Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa
File:                     2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa (raw, json)
Hash identifier:          oHidtAgcBw/37OwN9fYZjXC6/4bJWymqgbmwVa/GlZ8=
Subject key identifier:   AA:66:8D:C7:D4:02:23:23:74:35:C3:8C:4D:94:39:49:77:F4:BA:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584734C88EF9FC387283DCB139C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     36183
IP address blocks:        172.224.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:8e:f9:fc:38:72:83:dc:b1:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=32ef4e29-4169-4d4b-9c87-bcad55a82b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:27:85:ec:7b:46:14:07:b7:bf:66:64:45:
                    1d:d1:60:a1:08:e9:cc:91:a4:26:68:a8:52:ed:e9:
                    27:f3:6d:8a:2f:42:1f:cd:a3:6d:d1:db:3d:6b:00:
                    74:ac:98:9e:00:be:d8:27:00:cb:01:6d:e1:8b:99:
                    3e:5a:76:e0:fc:3a:cc:4e:d4:a7:a1:29:3b:2e:ee:
                    6b:87:8b:2d:1b:12:d6:0d:35:8f:ee:e3:2c:e4:02:
                    00:39:48:65:b2:50:8f:a1:32:e6:7c:44:50:2e:2b:
                    61:15:87:d5:48:24:e6:c4:b7:0d:e5:c6:d7:20:36:
                    43:7f:43:91:05:e4:82:f0:ca:2c:ac:1e:98:da:b2:
                    8f:04:05:57:4a:36:3c:df:95:31:8b:0a:7c:b2:67:
                    74:5a:4d:60:27:35:ba:0c:86:67:7f:18:11:3e:fb:
                    dd:ce:f9:e2:ce:b5:e4:88:c2:5a:ca:89:5d:40:8d:
                    ff:33:64:8e:ac:4c:ae:d3:34:95:63:79:36:95:ce:
                    c4:16:a6:ab:37:80:a0:97:89:0f:32:02:3f:66:81:
                    0f:7f:56:aa:8f:3f:72:cd:ac:ee:3e:9c:22:63:d4:
                    aa:a7:61:6b:97:41:7c:cc:d6:15:01:72:95:c4:f0:
                    1f:b6:3e:e5:8c:af:ff:64:a8:09:59:2a:fa:a2:47:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:66:8D:C7:D4:02:23:23:74:35:C3:8C:4D:94:39:49:77:F4:BA:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c9:3e:70:ab:da:51:45:39:fe:a1:e0:08:90:cc:0d:a8:26:
         04:12:d3:fb:bb:b2:75:65:e1:c9:b0:4d:4a:ef:2d:e7:59:5c:
         fb:4f:5d:7f:11:ab:1f:37:67:0e:bf:fb:e9:27:32:69:28:a8:
         9a:bf:35:b8:12:83:5c:37:fc:b4:24:ff:8b:9e:73:11:f9:d7:
         3f:4d:73:4d:3c:26:88:94:d7:a4:a0:aa:e6:3d:30:e9:5a:0e:
         da:01:ae:5a:3e:b4:8a:c9:62:9f:45:91:ff:de:c5:b7:f4:93:
         d1:66:10:b1:b7:41:fd:d1:0a:74:d3:e5:df:6e:e0:90:27:41:
         2b:10:0f:f7:c5:6b:4d:a3:84:df:ae:0d:14:0b:5f:7e:a9:d2:
         81:3f:cc:06:5e:2c:56:8c:bb:03:15:2c:31:9d:0f:2a:04:64:
         5b:d7:cf:2e:21:5a:4d:df:de:a2:f6:c4:a3:ad:78:d6:8f:0e:
         e4:bf:f3:e3:d0:97:7c:14:ed:77:ba:12:e3:e5:21:7c:28:d9:
         24:b7:1b:43:6c:e7:be:41:33:1f:22:cc:3b:ab:c5:15:cb:bf:
         74:a6:24:35:bd:9f:fb:63:61:c1:a6:ae:da:b5:a8:2d:5b:ba:
         47:61:03:bd:84:e2:56:3a:8b:fe:12:c5:7f:04:26:f3:59:64:
         ef:a2:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:12:26 2024 by rpki-client on console-fra.rpki-client.org