Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a662222b-7237-3db4-8d5a-0813c2e0509d.roa
File:                     a662222b-7237-3db4-8d5a-0813c2e0509d.roa (raw, json)
Hash identifier:          mIQdgAb8YZLOoOO0jpXu7F8isUb6zALM6yYQFLvl2UI=
Subject key identifier:   B1:E1:D6:2D:07:2B:E3:CA:B8:30:FD:A3:25:6B:B6:E1:BB:2F:18:78
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F432858473FF090CA8C47C587C51D1100
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a662222b-7237-3db4-8d5a-0813c2e0509d.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     398143
IP address blocks:        135.129.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:90:ca:8c:47:c5:87:c5:1d:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=a7494ce8-9a38-4d58-828f-35cb9807eda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:b5:74:1f:6e:d4:f4:da:dc:6f:a2:e4:04:
                    4a:56:09:86:76:0f:e9:84:68:d0:9f:ca:9d:65:5f:
                    42:78:b1:77:ae:1f:4e:1a:1b:ef:f1:bf:4f:9c:b9:
                    b4:56:52:27:a4:72:55:64:df:6f:2d:ea:7b:37:1f:
                    82:ff:d8:34:3e:a9:8f:ae:e3:41:b0:8a:65:68:f6:
                    0c:c5:43:a4:df:e5:2a:8a:7a:43:ad:bb:cb:22:77:
                    fb:27:15:f2:18:6e:bb:82:bb:de:a5:40:42:76:e0:
                    8f:2e:a5:dc:f5:6d:d2:f5:df:5e:cf:f5:4b:3c:1b:
                    6d:94:6a:64:9f:07:60:c6:a5:60:d9:59:41:f0:12:
                    25:16:98:bf:2e:a5:f9:f7:84:38:bd:ca:67:b5:a2:
                    9c:c1:81:3f:01:81:05:78:f1:6e:1c:91:24:e6:97:
                    8f:1c:ce:2b:b0:0e:3c:16:5a:43:ee:46:f7:cf:14:
                    d1:4d:66:7d:62:d7:88:86:0a:c7:a4:8c:90:7d:2c:
                    21:82:f0:04:45:51:67:e8:bc:f9:d3:b4:b6:68:81:
                    be:0c:51:9e:d1:71:ab:ae:62:5c:5e:7b:8b:1d:72:
                    eb:14:97:f3:02:57:bd:50:48:a9:e7:a4:f3:75:05:
                    f5:f7:12:3e:37:8e:f2:fb:66:ae:78:83:a5:84:29:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E1:D6:2D:07:2B:E3:CA:B8:30:FD:A3:25:6B:B6:E1:BB:2F:18:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a662222b-7237-3db4-8d5a-0813c2e0509d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:40:0d:8f:5a:c3:40:b4:f0:ed:f4:a8:2e:66:fa:7e:d4:
         95:3c:70:ba:7e:fc:74:a6:ed:b6:09:94:26:3c:88:d8:c4:a4:
         79:95:af:8f:4d:cf:b2:ac:8f:8c:80:73:74:e3:0c:6b:86:af:
         7a:78:2e:99:3c:15:0e:d8:21:a3:b1:a5:52:57:3f:fc:d7:1f:
         29:25:05:da:bf:cf:55:02:45:ed:6e:e6:b0:d7:41:a6:c2:65:
         b5:45:27:84:58:26:db:75:5b:01:1b:11:42:e8:35:b7:82:0f:
         a2:1a:ca:c3:da:5e:ef:44:93:f7:a9:2d:80:99:99:07:b4:1c:
         4a:95:8d:f9:97:34:b8:9e:7a:ee:c0:21:80:fe:2f:5d:d6:7e:
         89:da:bb:50:14:87:07:f1:22:25:76:1b:af:25:97:d8:06:a2:
         b1:38:e8:42:d9:36:e8:be:2b:fe:79:06:41:8a:b9:50:43:9f:
         8e:c2:61:ec:bf:74:0e:b7:20:15:01:cc:03:c8:2a:db:13:a9:
         c2:2a:c8:25:87:1f:94:5e:f8:77:d0:4e:ab:92:bb:e2:bd:7c:
         1c:46:f0:9a:ee:e7:93:e7:52:86:1e:4c:44:0a:9e:0b:ac:9b:
         79:02:31:0c:9a:95:f2:fc:a9:e2:73:a3:3b:5b:20:e0:3a:94:
         74:71:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:52 2024 by rpki-client on console-fra.rpki-client.org