Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
File:                     51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa (raw, json)
Hash identifier:          zageisOQsTGW9hiAyVUBzf43P63U/z4B0QO6OEp0IPA=
Subject key identifier:   76:8C:96:A6:C9:B4:85:1B:7D:12:42:EA:FF:7A:96:46:85:2D:FD:01
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285847A0414DF251F08F8DB4BAA200
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     11325
IP address blocks:        172.85.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4d:f2:51:f0:8f:8d:b4:ba:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=0dd4cef9-6758-4166-804c-13b773880bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:2a:55:d3:7d:21:36:24:59:01:97:02:a6:
                    b9:66:73:40:ca:2e:c3:bd:9a:cb:79:24:2c:da:7c:
                    cc:09:b2:1f:57:4c:ca:98:8f:32:23:9e:a1:5f:db:
                    fd:64:52:e3:5f:b4:1f:9f:0d:a9:d9:e9:df:57:3f:
                    04:03:d9:a2:14:b2:bc:1b:4f:e5:f3:b7:a4:18:3b:
                    79:b7:95:10:fa:29:37:aa:80:d8:0c:9a:10:e8:24:
                    6b:c7:45:be:ab:02:23:66:33:56:db:14:cb:c4:e6:
                    5f:c1:e1:84:32:9d:a0:dd:46:5d:21:10:d4:b5:48:
                    d9:e5:a4:19:eb:8f:f6:32:54:e4:17:3d:67:d6:4b:
                    c9:e9:b8:93:a2:cc:ff:32:6c:0a:85:c4:05:c0:81:
                    2b:59:e0:0e:98:fe:f5:ac:7e:51:ea:29:c2:93:46:
                    2c:63:a6:8b:aa:ca:64:cb:e3:3b:f8:95:b7:56:cf:
                    5a:0b:1a:8e:5d:b2:20:51:e1:8f:0d:b5:fc:b6:88:
                    f3:3b:f0:57:37:26:b2:cd:83:79:46:58:bb:ba:69:
                    64:30:fb:3b:32:ba:89:42:d6:85:75:46:6c:08:55:
                    9a:7a:5f:b7:4a:5d:d4:fc:87:75:55:37:f1:c7:9d:
                    10:03:49:2d:1f:07:88:e8:6b:6f:e8:c8:ce:73:1d:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8C:96:A6:C9:B4:85:1B:7D:12:42:EA:FF:7A:96:46:85:2D:FD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/51c58520-9aa1-397b-8d4c-2cf7dfb57659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:76:85:95:cd:b3:3a:ee:ba:5b:cb:b9:a3:66:d0:7a:91:15:
         0c:ac:5e:26:13:eb:bb:69:aa:d5:08:42:c3:d6:57:e8:0c:e3:
         5c:05:9f:68:37:cf:35:0d:92:26:aa:c9:f2:3d:d1:18:5a:9e:
         c3:8d:ad:0c:a2:7c:6d:44:c4:b0:75:1d:cc:27:67:d4:6d:71:
         76:b8:fa:76:02:ad:ea:e7:5b:b1:96:92:ed:cd:8e:13:97:f2:
         8f:cb:c5:b8:af:e7:c2:62:0c:7c:d4:ec:01:7f:ed:3b:7d:e9:
         68:8f:c4:26:cb:05:f5:59:9b:27:12:c3:30:b0:27:fe:a7:ac:
         f1:36:a1:e7:7a:43:09:57:d2:8e:40:7c:0a:77:8a:ba:4a:34:
         b8:94:22:6a:88:13:59:1e:2e:c0:a4:06:41:b5:8e:61:51:96:
         4b:b7:f1:f4:96:19:e1:e5:b9:01:11:35:78:b7:6d:90:f0:23:
         26:de:16:b5:26:f4:b4:a2:1f:4f:2a:2a:d9:e2:5f:86:bd:8e:
         95:8c:da:d3:00:7b:60:d2:b9:dc:46:79:61:fc:8f:5e:2b:af:
         2b:8a:f4:99:44:bd:e6:10:18:fd:7a:fb:ec:4b:31:d7:a4:45:
         81:02:c4:54:62:84:03:60:22:5e:ee:b6:df:49:a7:24:d8:d1:
         50:57:aa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org