Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa
File:                     b5a50cd5-cd84-3688-aa95-558c12a7c337.roa (raw, json)
Hash identifier:          hMPVgYtE+85w9rPQhhw+lVvEcRxi4jNQwyvBex7m00U=
Subject key identifier:   42:02:90:C9:96:64:CA:2B:A1:9E:02:C7:AC:22:6D:2C:56:F2:C6:5D
Certificate issuer:       /CN=7d5cac87-cf05-44e8-9103-c269cf67c04b
Certificate serial:       010D0C9F4328584813088B12C0245C4A37C30840
Authority key identifier: 4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa
Signing time:             Mon 02 Dec 2024 15:44:28 +0000
ROA not before:           Mon 02 Dec 2024 15:44:28 +0000
ROA not after:            Sun 02 Mar 2025 15:44:28 +0000
asID:                     22594
IP address blocks:        134.161.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:08:8b:12:c0:24:5c:4a:37:c3:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5cac87-cf05-44e8-9103-c269cf67c04b
        Validity
            Not Before: Dec  2 15:44:28 2024 GMT
            Not After : Mar  2 15:44:28 2025 GMT
        Subject: CN=2fe27eda-f82a-45a5-a151-7633fd5a75cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:98:7b:b2:b8:86:cd:df:a0:e0:e9:e2:48:db:
                    93:c5:70:b3:4a:2a:5b:7e:21:12:67:7d:6b:92:c7:
                    76:d4:c5:46:38:05:67:47:12:6f:0e:b5:71:50:10:
                    bf:1b:5a:54:c7:ea:b9:3e:9e:e5:b8:de:46:7f:f4:
                    73:d7:09:bb:51:fe:64:6c:99:02:c8:72:90:ea:5f:
                    51:e5:ba:bc:eb:ac:25:3b:67:d9:6e:78:b2:c2:e6:
                    42:e7:1a:2a:80:89:ac:ca:9d:aa:99:15:35:37:6a:
                    5b:0d:cc:1a:09:3d:32:80:6c:2a:4e:e7:f3:36:83:
                    a6:20:46:85:28:48:1b:e0:2e:1d:9e:bb:b8:6b:95:
                    6f:bd:04:06:91:c9:54:b8:96:7c:a1:19:16:24:5f:
                    82:52:85:ca:d4:fd:c7:51:b7:38:51:38:6b:8d:84:
                    f2:81:fb:d5:da:25:4a:ad:3b:7a:9f:66:a0:98:75:
                    18:d4:b3:2f:63:84:8f:96:d1:88:24:28:40:f8:51:
                    df:e2:22:8c:f4:dc:3f:de:0c:c7:70:a3:02:59:b3:
                    c4:17:ad:00:e1:ae:93:62:27:7c:a0:b5:b7:28:b7:
                    e0:52:05:3c:04:84:0c:7e:cb:8a:16:bd:21:7e:5b:
                    19:95:f9:33:94:4a:6e:ca:cb:ab:97:41:83:1f:e5:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:02:90:C9:96:64:CA:2B:A1:9E:02:C7:AC:22:6D:2C:56:F2:C6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.crl

            X509v3 Authority Key Identifier:
                keyid:4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:2c:98:2d:7f:c7:7e:55:18:32:2a:0b:47:5f:f4:9c:2a:
         24:08:d2:b9:66:38:cc:2a:7f:25:a0:d6:fc:bc:95:6f:1a:09:
         d8:2a:50:60:09:47:7c:e8:e8:41:23:76:05:ef:51:66:83:c3:
         57:c9:fa:f5:3b:03:a3:d9:37:86:f1:34:79:d9:43:90:55:28:
         37:c5:10:8e:2f:88:01:90:3f:57:2b:4d:c9:8b:e3:74:b2:09:
         71:eb:47:07:3f:c2:22:d7:8a:4c:52:b7:4b:62:d3:9e:ba:83:
         b1:3b:71:0b:db:8b:17:c8:72:97:b5:cf:fc:69:cd:e3:fb:39:
         36:cf:d7:a8:52:08:b7:05:a9:36:85:f2:60:6e:ec:4f:df:8c:
         95:65:36:a3:95:98:c4:59:f0:4a:d8:59:cf:2e:3d:ba:91:e1:
         04:ac:91:77:61:e1:26:07:1c:f6:f6:f8:bf:ed:50:fc:be:d1:
         47:89:85:11:fc:4e:b4:2a:1b:7f:50:f7:43:7e:1e:17:f6:c0:
         57:2d:6f:4f:15:38:0e:74:b0:13:0d:ba:02:f9:c6:ab:39:d5:
         6e:67:91:de:6f:f0:24:d4:ea:d8:d6:04:19:a2:38:21:a2:4a:
         af:f4:ae:ac:18:73:0a:d1:34:b4:42:6c:e4:8b:99:7d:3b:5a:
         5a:44:39:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org