Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa
File:                     06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa (raw, json)
Hash identifier:          F50pVVqMmkeTzjcmrVJm1hB/Yv3i+ItZ4HU5EEvpbpM=
Subject key identifier:   D8:CB:AA:17:00:08:DA:41:97:B0:7E:90:85:7D:79:7C:EB:3A:9F:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847CD09F9112FCF33F380EDEF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     16625
IP address blocks:        96.17.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f9:11:2f:cf:33:f3:80:ed:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=859b0bab-c537-4b02-bc42-00607a2a92c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:c1:7d:3e:3c:38:eb:47:55:8e:c7:09:97:
                    f6:58:fc:00:5e:dd:37:4f:2c:02:c3:d9:3e:67:f8:
                    21:83:73:e7:13:cd:1c:4d:d7:09:e8:ec:67:18:10:
                    1a:d9:60:e8:02:68:e4:d5:09:3c:05:a3:08:3b:fb:
                    cc:d4:4c:97:bb:ca:7d:21:db:36:fd:da:43:f1:7f:
                    0e:24:8b:24:5c:00:8c:98:fa:39:24:2e:cf:28:9e:
                    11:bd:74:35:c9:b6:60:8b:4f:c6:90:e5:6d:ef:16:
                    7d:41:ac:3f:7c:3b:27:b0:5f:a9:89:ec:1f:a6:17:
                    92:0b:82:15:e9:f3:25:ea:3d:d7:25:9c:41:f3:64:
                    cf:42:5a:5d:e0:17:0a:01:b9:ae:fb:4a:6d:e8:b8:
                    89:9e:6c:2c:9b:c8:9c:bb:f9:4f:c3:2a:d2:62:3f:
                    42:1f:13:6f:a0:e7:3c:85:56:d5:a4:37:dd:6f:92:
                    a5:9c:db:2b:1b:d2:76:2e:5d:d7:b6:c6:b0:48:7f:
                    60:a1:94:c1:be:41:b4:82:f8:a4:45:4e:25:ec:3b:
                    5d:1e:15:5f:1c:02:ea:65:de:e7:ce:03:9d:a7:32:
                    f2:0b:8f:fa:17:7c:f5:19:6a:d5:0f:18:80:4c:53:
                    e0:55:da:21:64:0a:23:4f:b8:0a:29:54:78:75:2c:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:AA:17:00:08:DA:41:97:B0:7E:90:85:7D:79:7C:EB:3A:9F:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06d27ce3-d631-38fd-8f1f-0bb3b5a8b631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:68:c9:8b:96:36:22:ce:c1:93:7e:fd:29:74:fd:8b:ac:80:
         95:ee:0a:73:a6:e3:ce:28:62:f4:21:43:d8:83:68:92:1c:97:
         7d:99:ec:7a:98:69:62:e6:58:c2:9d:55:49:c1:b2:fd:bb:d1:
         91:12:f4:11:76:18:51:97:91:34:1f:58:bc:8c:fd:b9:70:9e:
         f7:7a:29:a0:20:fc:f7:e5:5e:d1:6f:a8:2b:c8:90:b2:6e:98:
         6c:21:07:ca:05:da:be:35:ed:50:b2:0a:b1:ac:58:21:23:2e:
         5b:26:6c:54:09:01:d5:5f:85:4c:c2:23:90:07:57:cd:8e:d3:
         c3:91:ac:9b:98:92:e9:0a:e8:04:6c:4f:60:04:e5:56:bd:e4:
         1d:39:f0:a4:7d:24:dd:ee:5f:c4:71:b1:3e:dd:3f:68:cb:43:
         5f:b6:de:7a:21:d8:a8:20:ed:db:90:6d:d7:fe:40:d4:18:b4:
         5b:82:f6:e9:0f:80:f9:8a:0e:d4:7c:d2:de:e9:eb:f1:1c:76:
         54:3e:da:42:ec:56:9d:ef:2b:04:ef:87:d0:bc:a0:4d:00:4f:
         fb:9c:48:05:f6:af:97:d8:30:1f:80:73:e1:45:3c:cd:0d:22:
         11:a9:e1:e8:2d:0d:e6:58:4e:df:73:6f:a9:85:db:68:bd:38:
         07:78:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:19:20 2024 by rpki-client on console-fra.rpki-client.org