Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a266f96-1187-31a9-831b-3862745f1e88.roa
File:                     2a266f96-1187-31a9-831b-3862745f1e88.roa (raw, json)
Hash identifier:          uCDRi5B5hhoOR9pe5OvIc0ZgTJFm9Sq+yMyT4ABaNjQ=
Subject key identifier:   C2:0C:45:E2:F0:A9:58:D9:92:4A:38:E1:B6:F0:E4:1E:99:6B:C0:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474C80DD85C8F096A7C38292C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a266f96-1187-31a9-831b-3862745f1e88.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     16625
IP address blocks:        72.246.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:dd:85:c8:f0:96:a7:c3:82:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=f30530ab-e6ea-4187-9701-2d7dbe011bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:4a:95:e2:d3:ab:38:1f:9d:00:70:d6:1a:
                    fe:e0:c7:1a:89:da:66:84:de:64:98:60:7e:d9:f4:
                    ff:0d:bf:ca:e2:c2:7a:d6:de:72:58:f9:92:48:e9:
                    82:82:2f:fe:85:f9:d2:84:b6:e4:5d:42:c8:cd:d4:
                    73:80:b2:0f:5d:aa:60:4a:3f:4d:d0:04:b1:00:7e:
                    f2:17:3d:2a:42:df:41:3b:87:4c:a4:a8:d4:f9:a5:
                    33:94:56:32:2d:24:78:2f:8a:97:f0:b2:ce:72:ab:
                    27:1d:67:a9:dc:93:42:e9:8b:93:a8:06:1b:57:92:
                    94:37:9a:7d:66:dc:d8:34:16:49:83:ea:86:ac:f6:
                    26:c2:ee:22:67:88:9c:79:c8:cd:6f:d6:37:ad:2f:
                    56:23:7c:a8:7a:00:e0:74:f4:da:d4:bf:57:67:da:
                    b0:fb:7a:ff:2d:79:f4:01:f9:83:7a:b3:f7:c6:b9:
                    a4:b6:bc:d7:75:76:b1:fc:4e:5d:bb:24:ee:13:c6:
                    cf:6c:c8:d1:af:1d:f7:56:d9:aa:15:a8:72:1c:ce:
                    a2:2b:f8:79:bd:83:60:7c:8b:65:87:35:c9:23:eb:
                    1a:7c:ad:da:27:a2:00:6f:b6:e0:d5:3a:c9:f4:9a:
                    06:0c:a7:45:37:88:11:7b:25:2e:96:0a:2d:82:3a:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0C:45:E2:F0:A9:58:D9:92:4A:38:E1:B6:F0:E4:1E:99:6B:C0:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a266f96-1187-31a9-831b-3862745f1e88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:56:f4:a8:4d:92:b4:7e:62:f8:51:b9:5c:21:11:dd:b1:14:
         4e:e4:b4:69:48:71:69:75:bf:13:2b:0e:27:54:64:d4:6a:47:
         a5:8b:01:21:b8:3f:c6:b8:ba:67:21:48:ab:c6:17:07:c0:b9:
         57:19:c0:c9:7d:a9:b9:d2:03:9e:6d:a5:3b:11:37:71:92:9e:
         11:33:61:5b:e6:20:c1:0f:c9:6f:ff:be:a2:d2:dc:88:46:e3:
         57:9b:d8:b7:66:f4:ee:8a:64:ae:f2:92:3d:9e:a9:e1:f1:79:
         4d:43:88:8e:78:d8:25:44:b7:8b:73:6b:22:58:a8:4e:ea:79:
         25:2e:c6:aa:b0:85:37:73:78:b8:62:7d:7c:d5:a8:36:05:81:
         37:eb:5b:a1:e4:94:ea:41:f0:97:80:c1:da:78:d5:e1:9b:c4:
         47:e7:b0:d8:1a:25:8c:08:1b:2c:de:55:d5:9d:23:46:24:73:
         94:d5:5f:2d:03:38:bb:66:30:ba:43:c9:6b:0b:55:f5:55:70:
         7d:a0:34:95:39:b6:fb:02:ab:20:59:98:20:e1:8c:6e:36:99:
         62:28:a0:24:d9:ac:e8:fb:39:e6:7a:e7:15:05:bc:af:43:07:
         2a:27:d5:d1:27:e2:12:aa:46:f7:3d:32:50:2f:8a:c4:7e:b0:
         45:81:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:31:45 2024 by rpki-client on console-ams.rpki-client.org