Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6096744f-e273-3c7d-94e2-f88af2c6457a.roa
File:                     6096744f-e273-3c7d-94e2-f88af2c6457a.roa (raw, json)
Hash identifier:          LjLdcrFfakzav80O7EvPLVDs3ajGDZngyvCkPb3uyg8=
Subject key identifier:   24:F6:86:F1:AA:C7:3C:00:B2:FE:E8:B0:F4:F3:96:72:8F:B6:0F:F3
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F432858478E1BB387E93C5933D4982080
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6096744f-e273-3c7d-94e2-f88af2c6457a.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     19740
IP address blocks:        172.84.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b3:87:e9:3c:59:33:d4:98:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=a51c3831-94fa-4d4e-b635-0660032f1741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:dc:40:77:df:04:fc:b7:d2:4a:89:cb:a9:
                    76:d3:cd:05:1f:17:a9:0a:8f:2c:d8:8d:27:5b:a8:
                    9e:aa:74:c3:62:88:43:90:03:b9:58:ed:e9:0d:93:
                    f5:75:85:4c:aa:c7:92:0b:bd:12:95:dd:f6:3d:bd:
                    5a:a8:8a:ba:60:4a:d9:75:29:c3:7b:13:1d:20:47:
                    33:2b:b8:a1:d5:0b:36:91:2c:c6:71:39:c9:2c:7e:
                    d3:31:f0:3c:9e:4e:73:e8:9e:af:4d:d5:24:ec:aa:
                    a6:a6:65:58:3a:ca:cf:ee:d6:33:0c:8a:4c:9b:c0:
                    70:fd:92:23:6c:82:b3:dc:71:86:80:7a:d2:83:c6:
                    24:7b:e2:7e:44:5d:65:b9:4a:73:42:25:67:a0:98:
                    01:af:20:47:89:93:3c:70:87:cd:61:f3:e1:c2:ac:
                    c4:71:7f:6b:56:b6:fa:32:5f:61:b0:30:fe:53:1d:
                    a8:3b:46:ac:0b:db:1f:32:a2:1d:a5:cd:73:df:72:
                    ba:20:6a:cd:68:8d:70:c4:98:8a:cc:f3:a5:28:38:
                    fc:1e:47:ee:82:97:68:88:8c:2b:51:06:08:a5:77:
                    a5:13:e1:62:60:72:29:03:11:cf:ae:db:82:25:b7:
                    60:7f:06:6e:61:a4:f1:ac:33:3d:cd:31:b9:31:73:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:86:F1:AA:C7:3C:00:B2:FE:E8:B0:F4:F3:96:72:8F:B6:0F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6096744f-e273-3c7d-94e2-f88af2c6457a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:58:d3:18:72:bb:1a:c8:cf:1b:22:03:cd:ea:d1:06:5c:c0:
         2a:b4:8b:57:ed:ab:9f:9c:04:34:83:f3:58:06:a2:9c:51:8e:
         f1:b0:06:7c:7a:88:88:bb:0f:0f:cf:39:26:c4:37:8d:9c:15:
         12:70:c2:9d:76:45:6d:e0:29:79:ea:86:2e:12:5d:ed:ce:e9:
         cd:b4:98:05:c9:6d:69:05:b3:33:b6:58:28:01:71:3b:8f:21:
         54:0f:6f:b5:04:ef:93:2f:4b:97:0c:e4:32:3a:a0:66:f7:b6:
         29:86:84:54:d8:cd:36:61:6a:94:a5:21:c1:be:5f:e5:c5:f3:
         53:7f:ff:80:24:64:bd:03:67:8e:f4:c5:e1:37:8a:37:ab:96:
         b9:18:a5:d4:2c:1c:ea:4f:7d:d2:03:53:dc:89:54:44:90:ff:
         0c:88:5b:99:c8:ba:a5:e6:42:59:46:a4:be:14:d2:63:1f:fd:
         8c:c8:a5:6c:4f:3f:e1:0f:78:76:99:5f:e3:10:da:3c:72:f9:
         a4:65:91:03:3e:26:13:a6:d4:7e:35:71:31:a0:5e:93:b7:14:
         04:8d:59:99:f0:89:7f:ce:cb:97:7b:1e:04:cc:7b:b2:2a:9b:
         11:79:34:2c:48:10:ef:54:cb:71:6a:68:f8:09:83:42:30:4e:
         79:a1:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org