Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa
File:                     96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa (raw, json)
Hash identifier:          +YOA7n+fwKLplO+TCHeGl3iDf1SY8eyB6f++COqzCcw=
Subject key identifier:   68:80:BD:90:5B:69:89:61:3E:7E:8A:4A:88:6E:11:8F:A3:65:BC:DD
Certificate issuer:       /CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Certificate serial:       010D0C9F432858476C9C173EDB3E90CFE8679700
Authority key identifier: 1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     14661
IP address blocks:        192.26.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:17:3e:db:3e:90:cf:e8:67:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba63dff-a873-460d-a7e8-ce4e073bce67
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=c0976a3d-1807-4cea-b2b5-2f975614d60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:b9:f5:6c:1d:de:2d:91:07:61:98:e8:be:
                    ea:f9:3a:41:bb:8c:e7:cf:71:79:cb:e7:83:50:09:
                    c5:f2:65:59:fb:12:07:ec:7f:dc:c1:00:ad:2e:7c:
                    b3:11:d7:2e:2c:c1:ed:5d:ad:c9:ee:bd:09:46:56:
                    76:06:db:a7:db:3c:6c:c6:6a:f0:bd:da:9d:36:64:
                    22:d2:5a:d7:54:16:82:92:b6:0f:6c:6d:2a:be:93:
                    36:4d:1d:b5:53:f4:ab:69:ef:47:85:26:ba:bb:83:
                    ea:78:a8:f4:14:6b:c3:79:a3:ad:e0:e3:38:4e:ae:
                    03:ef:a8:72:1d:b3:02:63:48:da:24:05:d0:79:8c:
                    c1:83:0a:a4:23:05:cc:58:63:9e:f0:bc:aa:53:aa:
                    f7:d1:d9:58:d3:0d:b2:80:c1:89:31:91:67:98:ab:
                    a5:c4:b8:59:c3:48:88:57:32:d1:66:1e:da:8b:44:
                    43:2e:30:c3:7b:b7:03:0e:33:48:30:f5:63:47:98:
                    63:c0:ac:73:f3:4f:7c:67:b9:ca:fe:a3:87:ff:cb:
                    59:3c:a3:ce:04:6a:5c:25:80:e9:7f:39:83:6b:79:
                    93:22:68:73:28:8b:f4:17:d6:98:c4:9d:bc:76:52:
                    cc:ac:3d:c2:57:cd:2b:4b:09:7c:93:ce:4c:9b:90:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:80:BD:90:5B:69:89:61:3E:7E:8A:4A:88:6E:11:8F:A3:65:BC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/96f3d1c6-8ac0-3937-bdc0-b91887e4759c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl

            X509v3 Authority Key Identifier:
                keyid:1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:01:c4:fd:c0:d2:87:f9:10:aa:00:ab:3d:33:fe:88:ac:
         e5:3e:41:7a:f8:03:4f:41:f4:45:90:20:ec:cc:4a:35:cd:44:
         d3:77:e6:c5:99:c4:57:38:45:f1:41:63:58:de:bf:7c:76:b4:
         7b:e2:aa:2b:9d:1b:37:b0:b8:e3:dc:29:cf:0f:a1:19:36:79:
         9c:80:a1:16:ca:25:f1:20:9b:f4:24:a2:47:8f:cb:e6:91:fa:
         ca:5c:bb:79:be:59:37:c6:68:09:28:d7:f8:cc:c7:3b:54:af:
         56:07:3d:12:8b:60:a5:18:6c:c6:ca:c5:38:01:a0:56:a1:da:
         2b:2c:0e:c1:d5:99:ff:5a:17:89:3e:48:bc:c9:09:73:42:9e:
         ef:66:74:b6:92:f5:71:60:44:5a:59:ef:47:2e:8e:7a:4f:51:
         bb:85:15:eb:3c:29:4e:53:72:d9:69:34:44:62:0c:10:74:ff:
         fb:03:76:9d:aa:10:b3:8d:42:45:6a:1b:84:80:53:05:b2:1c:
         7b:3c:f8:1c:09:ad:c9:e7:f5:63:bd:cc:2a:7e:c4:99:83:0b:
         a0:ee:63:b9:34:2a:e4:3e:8d:51:bf:a6:4e:f6:4b:c4:33:a3:
         54:28:bb:6c:2c:92:d6:84:67:41:21:45:20:3f:81:ae:82:58:
         0e:f3:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:39 2024 by rpki-client on console-ams.rpki-client.org