Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa
File:                     cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa (raw, json)
Hash identifier:          BznDuH928vLVejv0IHNUrBJS/mDZCE3hsr5NI789D78=
Subject key identifier:   34:DE:6E:91:5D:1C:FB:9B:3D:9E:6F:57:B4:AB:C1:92:BB:1F:FE:D4
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F432858457A487866F8DF37D3E14BB400
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     27419
IP address blocks:        138.84.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:78:66:f8:df:37:d3:e1:4b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=3445380f-6485-4c8c-bfc4-741288518de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:44:f8:d7:dc:a5:78:55:8a:d3:44:4a:a1:
                    d0:75:eb:9a:0d:a8:bf:9a:18:7d:04:9e:86:29:95:
                    74:56:f9:f2:de:6c:da:de:1d:ed:4d:66:f6:0f:88:
                    ab:74:e6:e5:e6:8a:92:b3:bc:b9:d8:35:91:74:75:
                    ab:81:09:66:e8:b0:cc:0e:4b:59:46:d0:da:cf:9b:
                    7c:d2:1b:a4:6d:b2:1d:b5:39:ed:af:f3:38:4f:9c:
                    8b:0b:69:33:de:77:fa:68:dd:59:ba:b7:d1:9d:fa:
                    c6:cc:a4:07:d5:f0:76:b4:66:d8:34:e1:a9:cd:07:
                    b1:2f:b7:0c:df:08:80:6c:d1:78:32:ae:21:e0:f1:
                    93:83:48:31:79:45:ad:9c:6e:99:dd:32:34:61:5d:
                    9b:2e:bd:9a:1c:2c:c3:e1:2a:c7:41:d5:c8:fe:29:
                    d4:a0:f0:7f:c6:fd:ce:5a:f8:90:b8:46:77:34:1d:
                    b1:7b:fe:20:9d:8c:a7:6c:6b:4f:a4:2e:3a:03:8a:
                    5a:0f:83:3b:f5:6d:4b:aa:c3:ee:56:88:39:04:96:
                    95:ae:b5:fc:07:c8:f8:d4:31:a6:2c:d2:45:b2:45:
                    71:d1:ed:48:18:79:6c:27:5d:47:b1:6b:63:6d:39:
                    d5:ff:9d:84:12:68:67:09:3c:90:c3:e0:91:55:f1:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DE:6E:91:5D:1C:FB:9B:3D:9E:6F:57:B4:AB:C1:92:BB:1F:FE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/cae9ff6c-81cd-3f74-8a4c-2b140e485e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:85:0c:31:00:1b:63:8d:a9:18:2d:22:31:e0:2c:13:82:ca:
         19:12:5f:ad:cf:a7:39:a6:4b:ee:93:97:58:e4:aa:99:c5:85:
         ab:28:3a:0f:ce:73:31:ed:ac:2c:07:0c:f5:56:eb:48:66:9c:
         24:41:06:55:ee:f4:a4:b1:13:28:6a:88:22:b2:ec:46:61:19:
         26:5e:9a:a4:c8:03:69:96:84:8b:b3:5a:d8:98:57:33:e8:b9:
         a7:51:9c:df:62:fd:5e:dc:e3:85:27:61:f6:ca:d5:5f:60:de:
         f8:2f:d9:d3:4b:59:ba:2f:b0:2e:b1:2c:27:26:f1:e6:0e:e7:
         96:f8:3e:23:74:96:1c:84:b3:7a:59:5c:58:f9:f0:d9:d3:06:
         5b:45:a2:10:65:00:67:da:09:2d:f3:0f:b8:f6:6e:ea:dd:7d:
         45:9e:da:9b:0a:75:df:d2:80:bd:39:88:f2:2e:ef:4f:64:a2:
         d9:d2:a9:ef:89:40:d0:be:76:93:28:61:b6:a3:95:3c:ea:fb:
         16:8e:e6:7e:ea:94:22:95:c1:2c:5b:93:cc:59:d9:48:c2:2c:
         39:84:2e:f6:9b:8e:f8:3d:b3:bd:39:f9:8f:35:cb:a9:70:de:
         e5:42:5e:e8:32:64:3f:d7:a2:94:89:01:2e:60:24:8a:b3:43:
         3e:00:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:42:43 2024 by rpki-client on console-ams.rpki-client.org