Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
File:                     b6aef4d5-7853-36ff-91b5-a441b0020316.roa (raw, json)
Hash identifier:          koLihVoJJDgENxNYx5K+tDBl4kqhBQkMnO4HBsIctlM=
Subject key identifier:   5A:9F:18:70:90:2F:D3:4F:62:58:86:91:0D:79:50:70:D1:3A:7D:00
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F43285847213B22026E13F134C1C3AC80
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     1403
IP address blocks:        96.127.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:22:02:6e:13:f1:34:c1:c3:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=b36b556f-34c3-47cf-a77f-dffaae67a76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:81:83:fd:33:65:43:c5:12:76:60:da:fe:
                    c7:86:b4:b9:c1:23:54:19:af:05:2e:ef:a5:7f:85:
                    98:a2:c7:1a:58:ed:5a:9b:07:60:e6:32:35:9f:85:
                    40:28:58:e3:80:b0:e9:9f:d2:4c:84:15:1d:99:4d:
                    00:0c:44:36:74:d6:b4:58:c0:ac:a2:18:60:30:c1:
                    d7:9c:86:92:83:29:e4:e7:9f:32:56:52:c7:54:f8:
                    4b:80:22:07:0a:36:fe:9e:95:40:67:9f:31:aa:39:
                    42:66:29:e0:49:1d:31:7f:34:f3:33:06:5e:30:58:
                    b3:96:08:fa:4a:40:5d:22:33:48:51:8e:4f:7d:22:
                    50:24:7c:c7:75:15:6f:35:37:fe:d2:37:34:35:35:
                    ab:b4:53:09:c5:ca:d8:4c:be:65:f7:46:51:22:e9:
                    8c:82:02:c2:5c:54:35:6d:2f:45:1c:98:fa:54:2d:
                    ea:ad:92:3d:83:ea:da:26:eb:6f:15:15:11:77:2b:
                    ac:04:4d:12:3a:b2:e8:1e:1e:99:bf:65:93:52:ed:
                    73:d6:70:95:74:22:b9:ff:0d:dc:2e:78:6a:35:1d:
                    96:c5:23:a6:8c:40:b1:e5:28:3a:13:95:e1:1c:34:
                    36:f8:1f:14:ea:ac:74:91:5b:94:ce:09:a8:2e:b2:
                    91:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9F:18:70:90:2F:D3:4F:62:58:86:91:0D:79:50:70:D1:3A:7D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b6aef4d5-7853-36ff-91b5-a441b0020316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:44:8a:4e:a0:9a:40:ce:81:82:c7:81:5d:ca:81:aa:2a:
         d0:1b:ba:57:36:0a:b1:90:9a:a3:ea:83:9c:d9:7c:6a:83:22:
         50:58:b3:09:ae:b4:4d:ad:8b:49:8f:78:9c:7b:2c:01:2d:b9:
         ea:e4:f8:58:e4:27:64:a2:32:3a:f2:30:08:3e:62:8c:9f:bd:
         04:ab:91:9c:b7:1b:85:98:d9:cc:71:7c:ab:c9:e8:6b:79:d5:
         b1:d8:0a:f4:98:b7:39:d0:c6:26:d0:c2:7d:5c:82:17:85:42:
         db:41:27:64:f7:7a:eb:76:ce:6b:f6:64:0c:91:20:42:90:5f:
         4a:0e:66:67:19:2d:33:2b:b1:27:8b:f8:83:e9:7f:33:52:ab:
         d8:66:e6:67:d7:3d:73:72:e2:8f:9d:7f:fd:1b:4d:58:39:99:
         d5:d7:a0:1a:ad:c4:9a:e0:66:5b:12:4c:db:38:11:6c:c7:be:
         6f:df:5d:c5:66:bd:7c:19:24:f1:f0:9b:bb:52:39:b3:3c:56:
         ff:fa:52:7d:00:22:0e:4c:e9:ee:c8:3d:1a:3f:18:de:26:e7:
         6c:49:ea:90:36:d5:54:ac:ce:94:d4:62:a4:5d:1b:37:ee:c7:
         d0:45:9a:b2:bb:9c:fd:c8:6b:6c:bd:8a:e6:d2:4d:cb:73:90:
         f0:a2:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:33 2024 by rpki-client on console-fra.rpki-client.org