Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa
File:                     b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa (raw, json)
Hash identifier:          HiO6INqfEtEdZkYg6B5RFPZoUW8nUyk9isbvtUfaEyE=
Subject key identifier:   02:A5:D5:99:5F:D1:2E:D7:25:DB:3B:DA:D9:D4:23:8B:D6:C2:24:09
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584746EB60D0BBFD2646D6781680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     271
IP address blocks:        134.87.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:60:d0:bb:fd:26:46:d6:78:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=18137374-2655-4ec0-b0a6-65b7b17a87da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:96:29:ad:0b:74:2f:68:e7:67:5d:0c:10:ca:
                    72:b0:a0:96:6f:17:18:93:27:b6:dd:86:8e:e8:df:
                    20:01:23:1b:10:00:55:40:59:d7:5b:c0:6a:fb:e2:
                    27:30:7c:ec:42:8c:b7:85:d2:da:81:c9:59:6d:13:
                    c5:fa:fa:db:50:74:c4:38:d7:d6:87:9a:75:bb:73:
                    a0:41:cb:da:90:1b:a7:d5:49:b5:18:78:1e:39:97:
                    ff:01:a2:52:30:f1:a8:56:93:59:4b:9b:74:a9:a5:
                    6b:e6:8d:ee:ff:65:15:1b:65:da:66:4a:44:ab:68:
                    ba:04:9d:61:8e:33:12:da:8a:d1:f0:22:74:dc:33:
                    28:4e:d0:00:98:ce:e5:b3:7c:f1:ac:a6:b8:4d:1e:
                    fd:3f:09:23:a8:96:98:26:45:22:ea:88:37:f0:2d:
                    ab:2b:7a:5e:4e:96:ed:14:d0:44:9e:5c:09:86:47:
                    3e:0a:ea:6d:6f:f4:85:aa:3b:7b:28:55:1a:cd:3d:
                    f3:98:dd:15:a3:0f:56:9e:49:fb:29:77:68:b8:20:
                    08:7c:f1:81:39:a6:97:c9:83:74:a2:f6:de:4f:2b:
                    16:8e:8c:17:c6:cb:c1:eb:ff:2e:0a:d4:ed:dd:bc:
                    c3:0a:49:9e:4a:0c:0b:4d:e1:01:e3:87:7b:df:8f:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A5:D5:99:5F:D1:2E:D7:25:DB:3B:DA:D9:D4:23:8B:D6:C2:24:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b3b8bb5d-7763-3441-9eed-c65cae7061f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:fc:a8:8c:c3:59:18:c4:eb:81:ef:32:2f:e0:3e:43:dd:e6:
         2c:67:c1:ed:fc:83:7d:7b:9d:0d:a7:99:21:73:03:8d:94:cc:
         33:dd:96:d7:4e:f9:47:86:b9:ba:59:ab:53:ba:00:56:66:ff:
         da:d0:51:06:be:a2:e4:0d:e4:4d:9d:6b:60:38:6c:74:00:de:
         c6:b8:3a:78:ee:38:24:60:bf:8d:da:53:dd:5e:35:31:77:62:
         ff:20:1a:07:70:ad:59:9c:ce:9b:78:70:e0:3e:49:97:da:84:
         63:33:b3:e0:a3:ea:9f:a6:66:8a:78:82:72:11:4d:34:b8:16:
         9f:cb:ad:cd:77:2d:b0:7a:42:52:00:eb:bd:48:3c:d9:01:0d:
         8d:96:ba:31:d8:90:b5:83:e5:b3:c4:de:2b:9a:9f:10:da:5c:
         5c:34:c7:1f:d3:73:9d:64:02:17:b5:ba:fa:22:e2:4e:b3:46:
         ff:8e:5c:79:8b:8e:91:3e:aa:7d:e0:96:c0:b5:f3:ac:21:ae:
         22:f1:37:7a:20:0f:5d:8b:c2:47:6d:71:83:d6:b2:08:62:25:
         30:90:b5:7a:9c:ae:8d:c4:92:79:6d:92:a7:f1:01:62:87:53:
         a3:2d:48:7c:20:6e:30:72:43:a3:e9:a4:06:37:e5:e8:a5:e8:
         dd:64:c0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org