Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ff5191e-1296-30f7-bc89-5306a21b3264.roa
File:                     1ff5191e-1296-30f7-bc89-5306a21b3264.roa (raw, json)
Hash identifier:          ECy4AFboyWLkXXwuLJz442JltcbBxR6sET9q4hFEg+8=
Subject key identifier:   DC:B2:67:80:91:C3:C7:48:F1:8E:13:2F:3C:39:9E:76:C5:27:D1:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584730960826F78957A4A8F808C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ff5191e-1296-30f7-bc89-5306a21b3264.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     36183
IP address blocks:        172.226.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:96:08:26:f7:89:57:a4:a8:f8:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=2ad4fab5-11e4-48ed-8dd2-25198031ddb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:5b:06:69:ab:4e:3c:4d:6a:2d:20:59:10:
                    7e:28:22:a3:eb:0b:67:2b:6e:41:9c:99:af:b1:1e:
                    ff:ad:2a:72:6f:ba:71:84:7a:9d:95:32:69:0b:93:
                    3a:87:a1:62:6f:53:65:3a:10:30:a5:1c:41:19:c5:
                    3f:fb:69:2e:d6:af:64:72:27:ed:a7:87:47:b6:b3:
                    fd:d0:4d:17:8c:94:59:a4:21:40:65:88:d2:89:e7:
                    38:ea:cc:37:d3:1e:58:b7:cb:74:c1:96:8b:08:44:
                    46:0f:b0:7c:36:62:20:8e:fd:75:40:a8:7e:f0:44:
                    f6:4e:6f:54:9d:42:7d:9f:e4:79:4b:db:42:73:38:
                    1d:21:51:42:9f:1c:fe:58:45:57:35:21:8e:45:a0:
                    ed:fc:e9:41:f4:69:b0:1c:2f:b0:50:8c:c4:d9:2d:
                    74:6f:59:de:cd:cb:bf:e6:db:81:9a:e5:c7:bc:de:
                    ed:07:7f:53:48:cb:f8:14:cb:93:44:c1:35:ee:6c:
                    8f:3f:f5:c8:73:a2:1c:b2:24:c7:a5:08:60:bf:cc:
                    58:31:6b:80:fb:fb:41:c3:f5:99:8e:8f:25:4d:6e:
                    22:aa:46:9e:29:f0:ae:7b:13:ad:b4:0c:8b:a5:be:
                    d6:4d:2b:bc:ef:20:cf:a3:2f:30:99:a7:4e:49:4b:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B2:67:80:91:C3:C7:48:F1:8E:13:2F:3C:39:9E:76:C5:27:D1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ff5191e-1296-30f7-bc89-5306a21b3264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:16:29:79:0b:b3:c9:89:d7:cc:2e:72:fc:d8:24:37:09:d5:
         99:5b:37:09:d2:58:23:1d:a0:43:9b:0e:47:9d:ef:a8:0b:86:
         01:f2:fe:3a:bf:5c:08:6f:c1:f5:92:4a:63:ee:9f:a2:a9:ec:
         28:a3:fa:e8:fb:e3:af:00:69:4e:62:4f:63:90:c1:be:29:5a:
         9f:01:fa:c0:10:a5:a3:f5:7d:4d:1a:9a:cb:0c:af:f0:1a:5a:
         68:cc:0c:38:5a:50:b6:c0:db:6b:d6:1d:5a:79:45:8f:a7:a3:
         2b:a8:34:55:75:fe:5b:0e:85:e7:e7:1e:53:22:95:ad:c9:ba:
         3e:0a:6b:67:f0:65:f0:cf:4f:84:cd:98:4e:3f:da:2e:b0:71:
         4b:36:29:6c:c6:41:1f:cf:07:ec:ed:27:65:30:e4:36:26:5e:
         a2:ca:ea:82:13:87:91:fc:c4:f7:66:d3:f8:3d:10:a3:b9:83:
         34:db:4e:cc:da:61:16:f4:b1:c0:5f:f6:14:ed:a1:c4:b7:6d:
         71:20:28:bf:32:33:8d:b2:1e:cb:57:09:1c:98:25:fb:a3:35:
         76:a8:62:07:97:a1:d4:bd:40:71:c6:44:cc:fa:73:f1:f9:10:
         fd:54:83:fa:86:33:a8:bc:2b:7d:04:05:76:40:78:ae:9e:90:
         da:50:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:26:36 2024 by rpki-client on console-fra.rpki-client.org