Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
File:                     643bc75f-3310-37b8-a7ac-664e69139fad.roa (raw, json)
Hash identifier:          MrLODvDDgQ61e99PJmVD4XPUEYu8aMZvVWGERBX9GYo=
Subject key identifier:   96:4E:E6:62:92:E3:E0:E5:F0:21:30:9B:CF:83:A3:3F:D4:BC:11:B2
Certificate issuer:       /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Certificate serial:       010D0C9F4328584722A079E32AEA8E305D903C70
Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        195.85.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:79:e3:2a:ea:8e:30:5d:90:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=cd6d3808-58b1-43a5-aba9-811fed500c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d2:e9:bc:f6:5f:e5:26:3c:89:c5:05:02:a2:
                    c4:b8:77:8b:70:a1:20:7b:e3:c8:ea:d0:02:d1:3d:
                    bc:23:7c:2b:a4:c9:ea:6c:31:20:e2:26:de:7d:98:
                    f3:3e:ab:41:0c:82:59:67:81:c1:04:05:da:c7:99:
                    9b:8e:a5:c2:0c:20:08:a9:41:cf:d7:17:d4:85:1b:
                    60:4f:a8:28:45:56:6b:10:71:b0:3f:72:7b:df:1a:
                    5a:aa:86:ea:26:a3:24:9f:2f:fe:12:65:72:fc:7d:
                    8e:39:54:3a:a5:bc:3d:2e:e4:85:cf:f3:38:74:86:
                    1b:44:c3:98:0b:39:04:f5:48:79:99:45:88:58:5d:
                    01:60:11:72:5b:d3:d0:74:e7:6a:75:46:04:a7:26:
                    7b:26:6f:55:96:8a:f7:71:2f:06:70:66:64:bc:32:
                    f1:fb:91:76:9a:a5:af:79:c4:f1:04:a4:f7:85:4b:
                    d8:06:39:de:26:cc:a1:c2:66:0d:d5:eb:8c:fe:55:
                    99:ee:9d:b0:c3:77:39:b3:15:88:18:cd:ba:da:a6:
                    f6:a7:4f:70:d5:0b:42:6f:da:53:f1:72:3b:be:83:
                    23:f4:3b:29:9a:45:e3:af:6b:c6:73:8c:bd:30:f2:
                    7d:cd:e8:c7:40:17:8d:e5:08:9e:61:97:67:59:76:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4E:E6:62:92:E3:E0:E5:F0:21:30:9B:CF:83:A3:3F:D4:BC:11:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/643bc75f-3310-37b8-a7ac-664e69139fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl

            X509v3 Authority Key Identifier:
                keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:cd:aa:57:8b:e1:f7:cf:2c:0b:b3:67:f4:ef:11:15:3a:
         3a:77:2c:42:0c:32:f2:b3:3b:33:0f:8b:b2:af:58:fc:0c:af:
         05:c9:0e:58:6e:3b:00:86:63:b3:80:e9:db:a1:35:75:f2:f2:
         3e:52:db:54:aa:0b:bd:2c:33:1c:cf:13:36:86:d8:b4:56:b6:
         c5:0a:6f:80:f1:5f:15:2a:72:fa:ed:38:ce:54:2f:1d:d3:f2:
         1b:cd:34:c6:30:e4:bd:e6:74:6d:3d:64:43:08:d5:b7:c6:c3:
         07:92:03:c1:88:73:71:e4:a5:14:fe:eb:bc:f7:17:9e:d5:b2:
         37:7e:d2:3e:9f:9c:ef:e3:c5:e1:74:15:26:65:63:d3:3d:b5:
         a8:39:9d:9c:e4:da:25:d2:56:9f:78:c1:6b:0e:d6:a5:d6:71:
         bf:e1:4c:8c:12:36:48:55:3a:e8:0e:73:a2:37:a0:9b:6b:5d:
         10:0f:b5:d1:30:18:96:98:c0:6d:ac:8c:73:e7:47:66:d0:ec:
         82:ef:6b:70:25:0d:01:09:76:49:35:e6:b2:af:33:fc:09:f5:
         c8:f7:4c:be:95:10:90:24:16:a2:85:d5:d8:99:6a:c0:b4:92:
         97:e1:5c:07:21:71:f0:50:fc:b0:83:d8:3d:8b:87:0f:55:72:
         e3:b6:f7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org