Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa
File:                     9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa (raw, json)
Hash identifier:          c5xv/7ZpPgyr7EfvSFOM0X0atbz1troeuXJmFBKpvWM=
Subject key identifier:   A7:99:4C:74:0D:D3:E5:41:79:14:62:38:77:D8:4E:EE:CB:FB:3D:61
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285847521613D288EF63C6C7EFD400
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa
Signing time:             Tue 24 Sep 2024 13:00:40 +0000
ROA not before:           Tue 24 Sep 2024 13:00:40 +0000
ROA not after:            Mon 23 Dec 2024 14:00:40 +0000
asID:                     54994
IP address blocks:        138.113.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:16:13:d2:88:ef:63:c6:c7:ef:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 24 13:00:40 2024 GMT
            Not After : Dec 23 14:00:40 2024 GMT
        Subject: CN=c27932e9-78e8-4ad0-bc84-adfcba567ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:f2:ed:f3:53:4f:f8:73:2f:14:5d:b9:cd:
                    9f:06:23:bc:a1:ea:78:52:cb:18:11:de:b6:d7:ce:
                    26:da:5f:08:b0:cb:52:c5:1a:d8:2f:97:a1:e4:8e:
                    76:b0:08:4c:03:ef:09:27:fe:51:03:a7:20:68:a1:
                    c3:73:af:0c:ec:3e:d3:f9:29:9a:f8:ce:d5:5e:9d:
                    92:0e:d1:0c:ba:d6:31:51:42:f3:b4:25:48:24:fd:
                    16:1f:84:08:8a:09:77:a2:ca:4d:f5:2c:f8:bb:de:
                    26:03:bd:1c:21:43:2d:28:da:70:4c:2e:e1:c4:9a:
                    55:40:12:86:e8:0f:ef:b1:a2:ea:85:a1:26:f5:d5:
                    c3:34:69:96:eb:4d:e1:41:0a:db:0c:6a:84:39:e2:
                    82:d7:1a:28:0b:0d:5e:d1:07:28:4e:1e:bd:a3:97:
                    b1:11:69:23:c4:a3:68:87:c9:cb:28:93:07:fd:93:
                    84:65:19:19:b1:e2:f9:b7:0b:f5:6e:64:45:db:07:
                    a7:73:67:aa:32:fa:7e:52:80:3c:58:6f:27:d3:2e:
                    bf:8a:b7:33:c3:42:9a:7a:d0:28:5f:3f:67:27:94:
                    fa:de:f3:8c:97:b7:3d:ba:d4:32:d7:c3:eb:75:f0:
                    14:a3:48:9d:e6:ad:a4:27:41:12:6c:4f:62:7f:b1:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:4C:74:0D:D3:E5:41:79:14:62:38:77:D8:4E:EE:CB:FB:3D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9bddd997-eb21-3e5f-b29c-7eda9fc09b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:99:42:14:e5:ec:1c:fc:3f:8b:6d:82:de:4a:08:54:99:a4:
         dd:92:3d:43:b9:e9:e9:2c:8d:ad:81:7c:32:04:53:ef:f3:e0:
         28:38:b6:2a:ba:8b:a9:f2:49:e5:a2:53:9d:dd:94:ea:90:31:
         2c:65:95:3d:29:be:1f:08:8b:94:b1:3e:64:f0:ea:33:23:6e:
         85:54:f9:13:a1:49:d1:5d:bd:fd:b8:bc:b5:59:71:35:dd:a2:
         83:6a:a5:9d:db:fb:4d:14:5b:34:44:f1:4f:ba:80:0e:ec:7c:
         e9:ce:db:e7:1f:bf:e5:ee:bd:b0:c7:92:1f:12:17:75:9d:01:
         e8:78:45:a7:23:1b:e9:39:8f:fb:ae:b7:c1:69:fb:3e:51:a8:
         b2:fc:fc:78:f1:0f:ad:a6:e8:f5:18:f5:0d:ae:e9:98:2a:26:
         e8:ac:ed:92:53:b1:2b:09:31:8e:21:53:49:8c:ed:4b:3e:12:
         ff:df:44:e9:f1:38:d5:61:9c:5a:dc:6f:f3:22:85:02:4f:73:
         a6:68:cd:b9:f8:1a:3b:b0:b1:64:f1:82:3f:5c:f1:5d:fa:5e:
         d9:09:82:10:7f:1b:39:b4:2a:8f:34:4b:59:36:03:51:66:1e:
         f2:eb:75:21:20:2c:69:9d:0d:30:23:95:25:00:2e:4c:4b:e3:
         48:96:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:01 2024 by rpki-client on console-fra.rpki-client.org