Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d22d47a8-92f3-32e5-993f-158939d33f63.roa
File:                     d22d47a8-92f3-32e5-993f-158939d33f63.roa (raw, json)
Hash identifier:          F2hCSHHoDO2RjQMgowhQ/k0+zZ+q8z4lUtG1ZK6x1CY=
Subject key identifier:   98:92:C7:6C:06:66:12:F3:FE:CA:5C:DA:C9:8D:76:B1:A6:50:76:74
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285847A73BE78B72DF4B8F0D492780
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d22d47a8-92f3-32e5-993f-158939d33f63.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     16462
IP address blocks:        134.87.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e7:8b:72:df:4b:8f:0d:49:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=cc9486eb-3a47-4129-a698-9b132bbb6c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:c9:be:01:ef:4a:6f:05:b0:ca:35:5f:2c:
                    20:d7:fa:82:52:ca:86:53:c4:71:50:69:55:8e:b7:
                    f4:60:0a:c4:81:2d:ef:5d:e3:a2:80:10:4e:c0:1d:
                    7b:4c:91:8d:e6:15:04:2d:d1:5e:2a:cb:47:29:53:
                    13:bc:79:5b:1e:00:e9:ee:a9:41:55:54:76:ea:31:
                    eb:6b:ec:f1:7a:d7:25:f9:53:cf:7f:44:77:3e:16:
                    5e:bf:29:df:9e:66:f9:06:58:93:95:ab:46:38:6d:
                    df:bc:bf:34:52:14:80:55:f8:c1:f2:ac:8a:67:17:
                    6b:11:5a:2a:a7:5a:e6:a8:f8:79:f4:37:3c:60:ee:
                    bc:22:12:6c:b6:79:da:76:fd:4e:24:2c:80:25:29:
                    ac:3b:a1:f8:a8:bc:b5:93:b3:b7:fe:de:e6:00:7b:
                    05:1e:29:52:d2:bc:4b:f0:df:8b:4e:18:48:b3:c6:
                    9f:ef:a5:fc:de:d2:10:f6:60:d5:e5:ca:d9:f5:f5:
                    45:ee:37:3b:08:f8:11:b1:d6:e0:bb:7d:c4:84:de:
                    b5:fc:79:ed:a6:8e:bd:ce:d0:1c:13:37:f0:4e:c4:
                    2d:7e:80:7e:f6:fc:7c:42:22:6b:79:a3:be:f2:64:
                    ea:7d:c3:83:40:00:2a:37:fd:62:95:d3:21:e3:c8:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:92:C7:6C:06:66:12:F3:FE:CA:5C:DA:C9:8D:76:B1:A6:50:76:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/d22d47a8-92f3-32e5-993f-158939d33f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.87.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:57:af:d7:77:d4:50:3f:f7:e8:cf:ea:e5:21:8f:11:95:
         b1:4e:87:7b:68:53:fb:82:08:76:bd:72:e9:cf:c2:4a:46:ef:
         06:44:2c:1b:5d:25:ac:d2:52:00:7b:2a:a0:57:29:a9:35:84:
         d3:e3:de:3d:ac:1b:27:44:f0:a6:41:8b:12:b4:61:d6:f6:98:
         9f:ee:e3:c4:7f:7c:f6:99:38:34:26:7a:91:cb:bb:26:00:ca:
         98:02:2d:58:58:78:77:d7:71:fc:5c:ed:24:63:5d:24:cc:68:
         69:e2:3d:95:17:46:5b:43:6f:93:51:e8:c3:ad:b1:0a:ca:79:
         75:fb:eb:26:01:8a:ed:c8:39:08:1f:ed:49:d1:32:a8:64:8c:
         d1:84:d3:a3:58:5e:36:2b:e0:92:19:cd:e6:16:f7:ac:9f:9b:
         bc:b4:a8:6e:f8:fd:db:48:9a:b2:8d:ad:ae:26:ca:77:c2:df:
         a3:14:42:89:df:ed:c9:52:45:67:88:6c:7b:4e:80:9a:48:cd:
         d5:cc:9c:17:5a:b1:93:2d:80:5f:20:68:2f:ea:a8:6c:d2:b7:
         5a:19:8d:a6:bf:49:be:8f:9a:88:43:23:cd:75:7f:74:29:1e:
         66:f3:9b:fb:dc:2f:7e:a2:82:82:72:7d:73:a9:30:d7:ed:1d:
         ce:44:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:09 2024 by rpki-client on console-ams.rpki-client.org