e:7b:49:05:cc:c0:6d:d0:01:c3:cd:49:a7:6a:
         76:68:fd:5d:41:ff:c6:93:19:33:65:01:7c:47:b9:9c:62:20:
         6f:06:94:cb:50:ae:8c:5f:f7:a9:aa:e2:57:58:89:1c:63:17:
         25:e7:13:39:45:c2:0f:ad:42:4d:dd:3b:99:50:5f:83:70:e0:
         57:5f:90:7d:da:0d:c2:50:18:7e:19:ef:61:96:a6:a3:42:d5:
         39:95:c4:d2:2e:83:7d:c9:70:88:9e:f1:1b:87:45:a4:3b:07:
         17:38:3c:2c:c1:42:82:01:ac:14:d6:0e:af:9f:01:27:74:67:
         2c:a6:c1:68:5f:df:bf:1b:68:b9:c1:be:59:90:33:fa:79:1a:
         89:15:c1:3a:78:e7:ed:fa:3c:b2:ec:fc:0e:b2:f0:b1:f4:6b:
         8b:70:52:7a:70:5a:c2:8f:01:c3:d2:98:9c:fb:79:f6:2a:55:
         5d:8c:25:6f:ff:0a:35:29:3d:e9:c3:42:e4:8e:5a:99:de:4d:
         46:05:dd:c4
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEdG62YpiBXY5KULnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MDkyMDEzMDA0MloXDTI0MTIxOTE0MDA0MlowLzEtMCsGA1UEAxMk
N2M4YzY3N2UtMjY4NS00YmU1LThiY2UtYmE3MjM4MjgxYmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIBLdYgpebNIhbvaE9gXu4chE9Aytsc5qbth
B5BA6sEdD4kihBRwcbPYqBz1DjMPqlXuO4uNaNqmPs502pUJDXmn5DUEiXJDUSbr
sju1OBtZ5UZCOvHUX3gLCoy1MisU/N4zq/YgUJeRnY9sfduaRxn9rMlNKlaXsJyu
SDt0tVIOb6jRhMwpdeeaDo8O7OLc1ydguCQr6bFmc0HnREqzoZI9ta1nEIIpqDIU
oIp1zKUFGwOc+3PG5x1ssDcXUW2AsiTmP5XQAkTZGBNqGzl+JoKrn+xWmopTCZV9
EG+SpXGkhOlP00Jc+AjgYyKZwdszz+l3ivTIt1DoQC4zIsW4awIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFClSYytABF0ECpm1FTYWablBIPhRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZjQ4NWExNzItZDZiOC0z
MjM3LWFlMTQtNGQ3YjMxNTNlNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHYdyID
BADYdyYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAlu52Qvj3YXETVpHoVn/o096zjqo/aQ4R6GLwaX2+dJua
LU9ErKDa8+habCR9J2nRr0tReVvcBoDa8T57SQXMwG3QAcPNSadqdmj9XUH/xpMZ
M2UBfEe5nGIgbwaUy1CujF/3qariV1iJHGMXJecTOUXCD61CTd07mVBfg3DgV1+Q
fdoNwlAYfhnvYZamo0LVOZXE0i6DfclwiJ7xG4dFpDsHFzg8LMFCggGsFNYOr58B
J3RnLKbBaF/fvxtoucG+WZAz+nkaiRXBOnjn7fo8suz8DrLwsfRri3BSenBawo8B
w9KYnPt59ipVXYwlb/8KNSk96cNC5I5amd5NRgXdxA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:55 2024 by rpki-client on console-ams.rpki-client.org