Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa
File:                     13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa (raw, json)
Hash identifier:          dqHZcmhOtrgl/wg4xNCZL77m8lx+FKB3cIpFdaZiC90=
Subject key identifier:   2B:7D:09:D5:17:71:5F:CF:B5:A6:55:DD:E8:93:71:21:37:90:CB:96
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584754E0EA759CE4506105476AC0
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     33182
IP address blocks:        138.128.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ea:75:9c:e4:50:61:05:47:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=b2b66f40-5715-43c5-9949-776b0464e03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:a2:73:0e:b7:36:60:e8:40:60:d3:a6:f7:
                    e7:b9:a5:44:a4:80:1b:d5:b8:0c:5f:f2:3a:ae:61:
                    4a:a5:7e:4d:21:bf:93:29:52:d5:a7:61:15:e3:c4:
                    01:80:db:2e:f9:14:ec:63:38:f4:3f:ca:7b:aa:0a:
                    b1:31:2c:ef:2a:60:27:18:50:84:47:91:af:ea:ed:
                    97:09:3b:1f:5d:2d:0f:6d:c7:99:4b:e1:a7:31:3a:
                    14:c5:ed:78:8f:78:37:55:d8:28:cf:a5:2e:02:1e:
                    fc:8d:ec:d0:e1:31:bd:dd:04:17:4f:71:d5:c0:ca:
                    e2:c2:d9:c5:61:d1:2c:86:78:e8:40:90:f1:ff:a9:
                    15:4a:2c:ae:ce:99:31:17:fc:a9:59:03:40:15:25:
                    99:9f:d4:d0:1d:be:85:73:97:ca:4a:dc:a3:1c:07:
                    dc:f1:8d:44:98:b9:73:11:c0:be:7c:2a:43:21:41:
                    e1:6e:97:c4:38:45:7f:81:74:16:de:c7:fc:fd:9e:
                    2c:a2:69:01:10:23:8d:69:2f:9f:a9:43:a6:53:bc:
                    fb:1c:e3:02:6f:ff:ef:09:e5:8e:b8:c8:e4:fb:91:
                    17:c8:11:fe:6c:fa:b4:96:aa:3a:14:ee:6b:e8:20:
                    2b:2e:9b:e1:25:4a:6d:87:d1:27:ce:4a:f6:ff:ca:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:09:D5:17:71:5F:CF:B5:A6:55:DD:E8:93:71:21:37:90:CB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/13195ded-ae5c-3a67-b230-d2c9ab3feb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:87:95:c2:73:e6:67:42:3b:1f:02:70:c2:cb:75:14:b7:
         e2:8a:57:ce:4b:12:0f:be:b7:43:3d:6c:bc:0c:09:62:24:bf:
         6d:2d:67:f9:7d:aa:fe:d0:f7:d2:65:ee:44:cd:62:34:95:3b:
         41:39:96:fa:b2:73:d3:1d:a0:de:e7:17:19:91:3b:2c:1a:91:
         b7:e4:3d:75:cc:7d:e5:ef:77:36:e5:18:7c:77:b6:ef:81:ac:
         37:b8:77:15:26:b6:97:55:ac:e5:ac:e2:ee:20:a9:df:6f:0f:
         76:68:22:89:c3:7a:6c:f5:71:30:dc:43:17:be:ab:57:d9:5f:
         5b:6a:6a:b9:20:df:c4:1b:64:ba:5d:35:fd:b2:d5:37:b8:2d:
         dd:37:c8:79:73:a3:06:8c:1c:38:c2:b4:00:ee:b8:27:93:21:
         74:e1:82:83:46:aa:36:25:54:61:8b:50:fd:f5:82:2a:b9:22:
         4d:61:f9:12:41:a2:0f:35:dc:31:8d:7e:8c:59:48:a0:a5:eb:
         a6:fe:5e:5d:af:cb:76:6f:33:c5:ba:a6:f7:c9:cb:2c:22:d9:
         5d:db:42:b8:7f:17:0b:56:72:66:84:04:34:83:5a:35:88:c6:
         03:69:c1:5c:c6:18:7a:29:0d:47:2d:8b:57:af:f1:7d:e3:c9:
         23:81:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org