Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd356ff-b190-3c03-a79a-e15cdfc74936.roa
File:                     0bd356ff-b190-3c03-a79a-e15cdfc74936.roa (raw, json)
Hash identifier:          APglHOnxsilpcNjKL0CVey6h7ld9ISrbcUvnqZ9L3+A=
Subject key identifier:   77:8F:90:F9:49:43:9D:81:90:66:A9:08:9B:57:58:57:9A:0B:DA:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474C80DB754432FBC7FA759A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd356ff-b190-3c03-a79a-e15cdfc74936.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     20940
IP address blocks:        96.17.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:db:75:44:32:fb:c7:fa:75:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=31002b2d-ab41-49d7-9fa7-2abd217b322e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c6:1c:56:64:5c:9f:9f:31:49:76:27:3d:a1:
                    e5:93:e0:7e:16:94:e5:58:f7:0e:09:c7:59:6d:61:
                    e3:f6:04:95:5d:49:ba:99:3d:11:4c:95:f9:cc:e7:
                    34:7c:0b:09:62:dd:1f:6c:3d:85:cd:8f:bd:0e:3d:
                    35:30:91:18:cd:73:e5:43:34:e5:a3:f9:cb:53:16:
                    9e:a3:b5:01:49:40:f9:2a:f0:9d:c0:c7:04:f6:c5:
                    7a:2c:c6:46:7d:13:38:9c:0f:8d:87:10:27:3b:03:
                    55:2b:3d:94:56:18:28:8d:0e:47:33:75:8b:9d:9d:
                    ce:ad:85:da:e8:19:49:7e:bc:02:2d:ba:7c:ec:0e:
                    73:00:82:44:d6:14:7b:39:4c:c1:d1:08:fd:c9:87:
                    73:43:4f:c2:17:cc:38:53:d4:da:1b:fb:ce:19:98:
                    86:28:11:9a:96:f2:46:2d:49:0e:34:54:7c:53:5e:
                    01:3f:a2:9c:08:af:10:e4:eb:ef:90:b7:2f:22:d4:
                    f9:2a:bc:4c:9f:ae:ca:96:69:c4:48:ec:f3:e7:da:
                    9e:63:06:59:af:fb:26:48:82:df:b1:21:5e:52:f9:
                    73:32:f1:c3:a2:ff:c6:03:ec:80:7a:74:ac:3c:a3:
                    72:e4:34:a6:3e:c0:10:35:aa:77:25:63:d6:4c:8e:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8F:90:F9:49:43:9D:81:90:66:A9:08:9B:57:58:57:9A:0B:DA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bd356ff-b190-3c03-a79a-e15cdfc74936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:22:74:f8:b6:a2:96:37:6e:64:7b:fb:52:75:a0:7f:b0:68:
         90:50:45:e9:2e:27:e6:c0:e3:16:19:6e:53:ac:0e:7b:16:67:
         41:25:ba:1e:c3:7e:b3:96:9b:66:4d:38:8c:a9:a3:38:79:ec:
         1b:24:28:77:1c:16:82:f1:26:4f:bf:7c:55:03:10:32:4a:ff:
         0d:7a:94:05:06:c0:32:cf:83:43:66:46:26:b9:45:94:5e:c7:
         ce:c7:61:3d:65:59:ac:39:f1:8f:e3:82:f1:96:9f:36:4e:19:
         ec:ee:b9:dd:ad:ce:eb:82:b3:5f:0a:56:42:f9:0a:e5:c4:de:
         2c:bf:87:f1:a2:a3:ba:8c:30:c5:da:1f:eb:b8:65:19:14:98:
         f2:0f:fe:ce:dd:50:47:67:af:60:e3:62:05:3b:7f:bf:a9:22:
         b5:a9:47:49:55:80:06:d2:ba:58:c2:fa:98:25:05:3f:a5:ac:
         c8:7b:64:44:13:52:e4:2d:4b:6e:15:ba:b1:90:b0:18:34:63:
         7c:6e:f9:ef:bc:01:87:b3:10:df:1d:2b:a4:f6:09:bf:71:ba:
         bd:48:a6:a9:27:d5:0a:ae:d6:fe:64:80:d8:71:e1:c3:06:2c:
         19:b7:c8:58:4c:f1:89:91:b0:34:b2:3f:6f:da:d5:cd:ee:1c:
         95:67:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:57 2024 by rpki-client on console-ams.rpki-client.org