Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a6bc90dd-9d6a-348e-bd64-8f99071b9015.roa
File:                     a6bc90dd-9d6a-348e-bd64-8f99071b9015.roa (raw, json)
Hash identifier:          5kFOqsnpUDMSpDvEOcfggsHQ+P68ZqGw9kr1uSiLFRI=
Subject key identifier:   16:86:87:4D:A3:06:6A:1B:F2:13:67:30:CA:32:5F:65:3E:04:4A:1A
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F43285847161052C05F2D26DCD3A69C4C
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a6bc90dd-9d6a-348e-bd64-8f99071b9015.roa
Signing time:             Tue 03 Sep 2024 01:00:31 +0000
ROA not before:           Tue 03 Sep 2024 01:00:31 +0000
ROA not after:            Mon 02 Dec 2024 02:00:31 +0000
asID:                     212238
IP address blocks:        96.9.213.0/24 maxlen: 24
                          172.93.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:16:10:52:c0:5f:2d:26:dc:d3:a6:9c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Sep  3 01:00:31 2024 GMT
            Not After : Dec  2 02:00:31 2024 GMT
        Subject: CN=6873bb03-b362-483e-97d4-d203d522940c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:dd:fc:2f:a3:16:b7:a7:1c:4b:ee:bf:39:
                    b7:dc:7e:7b:6c:86:dd:ba:04:35:86:0d:d4:63:69:
                    15:8a:7e:c4:aa:fb:00:55:ae:d9:44:82:25:d7:f3:
                    9e:21:59:69:9d:fa:fb:2d:ce:c5:83:96:68:0c:55:
                    bd:17:61:b5:35:71:a5:b3:6b:7b:0c:6a:87:b2:95:
                    96:6a:90:52:41:8c:0f:e2:34:f6:b5:6b:95:b0:82:
                    1f:d8:ae:81:88:57:be:47:8a:05:f3:04:b6:8d:5b:
                    fa:11:71:57:c2:98:65:a1:73:4d:d5:63:c7:fc:93:
                    fd:99:f8:11:e1:77:1a:a2:86:70:1f:e1:66:29:31:
                    82:df:fa:2f:6c:bd:b3:b7:c6:91:1d:6e:65:fe:d2:
                    18:06:4c:00:1a:c8:3e:7c:20:fb:13:3e:db:d5:4d:
                    e2:83:47:bf:7c:2f:f4:28:0d:e1:03:e2:a4:2a:d4:
                    5b:41:3d:78:2d:af:21:66:b2:c6:e1:e3:2e:4c:ab:
                    9d:26:cb:fd:f7:6b:ea:6c:f0:d3:c9:44:a0:01:74:
                    d7:52:7c:fb:82:53:2f:a9:b0:b8:7a:29:38:71:62:
                    c6:90:fe:da:85:8b:58:4b:46:fd:db:54:e9:b2:7d:
                    5d:ed:9d:96:b4:b5:70:53:8d:eb:9a:73:cf:7e:a8:
                    47:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:86:87:4D:A3:06:6A:1B:F2:13:67:30:CA:32:5F:65:3E:04:4A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/a6bc90dd-9d6a-348e-bd64-8f99071b9015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.213.0/24
                  172.93.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d8:3d:12:91:fe:1d:34:8d:11:61:f2:3d:04:cd:10:d6:5b:
         74:5a:a2:b4:4c:d5:99:51:1b:c9:e3:fa:1e:5b:fa:33:2a:42:
         7a:4e:fb:46:fb:5b:b9:08:03:6b:3d:56:3e:96:f3:36:9f:08:
         95:e7:60:39:75:63:30:6a:f0:79:ea:ee:a8:c2:ee:61:07:e8:
         ff:dc:47:81:4d:69:fc:f7:3a:3b:9d:8d:da:c2:85:c5:6d:2f:
         74:c8:62:55:b1:d1:0e:8b:67:56:d0:36:7b:14:69:fd:2a:5d:
         ee:cc:b4:f3:84:83:37:4c:e5:89:99:ee:04:1a:db:96:13:f2:
         93:48:c1:24:fb:fc:a6:b5:4e:13:59:38:5e:99:46:36:8a:d0:
         89:6d:fb:67:bb:93:64:74:68:a0:d7:2d:1c:74:a4:49:bb:fe:
         aa:f1:c7:3c:47:db:a7:1c:39:1c:7e:c8:c0:d8:dd:60:41:26:
         8e:2f:2f:c6:ca:97:7f:65:60:63:b3:e2:cc:62:f5:86:83:75:
         e6:07:43:5d:12:a0:9a:cd:24:5f:b0:67:cd:26:11:cb:6e:38:
         c4:f7:80:18:e8:2d:5c:43:fd:38:50:c9:f2:03:af:3d:9a:f3:
         79:bb:da:d9:a8:46:64:95:91:8d:8b:60:64:6c:63:c0:6c:60:
         64:1f:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:33:55 2024 by rpki-client on console-ams.rpki-client.org