Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b06ea68-25c8-37c2-bfda-275e421cf11c.roa
File:                     0b06ea68-25c8-37c2-bfda-275e421cf11c.roa (raw, json)
Hash identifier:          IYnB/BuahRQbR8tj83rccurjGx+Zo4V+5aq6auSuEqU=
Subject key identifier:   98:6B:71:41:F6:20:DA:CB:B3:86:61:70:C6:9D:D5:C0:D1:F2:C4:E5
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584793B11A6A1A27E483FD858180
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b06ea68-25c8-37c2-bfda-275e421cf11c.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     47050
IP address blocks:        173.224.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:1a:6a:1a:27:e4:83:fd:85:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=56f4d6db-23fe-4c61-9f11-105e638872c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:01:46:b3:79:d5:8e:55:68:1e:63:3d:ea:
                    52:9b:5e:58:1a:6c:21:c5:b3:a7:5e:d4:e9:7b:a2:
                    ce:36:3d:65:03:32:66:89:e1:18:62:a0:83:81:d7:
                    54:11:26:09:90:c6:bd:2d:df:b6:74:9e:7d:31:4e:
                    17:fd:ee:33:45:d7:64:bb:fa:95:53:3d:f6:83:08:
                    37:c0:3b:70:98:86:a3:18:02:25:c1:6f:0b:72:d7:
                    b2:3c:13:d8:9b:c2:0f:9c:d8:1a:48:af:64:38:59:
                    81:58:71:51:91:99:69:d7:8e:19:0a:93:8b:a8:dc:
                    8c:3f:d1:e3:ad:c6:ae:ce:0c:3c:a1:55:27:8b:f7:
                    90:62:2e:6d:0a:b3:a1:0d:d1:19:5f:6b:15:4b:e4:
                    3f:28:13:8c:8a:3c:59:ef:4e:3c:38:55:0c:c3:bb:
                    f3:2f:43:5c:ed:97:05:6d:ef:77:2b:98:5a:90:51:
                    62:31:f1:e3:54:44:e3:66:71:60:08:d7:fc:23:4f:
                    1d:bc:0b:c4:12:76:6b:1b:c7:a5:31:9f:fa:9b:df:
                    08:e1:74:b1:59:56:c5:4c:ff:54:68:c1:8f:f9:83:
                    dc:a5:74:28:bd:ce:46:d0:79:34:80:2b:6f:2d:22:
                    00:f5:19:c6:21:88:ec:24:12:55:0d:99:f6:89:01:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:71:41:F6:20:DA:CB:B3:86:61:70:C6:9D:D5:C0:D1:F2:C4:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b06ea68-25c8-37c2-bfda-275e421cf11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:ee:9e:c7:60:d2:11:d7:2b:79:8e:04:b4:02:78:87:5c:
         b2:2e:25:44:19:1a:2a:d7:20:e0:37:0d:5a:d2:8f:6f:e7:e3:
         02:e6:df:be:ab:a4:d2:fa:e4:e2:e8:b8:20:d7:92:6c:d4:e4:
         12:5d:24:62:92:f2:9b:93:32:e7:a7:26:c3:a8:fd:4f:ee:db:
         2d:ac:b0:7e:4b:a4:b9:72:f4:8b:d0:c0:16:20:af:cf:4a:2a:
         d6:21:d2:74:b9:00:d7:0d:e2:3f:b4:b9:b9:f9:8a:37:6a:c7:
         f5:fc:62:ee:51:45:e2:a6:da:62:07:8a:5c:b0:60:69:5e:57:
         87:0c:3c:e8:e9:59:73:13:9a:b0:87:6d:0d:ea:1a:fb:50:64:
         bf:01:a4:a1:91:bc:6c:ea:f8:b0:fc:b3:99:43:85:81:3b:54:
         c6:1c:d1:fa:e6:5b:e8:09:66:e2:1b:bc:d7:37:73:70:b4:61:
         e1:37:e6:b8:19:2e:21:98:8f:7b:2f:94:39:6f:88:43:1c:ad:
         8c:0c:99:0f:d0:69:3c:31:3c:50:5f:a9:11:c1:57:e0:2c:03:
         81:48:af:c7:ae:09:98:c3:2a:8d:52:38:cd:38:f8:8b:e6:7c:
         a7:b5:a7:87:03:40:7d:e1:30:8d:71:f3:5e:c1:3c:19:71:18:
         f2:84:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:12 2024 by rpki-client on console-fra.rpki-client.org