Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa
File:                     ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa (raw, json)
Hash identifier:          xcig+67m+adKZxEKrY73aJGTWbs0cWsekRDrfROcs3U=
Subject key identifier:   E4:0B:BA:EE:AA:1C:C7:FE:29:E1:E4:D9:2F:DD:C2:B1:A6:5B:29:CB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A76394BBB1B89AB0143AE80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     19955
IP address blocks:        209.221.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:39:4b:bb:1b:89:ab:01:43:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=20121dc9-1c03-4c1c-bd87-77113b091cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:f2:5c:83:19:5e:f8:54:a0:4c:28:b9:78:
                    c2:aa:ca:10:29:bc:c4:16:2a:6e:fb:bd:ae:e4:ad:
                    b8:3f:dd:b6:a7:b2:ba:90:f0:cd:2a:dd:b8:79:c5:
                    c1:cd:52:02:d3:79:c5:f0:90:13:32:48:f3:a9:d3:
                    a3:8e:40:c8:ba:66:16:f9:f5:b7:29:9a:64:da:3a:
                    1f:fa:70:d3:3a:86:2c:b9:cd:a2:0c:34:93:78:86:
                    07:ea:58:2f:e8:19:67:d7:11:45:7d:78:8c:ef:e1:
                    97:45:40:2e:34:16:e4:d0:66:14:02:85:77:55:da:
                    6c:7f:4a:43:81:71:16:2e:a9:b5:96:ea:b2:09:72:
                    25:62:08:8a:22:e2:89:14:5d:06:44:d8:f8:3b:ca:
                    08:68:b1:76:4c:6f:82:3b:22:e8:cc:08:4f:c5:6d:
                    6e:c2:12:80:45:23:cb:82:27:01:97:02:0c:1d:65:
                    53:18:99:58:2a:a4:51:7f:21:9b:fd:6a:48:de:cb:
                    44:19:26:30:ce:62:d2:b9:18:d0:f3:c4:cc:b0:fe:
                    e0:65:0f:6c:80:fa:3f:bb:cd:44:43:68:3b:2e:e8:
                    ff:5f:59:41:36:4e:76:ed:0e:11:de:28:5a:de:ad:
                    7b:e6:12:c1:c6:64:5e:b7:64:1c:39:8b:57:7a:4d:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:BA:EE:AA:1C:C7:FE:29:E1:E4:D9:2F:DD:C2:B1:A6:5B:29:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:47:c0:97:f5:aa:08:b3:cf:14:a5:f7:72:60:35:98:a0:4b:
         eb:8f:43:ad:56:88:03:76:75:66:21:fd:41:27:b4:ca:20:a2:
         f9:53:b3:de:11:c3:57:1f:4e:ed:94:00:24:14:2a:e5:63:b1:
         c2:2e:2b:cc:c5:47:c1:cd:04:3d:31:ea:6e:77:91:1a:17:9e:
         94:8f:d5:91:40:2d:bb:26:90:7f:76:53:10:8a:de:15:6e:b0:
         d9:9a:a4:de:fd:88:12:a9:0f:7b:37:5d:a5:7c:50:51:2e:d4:
         41:dd:04:12:48:6a:ef:57:9f:22:d4:40:44:79:3b:08:ec:ef:
         9f:34:d6:54:bc:ed:8d:03:b1:21:05:48:3b:0f:99:3a:12:ae:
         ec:44:c6:2a:06:28:9d:fa:b7:43:ba:92:88:66:56:f6:04:01:
         9c:aa:38:50:8f:1f:00:71:34:a0:18:4b:16:a5:be:62:09:05:
         f1:9c:b6:b6:5b:63:19:7a:6f:06:18:f2:b5:e5:22:70:90:09:
         3c:66:89:53:f8:7c:ef:e7:37:98:25:5e:a3:40:60:0e:36:ff:
         87:76:4a:7f:f4:14:d2:2d:8a:f5:5b:6f:29:4c:90:12:3e:1d:
         92:93:2f:73:73:34:be:8f:3b:51:55:c1:9b:2e:c0:2a:da:4d:
         ae:59:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:51 2024 by rpki-client on console-ams.rpki-client.org