Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28a4010f-5de3-384d-b9b2-213c332759a1.roa
File:                     28a4010f-5de3-384d-b9b2-213c332759a1.roa (raw, json)
Hash identifier:          36jtT3e/cF5dHqkbt+FIjIklYcht70IynPXhHsMJ4mc=
Subject key identifier:   BC:20:22:08:C5:DE:A3:3E:6C:26:52:CE:C2:73:CA:70:83:F7:5A:3E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475A763C2A3F315C2340D36170
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28a4010f-5de3-384d-b9b2-213c332759a1.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        165.254.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3c:2a:3f:31:5c:23:40:d3:61:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=68390a80-3d27-4d96-ad08-88a013f665d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:d2:d2:8e:d6:1c:8b:9a:a4:e1:ed:5b:d9:
                    be:2b:9a:c7:72:95:e0:38:e8:a9:16:25:66:67:19:
                    78:a9:81:d0:e5:5c:14:12:6b:96:d7:7b:c1:28:da:
                    19:29:89:15:67:77:77:e4:7b:25:f8:80:db:1e:21:
                    1b:58:a4:92:ca:84:eb:76:6e:61:a1:47:bd:79:b9:
                    95:b2:68:47:5d:e4:27:5e:f1:f1:a6:77:a5:87:be:
                    d0:59:b9:73:6a:67:cf:0f:30:ed:b0:6b:4f:6f:89:
                    01:79:76:f5:68:94:89:b5:fb:12:d8:2f:bf:75:81:
                    66:58:d1:a6:02:40:6e:78:86:14:dd:45:8b:d7:ff:
                    57:20:b5:95:7b:7d:a9:b9:dd:13:2e:e8:da:29:26:
                    ae:f0:c8:55:fa:0a:3b:63:cb:aa:77:a7:a7:30:54:
                    b6:ab:66:44:bd:97:be:24:dc:2a:7d:a6:43:8f:29:
                    f2:49:7b:ec:58:9f:af:0a:5b:61:d4:39:e2:3f:99:
                    75:ea:8f:56:29:df:1d:ec:39:89:4e:94:88:a5:f0:
                    aa:48:5b:1e:73:bf:50:c5:70:78:b1:55:f2:d7:9c:
                    5b:53:7b:95:c7:30:60:ba:96:3e:8f:d8:03:45:cf:
                    72:27:b5:57:e1:9b:fc:aa:a8:f7:ac:76:8c:87:c6:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:22:08:C5:DE:A3:3E:6C:26:52:CE:C2:73:CA:70:83:F7:5A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28a4010f-5de3-384d-b9b2-213c332759a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:9c:30:23:cd:18:da:5e:e1:c0:1e:0a:ef:9f:8d:79:30:
         58:f6:ab:a1:ea:1c:97:45:dc:25:ec:d9:9a:6d:c7:91:99:8d:
         ef:8c:96:1f:0e:3a:0d:dc:37:d0:00:ab:87:8e:0d:21:67:7b:
         df:b4:9b:8b:0c:02:50:fa:d2:c2:54:f0:6a:34:3f:f5:f7:b5:
         ac:83:56:64:1a:59:e4:54:e3:b1:62:1d:67:a8:a4:16:9b:3f:
         e3:57:42:07:98:de:8d:87:dc:df:87:3d:1f:f2:21:2b:d8:f7:
         e9:14:a4:59:5e:31:fb:bc:b3:f9:d8:f1:87:03:97:0c:e7:8c:
         fa:9a:fc:0c:8f:c7:2c:b7:f0:53:37:44:6e:bd:05:68:5a:62:
         37:ce:5d:4a:f9:d0:ef:7c:af:f2:b3:fb:6f:bb:13:a5:88:da:
         d8:eb:87:67:b4:4b:b8:fc:fc:62:c1:35:c9:58:d0:5c:7d:f2:
         50:10:f0:48:91:ad:95:14:8c:03:1f:ff:0c:b5:8b:4b:46:55:
         94:42:94:2e:a2:c1:5f:04:b2:80:cd:7d:e6:a4:2f:a0:49:a1:
         ec:5d:ee:13:61:e7:07:b1:29:47:6b:c9:a3:f8:d4:64:d6:57:
         20:7f:2a:51:af:12:eb:24:be:1e:e4:69:d3:76:fb:a0:9d:32:
         b0:53:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:59 2024 by rpki-client on console-fra.rpki-client.org