Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4c19274-1b31-384e-b73d-997154e18af2.roa
File:                     f4c19274-1b31-384e-b73d-997154e18af2.roa (raw, json)
Hash identifier:          TaLnn1potyLuReCpX0w4CXBS7ec8uCxrrgcrqnY3JoI=
Subject key identifier:   86:01:65:06:14:18:64:8E:4D:70:A0:33:A5:9B:36:19:32:CB:5A:94
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB5EF437D5C9004924CC00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4c19274-1b31-384e-b73d-997154e18af2.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     4997
IP address blocks:        216.222.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5e:f4:37:d5:c9:00:49:24:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=c59a1a78-d1a5-466d-a0b8-959b8babcda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:b3:05:00:86:6d:8d:19:e1:da:01:e8:bb:
                    d3:3d:b3:98:d8:09:25:c6:49:b9:92:c5:52:ff:0d:
                    1b:d0:a0:1c:0c:e3:66:1f:a8:9b:44:04:d3:c2:4f:
                    6d:35:25:2f:9c:99:20:3d:2c:c8:4a:4b:4d:34:0c:
                    73:42:c6:d6:8d:e8:48:5c:4e:85:2f:02:d6:0b:92:
                    f9:70:50:4b:c0:2c:2a:4a:73:c7:70:03:cf:e0:11:
                    54:2f:bb:22:25:e6:84:b2:5c:ef:45:2b:4a:ff:6e:
                    94:d4:4d:91:eb:10:a9:b5:bb:57:b6:3c:15:7e:ff:
                    36:52:d4:de:68:c6:66:a9:41:6f:76:9d:ec:c4:a1:
                    2f:d5:b3:f8:19:bc:61:75:5c:83:c0:66:0c:18:0c:
                    b8:0b:27:55:5b:27:98:f4:6b:8d:50:31:af:19:ed:
                    14:8c:61:41:a3:c6:47:32:22:13:a9:ef:31:86:da:
                    ed:77:56:d3:7b:6f:76:f3:93:20:ee:4b:b3:ff:d5:
                    96:f1:ec:89:d2:1a:7f:fe:43:56:87:76:c6:8b:9f:
                    03:83:96:d5:bf:a8:bc:e2:1b:b2:fe:85:e7:ca:82:
                    87:59:26:c9:d6:2c:30:cb:33:4e:e9:bf:d1:69:62:
                    65:cd:02:0e:09:06:71:05:14:f0:7f:30:c3:e2:83:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:01:65:06:14:18:64:8E:4D:70:A0:33:A5:9B:36:19:32:CB:5A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4c19274-1b31-384e-b73d-997154e18af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:35:f5:ca:a4:7d:68:98:d4:b5:be:ac:5e:25:79:a5:3c:
         93:7b:6b:10:df:82:0e:ce:cd:0b:35:e3:c8:ef:86:33:39:ef:
         cc:23:82:ed:0e:cb:a8:96:9d:25:60:ae:20:74:ed:8e:5f:b5:
         af:c0:ad:33:33:25:7a:9c:6b:c9:7f:f4:f9:19:ad:de:c5:02:
         d6:59:b7:d6:d5:65:64:24:8d:70:d9:30:e9:22:7e:68:80:e7:
         75:6d:b1:8d:f8:a7:5e:4d:94:bc:e6:b3:e7:30:18:7f:03:a2:
         58:fe:a5:e8:2f:4d:6b:7d:92:16:e3:6d:67:02:0b:4d:fb:59:
         05:36:13:60:21:3a:e1:ca:ab:03:b7:e6:11:53:61:4f:0c:4b:
         48:73:49:f6:5c:99:bc:26:13:97:01:ce:0f:8d:6f:40:00:c4:
         aa:2d:e3:fb:8b:58:6d:83:8f:6d:e5:4e:fb:65:dc:d9:98:29:
         17:37:76:02:68:10:82:09:54:d5:38:54:c4:d5:67:6e:fa:30:
         fa:23:02:0e:bd:f9:d1:45:68:db:83:9e:16:56:6b:b6:21:9f:
         00:bd:02:5d:aa:45:42:df:59:f2:49:50:db:22:a4:d9:39:bc:
         8e:d6:8e:54:3e:d8:5c:2b:14:bd:3f:92:44:57:64:14:68:09:
         bd:ff:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:51 2024 by rpki-client on console-ams.rpki-client.org