Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa
File:                     7de7fc63-8c26-337c-aa22-39f433f6354f.roa (raw, json)
Hash identifier:          /kcV3O4VycQrOMkdvZ5Z/Mb19vtMLAmZjNqhv68CKKg=
Subject key identifier:   0F:82:98:58:E9:70:6B:89:8F:DC:63:8B:3B:B3:B9:86:76:C4:86:AB
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584789EBFA6B3368626422605900
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     1239
IP address blocks:        172.84.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:fa:6b:33:68:62:64:22:60:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=b1ad877d-d34e-4afe-9707-58835f421a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:51:8e:60:52:4d:75:71:01:4c:6a:d6:54:64:
                    08:11:ab:08:59:51:a2:c7:bb:c6:f9:22:12:27:41:
                    ff:36:0f:93:13:f9:78:47:7e:83:69:4f:00:cd:8b:
                    ea:2a:34:57:4b:26:7e:92:17:1b:cd:ef:c3:c0:60:
                    e3:e3:39:61:29:4d:10:91:02:cc:89:40:f0:f1:43:
                    37:09:30:e3:b9:70:f3:a8:95:9a:44:d3:61:4a:7d:
                    79:8e:96:3f:43:f3:48:5e:a7:8f:28:4e:98:c8:c8:
                    07:54:ab:a4:a4:f0:e0:27:1d:4e:91:2c:c5:9e:f9:
                    22:e7:4c:c3:53:b6:2a:da:ab:9f:3d:18:30:17:19:
                    19:fe:7b:d9:73:fd:d3:06:94:df:4d:e2:fe:51:85:
                    80:8d:b1:85:43:f3:0f:5b:d5:3e:80:22:55:8c:06:
                    07:52:68:55:0a:ab:a8:6b:7f:69:04:80:6f:b6:ad:
                    c3:b7:54:34:df:0a:21:0d:0c:3f:97:e4:54:8d:06:
                    3c:ff:f3:6e:66:8a:b1:56:1b:63:48:dc:e8:f5:87:
                    5e:fa:dd:dd:09:07:b5:89:7a:c1:16:01:1c:90:19:
                    98:c1:c2:9b:97:01:79:8c:25:61:08:95:26:cf:83:
                    d2:5c:ad:69:57:dc:10:5a:7b:2b:5e:6a:85:59:16:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:82:98:58:E9:70:6B:89:8F:DC:63:8B:3B:B3:B9:86:76:C4:86:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/7de7fc63-8c26-337c-aa22-39f433f6354f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:96:5a:b7:19:27:22:5c:51:bc:8d:16:5f:a2:1e:9e:0f:df:
         65:bf:83:3f:31:1c:e7:dc:be:b2:7c:f7:df:13:de:55:39:4e:
         a5:85:9b:5e:d9:b2:a3:fd:08:56:d1:63:3f:1a:1e:b2:40:9c:
         28:01:c5:86:cc:2c:ad:78:07:98:a2:97:24:df:66:ae:aa:9d:
         ea:c8:0a:1c:a6:69:37:aa:7e:92:f2:5a:40:b5:53:fa:7c:60:
         b8:9e:43:8a:0d:7d:2b:6a:83:d5:40:aa:d8:e2:af:b6:95:f1:
         3a:e0:8d:5a:8d:3c:25:3f:df:e9:e9:2f:90:aa:a8:08:ec:f6:
         41:46:aa:a4:c5:9d:70:2c:a6:d1:7c:54:9f:07:43:84:69:77:
         2c:ce:d0:eb:7e:10:82:26:fc:e8:7a:b3:34:1a:a1:b4:86:ad:
         92:52:75:5a:c4:41:10:8e:02:78:03:07:11:53:49:74:91:7a:
         f6:6e:04:2e:d4:22:1e:1a:ea:4c:a3:c5:f5:be:35:cc:a9:cd:
         96:38:40:27:e3:dd:f1:1a:2d:b7:34:b2:b8:70:6e:fc:65:a5:
         53:80:f9:74:16:3a:72:c2:a3:48:f7:83:bf:74:7b:47:70:bd:
         0a:6c:ee:a0:d6:04:15:42:c2:1f:9c:f7:16:61:b4:d0:38:6c:
         b1:da:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:25 2024 by rpki-client on console-ams.rpki-client.org