Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed674d8a-6248-3588-b1e8-430477408621.roa
File:                     ed674d8a-6248-3588-b1e8-430477408621.roa (raw, json)
Hash identifier:          qvZ5n1HfQFs0xu/t+sx2xS5tItHejrtSTPW5b6V4Nl0=
Subject key identifier:   D6:2B:66:1A:AD:28:B7:40:5D:92:9C:AF:53:05:7B:7C:65:7A:AB:27
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847EF918EFE7FE18C464D3BB4CC
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed674d8a-6248-3588-b1e8-430477408621.roa
Signing time:             Tue 19 Nov 2024 22:51:26 +0000
ROA not before:           Tue 19 Nov 2024 22:51:26 +0000
ROA not after:            Mon 17 Feb 2025 22:51:26 +0000
asID:                     397630
IP address blocks:        172.96.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:91:8e:fe:7f:e1:8c:46:4d:3b:b4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 22:51:26 2024 GMT
            Not After : Feb 17 22:51:26 2025 GMT
        Subject: CN=904a5635-927c-4e7c-962a-7085692a3759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:74:30:09:5b:9c:2c:2e:7d:06:00:ab:69:
                    8b:e7:41:ad:ea:35:05:03:09:cd:a7:9e:8f:be:00:
                    19:5c:6a:cc:d0:42:49:ab:fd:d9:da:88:4a:97:7e:
                    da:49:6d:29:19:cd:b1:80:1c:af:35:4d:e9:ac:71:
                    86:1c:7c:e2:1c:9c:62:ec:cd:88:71:1c:53:3c:89:
                    49:dc:7c:86:4b:39:1e:cf:8b:e5:68:01:8b:50:0f:
                    3b:88:96:2e:69:85:cc:03:85:7a:e5:94:b0:86:77:
                    02:0f:41:cb:c5:a9:2a:a9:78:10:e2:9e:6f:8d:13:
                    d6:42:a4:67:ad:71:9f:fa:30:2f:5a:5c:55:28:c1:
                    36:4c:b1:98:d0:a0:cd:1b:0e:cf:f5:f5:9e:cd:b2:
                    62:f0:50:7e:c5:71:cb:13:74:67:14:61:e1:3a:46:
                    8d:a8:87:9a:06:19:45:4d:d0:c0:be:bc:a7:d4:bf:
                    a5:06:e7:31:bb:fb:55:59:ef:df:7b:4b:34:94:db:
                    06:71:c2:44:c2:ce:d7:f0:a1:8c:94:63:6d:dd:5f:
                    93:fb:00:16:07:c4:36:18:1b:93:4d:07:2a:d6:f6:
                    9a:4c:91:8e:f3:ed:67:38:12:d0:84:3a:40:6c:f6:
                    f1:5a:ee:bb:0b:0a:6a:f9:8f:c2:8d:82:62:61:b3:
                    19:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2B:66:1A:AD:28:B7:40:5D:92:9C:AF:53:05:7B:7C:65:7A:AB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed674d8a-6248-3588-b1e8-430477408621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:4e:b9:1d:41:bf:f5:e9:36:90:da:35:e1:04:4b:49:77:
         4d:7d:3c:29:78:7c:d5:32:14:f7:a9:7b:18:13:6f:b3:28:70:
         2c:95:3c:5b:2f:74:d5:83:a8:27:72:c7:2d:4b:0a:23:77:6c:
         51:73:ed:13:82:cd:72:83:22:3f:84:52:9a:f6:7b:72:1d:bb:
         67:57:4a:f7:e5:ef:4c:0d:d6:c9:39:24:e1:ff:df:09:e5:4d:
         d6:aa:51:10:12:5f:fb:6f:e1:94:4e:56:66:93:cc:55:41:4d:
         4c:a7:38:d2:51:24:e7:46:27:f7:9b:9a:f3:06:85:85:d6:77:
         c6:e4:8c:db:e4:38:9a:8d:b3:0d:8a:18:2d:19:3e:90:fa:8c:
         b9:35:91:64:91:e1:a7:c2:f6:74:49:30:9f:7b:79:34:97:16:
         3c:9a:92:e7:c4:48:7b:ea:c9:e8:4f:a9:22:54:99:c5:d7:ef:
         62:29:f2:2e:71:0d:09:07:b4:41:21:9f:45:05:30:9b:9f:25:
         4b:e4:1a:2f:84:ee:e7:40:ba:fb:9c:49:2c:90:9d:d1:a9:d0:
         26:a2:d3:a6:34:e4:bf:09:18:23:5f:cd:38:5a:a7:ce:09:45:
         00:a9:e5:88:7a:af:a5:71:8b:0d:85:50:cc:61:1c:e5:cb:77:
         10:81:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:42 2024 by rpki-client on console-fra.rpki-client.org