Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd74923e-ce6c-3592-81c8-11c8d7c2c88b.roa
File:                     fd74923e-ce6c-3592-81c8-11c8d7c2c88b.roa (raw, json)
Hash identifier:          u1kIKd/tNmuzUotvavUOyjUr9u2PuTlZJk5pDkMgq2s=
Subject key identifier:   D9:57:AC:2E:3E:85:BF:0B:10:41:CD:D2:1B:5F:B0:F2:77:26:FB:56
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858473D25FF9F19BA575F0130BA80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd74923e-ce6c-3592-81c8-11c8d7c2c88b.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     6461
IP address blocks:        64.124.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:ff:9f:19:ba:57:5f:01:30:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=cd4a67d7-4bfb-4362-a7fa-ad0bb6975774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:03:d1:27:60:fe:5f:1a:5d:de:75:0d:4d:
                    4d:cf:6f:88:2b:26:b9:92:89:4a:28:ec:a1:3c:c2:
                    5f:c8:ec:01:7f:f4:76:47:d3:92:7f:2a:60:97:58:
                    2a:30:ca:17:e4:41:f9:61:cd:1d:25:92:ab:e5:f8:
                    25:b1:ce:c2:d7:50:f2:2b:64:24:8e:2b:ac:26:b3:
                    bb:37:09:86:1e:22:ce:0d:5e:b9:cc:fd:78:66:da:
                    be:bd:fa:67:5c:20:6e:7d:95:6f:16:e6:4f:3e:68:
                    3b:58:f2:e5:4e:6e:6b:c6:53:c8:5e:17:64:e1:02:
                    f9:ee:da:bd:2e:61:6e:f1:99:41:b8:bf:71:c6:9b:
                    fe:35:42:7f:7b:30:39:7b:62:9e:1b:2e:84:ae:30:
                    48:8c:0b:34:1a:ce:7b:5e:4b:db:0b:fa:83:ea:7e:
                    dc:49:c7:4b:65:58:8f:80:52:3d:a4:7d:32:2d:85:
                    b1:67:5a:64:0b:91:3f:8a:63:65:90:08:d8:0b:86:
                    38:96:bb:e4:6c:31:00:79:5e:1f:39:41:0b:05:b4:
                    90:ba:5c:21:f3:e6:3f:75:72:9f:11:3a:03:45:ce:
                    1e:4f:39:85:dd:2a:20:8d:82:f3:76:75:7b:3a:17:
                    14:ce:0c:96:9f:91:26:ae:57:01:09:a3:9e:7e:c7:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:AC:2E:3E:85:BF:0B:10:41:CD:D2:1B:5F:B0:F2:77:26:FB:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/fd74923e-ce6c-3592-81c8-11c8d7c2c88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:33:ba:c4:53:7f:c0:e6:96:d1:39:cf:86:6e:67:91:36:78:
         1b:c5:ad:e7:20:6e:9a:a3:93:4c:18:4d:b5:81:3c:c0:59:55:
         d5:16:af:f2:e8:3a:20:22:1c:c0:5a:80:f4:06:07:0b:99:fa:
         11:18:f5:61:4d:0d:1b:c7:e9:92:c1:5b:2d:c9:b1:14:33:d6:
         72:38:ea:8f:ee:4f:68:1b:98:d8:b6:d0:1c:15:3b:c0:36:bd:
         fa:7c:55:e3:8a:fc:e3:c4:1d:a5:d2:15:2a:e2:e9:a2:e0:18:
         d6:71:b3:de:ae:f3:c4:ae:b7:0a:d4:b0:ce:cb:25:d4:39:09:
         f4:00:f4:9a:ef:76:45:0b:bb:3b:8b:2b:60:9d:31:01:ec:7e:
         01:fd:95:a2:8e:8e:97:f2:05:70:97:7a:f7:6c:a6:59:c0:5b:
         b8:69:4d:91:86:53:ed:78:7b:e9:24:6f:8d:32:e4:a2:67:3f:
         6c:08:cd:69:b2:d5:fc:3f:5d:cb:ae:73:e7:58:0b:99:7c:f1:
         8a:5c:33:7d:81:e6:cb:c0:d2:79:ec:38:22:b3:9c:03:2c:07:
         88:f1:a7:8c:39:f3:b2:13:62:c2:0b:2a:ce:5f:00:a1:2d:32:
         71:01:2e:0e:c3:0a:ad:c2:69:dc:26:78:e2:64:63:f8:d8:71:
         07:82:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:28 2024 by rpki-client on console-fra.rpki-client.org