Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
File:                     6b98da56-6d05-3af9-8826-f7a70da179a0.roa (raw, json)
Hash identifier:          sRldG0M/rn9qnB5qjhCJZU/7OW3kNbK7LUFeGHM/4P4=
Subject key identifier:   6E:8F:C5:7F:B1:B2:F6:6F:8E:9D:4F:10:FB:A0:41:20:EB:45:4C:CD
Certificate issuer:       /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Certificate serial:       010D0C9F4328584722A079F6B561201FC33A7440
Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        195.85.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:79:f6:b5:61:20:1f:c3:3a:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=23eabea5-21eb-4043-bb62-f78a1836f8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:34:7a:97:2c:cd:de:4d:c3:7a:ba:a4:d9:
                    93:61:4b:20:15:d5:8e:86:b2:b7:56:c8:dc:a8:b8:
                    08:1c:a2:cf:67:22:59:17:c9:1d:16:dc:8e:65:6c:
                    e8:5b:ec:bb:f7:b5:16:bb:82:3e:fa:05:a3:b1:8e:
                    19:8d:d7:de:02:8b:60:51:9e:09:4a:36:f4:ce:72:
                    45:ab:d9:4f:c2:91:0d:93:20:47:14:67:96:bd:3b:
                    33:f2:a7:9c:5a:01:e9:26:ba:c5:f3:69:01:c7:02:
                    47:72:19:b9:02:8f:a7:46:42:e2:89:80:0d:ac:e5:
                    3f:d4:d9:bc:52:d5:e5:db:92:96:64:f3:a6:69:39:
                    31:c1:1f:be:0d:45:40:b7:37:e7:0d:a8:fb:7c:bb:
                    18:7b:7e:66:8b:e9:9a:12:1f:17:a2:53:61:45:36:
                    f3:7d:70:9f:53:1f:f8:7a:58:00:d3:47:c9:d8:d9:
                    df:5c:0e:7b:c2:3a:ca:75:05:be:98:51:a3:45:c7:
                    d6:90:64:ca:f4:77:b0:9f:09:9d:e3:f6:d4:a9:59:
                    86:69:d9:4b:5a:a3:c8:b6:5f:28:07:a3:dd:90:9f:
                    81:5a:03:2b:40:da:10:d3:db:02:96:a9:c6:da:62:
                    4a:1b:9a:41:5a:18:ca:c1:31:6f:86:14:2c:62:1b:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:C5:7F:B1:B2:F6:6F:8E:9D:4F:10:FB:A0:41:20:EB:45:4C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl

            X509v3 Authority Key Identifier:
                keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8e:e3:48:17:ff:41:a3:af:9c:4e:9a:e4:ef:62:5f:68:72:
         3f:df:81:ca:4d:fd:9d:40:49:98:31:d5:d1:96:c2:b5:ca:ce:
         0a:37:1b:30:0b:9f:a5:01:d4:84:bf:d9:42:cd:5a:ce:71:3b:
         14:12:33:7e:37:9f:9c:ba:8a:a9:3b:53:f6:ce:d2:bb:30:8e:
         d5:d1:88:80:a7:12:5a:fd:97:db:8e:be:ad:5f:2c:59:7f:d5:
         fb:45:72:fd:20:c9:5d:64:2f:fb:e7:c5:55:21:8a:72:78:37:
         82:bc:0a:87:e5:b8:41:ba:26:c2:46:8b:64:bc:81:53:69:0c:
         a4:8b:93:d6:97:9c:ec:58:3f:b9:ee:8d:e4:7f:77:39:21:4e:
         aa:bb:3a:ae:c5:82:ce:23:86:db:2c:2d:35:bf:e2:28:5e:89:
         3c:32:7e:46:c4:d0:1d:c1:d1:13:d8:98:8f:7a:8f:15:f1:3c:
         11:54:75:8a:d5:f5:71:d1:12:d2:85:c6:af:3d:ec:49:14:e7:
         36:c5:a7:1c:d1:28:58:f4:9f:39:6c:26:b9:c0:6e:86:0a:ae:
         6d:37:0e:a3:a8:b0:bd:20:da:23:97:04:cb:74:f5:85:53:17:
         ad:04:6f:52:62:c4:f6:61:99:60:f4:1f:05:6b:36:0b:14:9b:
         5a:95:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org