Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa
File:                     f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa (raw, json)
Hash identifier:          j93Zni1s4bSCRV+6zcuwq58sav/XJbmyfiKkJVyL/kU=
Subject key identifier:   0B:DE:71:0B:EC:36:AC:BB:59:32:D0:5E:AC:3F:C8:BC:3F:39:D9:F1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB5F17FC1DF3D4CFF87980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     4997
IP address blocks:        216.222.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5f:17:fc:1d:f3:d4:cf:f8:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=3e996665-681d-4507-81fb-3d3086fb22aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:d0:d6:95:20:71:6e:fc:81:6a:b8:34:cf:
                    8c:cd:74:a2:a3:78:a9:0b:f0:1b:f8:3f:7b:b5:35:
                    3d:90:0d:fb:70:02:75:ba:8a:8d:b2:ef:c7:04:44:
                    78:2a:28:6f:36:9d:1e:3b:d8:8c:32:c3:72:0a:49:
                    90:da:f0:93:2d:cb:b4:b0:ab:88:ca:4e:dd:d1:ef:
                    ff:f9:4e:bd:0b:1a:b0:de:cc:22:01:d7:48:48:e6:
                    c0:c1:fd:ae:ac:c8:55:89:77:83:6f:22:a0:4a:73:
                    cb:68:cd:f3:b4:ba:73:f8:a1:e3:f8:43:04:59:54:
                    ae:a0:16:d5:8f:25:13:f7:23:af:a6:6e:d7:06:a4:
                    0e:7c:ef:87:e1:b7:49:e8:17:b8:79:00:46:29:b6:
                    e7:58:1b:0d:35:f0:b4:1f:56:74:03:6c:86:6b:5b:
                    e9:86:e7:b9:bc:fc:94:bc:36:03:36:79:e1:9f:96:
                    1f:3c:70:6f:1c:11:b2:58:57:ee:79:bf:6b:02:11:
                    e4:d4:bc:3c:be:16:77:ce:32:74:c8:cf:3c:4f:08:
                    30:ec:0a:07:1b:62:09:b9:cd:8b:6d:9f:e7:73:aa:
                    75:60:11:b5:8a:f9:97:35:92:9e:03:10:b5:0d:ad:
                    91:57:3e:45:af:92:17:fb:65:9c:1e:7a:3f:14:96:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DE:71:0B:EC:36:AC:BB:59:32:D0:5E:AC:3F:C8:BC:3F:39:D9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:b7:e6:2e:dd:d3:d1:56:06:36:46:9f:91:d0:eb:69:44:
         33:bd:cd:ea:0b:7a:7d:3d:15:1e:f7:51:c4:e9:6e:f3:d6:5b:
         73:3e:a8:fc:72:7a:41:c2:53:3f:06:98:47:86:1d:b6:72:60:
         eb:5a:d5:c4:69:6e:ad:c6:01:39:fe:9f:aa:82:e4:59:a8:63:
         81:18:fc:ba:12:e4:0d:d1:1c:84:46:7c:43:33:0f:b0:1b:e8:
         2d:85:b3:d1:12:64:f0:d8:b3:12:cd:08:37:b4:77:32:54:55:
         ee:c2:f1:b1:3c:49:78:c0:cd:ac:44:e4:3a:a2:8c:1f:28:71:
         82:53:2f:59:6f:31:23:79:5f:e7:c7:22:85:cd:9f:a3:f1:dd:
         42:cf:bd:35:39:fa:f6:eb:7b:44:78:3d:e8:d4:f4:3e:e6:6f:
         dc:69:3c:70:6c:13:2f:1d:c9:65:d5:85:e7:05:78:81:25:a7:
         24:df:91:42:39:bc:c8:ed:70:a2:93:1e:e0:80:47:07:85:f6:
         1b:b3:1f:fb:ba:f6:18:a9:4a:dd:0f:a6:4e:47:7c:e4:5b:ec:
         1d:ce:89:fd:3d:b8:1c:a9:12:34:71:c9:46:aa:71:62:3e:32:
         0d:84:be:c4:10:ce:d6:61:44:55:49:c7:73:2c:76:ea:34:19:
         89:f2:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:55 2024 by rpki-client on console-ams.rpki-client.org