Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/5758ae62-5902-37bb-a9d9-a4b5fbc925b3.roa
File:                     5758ae62-5902-37bb-a9d9-a4b5fbc925b3.roa (raw, json)
Hash identifier:          73Tb5TxDV/vlPud4c5P3Bv+jKNZpo9pwFxsOJPANGvc=
Subject key identifier:   59:09:CB:77:BB:25:3F:08:18:AF:30:AD:00:D9:7E:BB:D3:81:FA:BF
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F43285847CE6F3D6A29DE6A005C479DF0
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/5758ae62-5902-37bb-a9d9-a4b5fbc925b3.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     397966
IP address blocks:        134.195.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:3d:6a:29:de:6a:00:5c:47:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=a7d4770a-c20c-4a78-9359-9b4e9ab90f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:00:29:93:13:c1:9c:a7:d6:eb:9d:bf:5b:
                    43:10:52:80:79:eb:f5:d2:7d:d1:80:6d:a0:cd:c9:
                    18:a8:4f:a8:35:57:c9:5a:e5:f1:85:90:be:5b:b6:
                    b4:93:7a:e1:70:27:93:5c:6c:16:1b:c2:16:a3:49:
                    7c:50:4f:af:c3:e9:ee:a2:52:d1:cf:75:38:4b:cc:
                    70:1f:60:89:4b:5e:13:19:4e:38:c1:8c:ae:2d:ac:
                    c0:31:d6:01:f0:29:dc:d7:5f:bb:d7:96:fa:e4:30:
                    4f:26:0c:9f:a3:ca:79:d5:a6:ba:43:2b:44:81:05:
                    fe:c8:ce:89:3a:f8:d1:ea:89:ec:0c:c9:c1:8a:9e:
                    19:26:9a:03:75:e2:2b:01:49:aa:f5:64:53:0c:87:
                    59:da:34:2d:82:25:5a:d7:2d:72:6d:9d:2d:65:c7:
                    83:b8:87:f4:b7:ae:61:c9:00:d8:62:a6:13:65:5e:
                    28:28:10:1d:d3:7f:34:c7:bb:6a:8f:9f:c4:a6:22:
                    d8:5b:41:d8:18:6f:b7:19:09:91:44:05:c4:cb:33:
                    c9:12:19:f1:38:0c:b2:8e:9e:fc:2c:6a:82:2b:d6:
                    4e:32:a3:cc:84:43:7f:dd:85:e2:1a:46:0d:9c:23:
                    6e:60:ed:00:63:3a:ea:0b:45:b6:b6:23:45:81:98:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:09:CB:77:BB:25:3F:08:18:AF:30:AD:00:D9:7E:BB:D3:81:FA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/5758ae62-5902-37bb-a9d9-a4b5fbc925b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:96:ab:50:25:52:41:61:ad:41:90:fd:83:ef:08:6a:3c:fc:
         cf:7b:3a:1f:b5:f6:a2:32:a3:aa:94:18:28:ee:a2:90:37:67:
         79:43:55:c4:96:9f:4e:d3:14:8a:13:23:63:ac:23:28:77:47:
         06:76:d5:c8:50:56:46:c2:50:c6:29:e2:53:32:79:05:bf:f7:
         f1:bd:35:ed:d7:ec:86:41:14:3e:39:bc:c3:d6:ed:af:58:67:
         0f:42:37:b0:2b:3e:5f:2a:d4:3c:b1:33:7e:6a:02:99:5d:e3:
         c1:97:a3:dc:0f:1f:71:47:8d:01:e1:52:a8:1f:2d:2c:93:7b:
         7a:fa:89:e7:03:8d:2e:54:12:10:0a:99:8e:49:3f:32:35:76:
         9d:7f:5f:4a:40:60:3c:7e:8c:c2:74:39:0b:22:37:a0:39:2a:
         70:21:b5:d7:43:ae:f1:08:73:d9:7e:a3:bb:82:ec:a1:0e:e6:
         82:1a:2a:db:a4:27:7e:7a:56:cf:3e:64:e6:ff:3a:86:31:17:
         e1:c9:28:5d:44:b9:e4:1a:b5:ca:78:37:b3:2b:dc:5b:06:b8:
         c1:7a:41:2b:49:57:b4:14:42:24:58:12:9f:c9:01:8c:64:19:
         ec:8c:bb:0f:13:be:e7:74:97:f8:be:c5:71:51:fc:94:fc:f8:
         29:cd:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:25 2024 by rpki-client on console-fra.rpki-client.org