Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa
File:                     5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa (raw, json)
Hash identifier:          ggl5LSRwr4KMzQ0AGmCtD0Eso2wZmWEiuNJfEHZP4bU=
Subject key identifier:   AC:84:1A:0E:88:AE:F7:3D:F5:F9:12:85:E1:10:41:E4:85:73:C6:86
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F4328584789EBEED18E3B2CCE828BC4E0
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     8100
IP address blocks:        134.195.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:ee:d1:8e:3b:2c:ce:82:8b:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=5ceab129-05db-4ea9-9bcf-130f849f9572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:f3:88:e7:fb:94:c2:41:66:68:1f:c8:d6:
                    9e:bf:7f:1e:c7:cc:56:64:e9:69:ad:d4:3e:02:55:
                    e6:52:1d:5c:32:90:aa:b0:d3:06:82:66:22:7a:2c:
                    b5:3e:10:e4:d4:4b:a4:41:27:21:ec:70:3e:5b:e1:
                    01:68:f6:b8:0d:c7:40:b3:ac:5d:a2:ac:e3:d4:a4:
                    09:fc:30:7a:04:ed:2f:35:43:1a:a9:b5:98:3b:45:
                    70:4d:b4:7f:26:35:a1:ed:bf:2e:66:f0:f5:e1:84:
                    bc:25:f7:85:a9:9a:a2:db:1b:2e:be:18:6a:65:67:
                    14:2e:34:34:a7:13:fe:24:78:7e:ee:8f:20:fa:b5:
                    fc:11:aa:7a:87:ea:4f:12:9b:ed:d4:d0:ed:33:78:
                    3a:f2:55:5a:03:08:18:39:f1:21:b0:75:38:83:16:
                    d5:cd:96:41:e3:1c:93:99:57:92:f0:fd:e1:19:a0:
                    d6:91:e6:0e:4e:16:32:d2:ce:d0:d5:32:d7:95:37:
                    b5:9d:ab:10:06:5f:6c:02:7d:97:11:27:09:91:a6:
                    ac:32:9b:e4:ed:1e:5b:26:5a:56:8a:0e:50:06:a3:
                    db:16:02:26:cd:cd:83:16:46:fd:16:62:a4:78:45:
                    24:f3:87:48:70:2d:f0:19:1f:1e:2d:d5:5e:59:e6:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:1A:0E:88:AE:F7:3D:F5:F9:12:85:E1:10:41:E4:85:73:C6:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/5daf9892-f226-3ab3-b20f-2a9c4f0b5d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1d:9a:bd:96:ca:ce:17:c6:c2:3e:a5:30:18:97:39:72:80:
         33:f3:5f:46:d8:8d:44:c0:2a:a4:ce:7d:74:a0:c5:29:ea:bf:
         ed:74:a9:e8:2d:e8:53:c8:90:2b:41:0d:d6:d0:55:8f:d6:a2:
         f1:81:fb:d5:0e:38:14:1d:6f:61:73:05:fa:bb:90:09:23:52:
         91:32:39:b5:4c:d9:7e:c4:81:3b:54:8b:5b:25:09:fb:a1:e1:
         19:24:2e:9e:e1:4b:88:82:31:19:7f:2f:04:4a:23:19:08:5f:
         cd:99:c1:30:0f:f7:53:4e:e6:d2:eb:e9:c5:34:19:1a:07:b7:
         97:82:ad:11:49:83:17:78:07:24:f7:0a:3a:dc:0a:c8:66:a5:
         9f:29:f1:ad:05:7d:88:96:a2:75:b5:7a:8c:bd:a2:6a:03:eb:
         58:bb:92:f8:f7:6a:dc:56:81:dd:ef:12:e4:45:7e:2b:13:58:
         07:89:9e:0f:81:95:4d:33:b3:4c:97:44:ff:89:c0:11:cf:9f:
         f2:d2:13:19:fa:3f:c4:73:6b:6f:cd:e5:8a:a5:01:37:ea:60:
         7c:85:49:98:51:a7:43:b6:1d:5c:68:da:73:ce:b1:dc:b5:8f:
         7b:56:18:1f:77:20:f5:16:ab:c8:e6:e2:62:1d:d3:5a:39:fb:
         0c:d1:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:41 2024 by rpki-client on console-ams.rpki-client.org