Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d047db2-9936-3e63-b2da-905ba8b2eab9.roa
File:                     3d047db2-9936-3e63-b2da-905ba8b2eab9.roa (raw, json)
Hash identifier:          dkBv8oksSPeqJgRIgMReJo2VJj3sbkvnqtydc5hIEHE=
Subject key identifier:   36:5B:7E:AF:AC:06:4B:D3:CE:3C:BC:23:C7:08:10:84:2F:8F:72:91
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474C80CD4A921FDECE6C11CA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d047db2-9936-3e63-b2da-905ba8b2eab9.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     35994
IP address blocks:        96.16.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:cd:4a:92:1f:de:ce:6c:11:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=f7734550-d9e6-47ab-bd59-d20ec5ef2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:45:26:29:a3:01:2a:a5:e9:73:a1:94:93:
                    67:12:1c:dc:75:91:f1:4e:4b:73:ce:35:4b:7f:d3:
                    ea:a6:3b:b5:81:97:9a:95:9d:0d:70:1b:6f:d0:b8:
                    5e:c7:2e:b5:33:a8:65:cb:81:3e:ce:17:b3:14:ef:
                    d1:5c:55:51:1e:1e:6a:78:51:44:96:3a:8e:f9:7b:
                    f7:98:39:4f:64:33:ac:3a:ac:c3:1d:58:a1:e7:3a:
                    37:03:9e:0c:e9:47:c0:05:fb:30:76:a7:6f:3e:87:
                    d9:6d:53:0f:88:15:17:33:49:fc:e0:9e:cd:07:2e:
                    73:bc:8a:ac:fb:d1:da:2a:5b:f1:02:a4:7e:d6:fe:
                    71:48:3f:8f:bd:23:f8:a5:44:00:0f:ee:e7:7f:9b:
                    c8:ef:29:92:c4:9a:7b:0f:52:58:26:8e:07:c7:0e:
                    40:e8:1b:6a:a5:6a:71:bd:c2:bf:fc:df:f8:5c:d4:
                    3a:78:ea:a4:33:78:42:30:21:fe:5f:f2:48:e1:27:
                    2a:83:4b:76:d9:ad:c8:23:cd:5b:b4:b5:72:5a:80:
                    cf:45:74:56:80:e8:b0:84:c4:a5:14:77:00:12:e1:
                    da:be:d7:3b:1b:8e:d0:d7:18:98:45:fe:d5:50:ab:
                    43:7b:21:25:e5:54:7d:cd:ab:51:fc:77:33:6a:47:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5B:7E:AF:AC:06:4B:D3:CE:3C:BC:23:C7:08:10:84:2F:8F:72:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d047db2-9936-3e63-b2da-905ba8b2eab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:25:34:a3:43:32:20:36:31:86:3a:97:45:65:f4:5b:7d:
         91:67:af:0d:bf:cc:9c:34:d4:3f:95:47:28:61:6a:28:a1:ec:
         79:63:ce:0b:ae:9f:be:82:4d:b5:41:ca:8f:bf:15:36:ae:06:
         f9:7f:9b:38:0e:2a:cb:37:0e:87:f2:3e:81:cd:b1:5c:a1:b7:
         a9:78:87:3a:f7:56:97:80:58:9c:fa:6b:9d:54:c0:a5:3a:a6:
         13:81:75:47:06:0a:e9:d1:39:30:cc:a9:4e:ee:19:68:98:73:
         d4:e3:a4:f6:5a:77:9d:81:ed:41:0f:68:ec:2f:39:9a:4b:da:
         a7:ae:89:35:a8:8e:4b:78:a8:96:ee:2a:95:f0:22:81:ad:fa:
         be:15:45:31:ac:fd:56:13:23:e3:a4:27:5b:5e:77:60:8c:b5:
         fc:6e:00:2d:82:c7:e6:11:d3:e3:d4:f8:60:5c:29:c8:dc:0a:
         e5:be:23:68:fd:a6:6e:e9:d2:ff:de:fe:14:d2:b3:ab:6a:26:
         c9:b6:2f:d4:b7:28:9d:b8:ef:70:8c:bb:ee:a5:8f:a7:3b:a7:
         7e:a3:4e:73:8a:b2:79:a2:dc:ad:60:48:fd:61:92:00:7e:63:
         63:03:2a:25:73:51:b0:09:dc:cd:78:cb:14:72:31:5b:d6:81:
         89:2a:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:49 2024 by rpki-client on console-ams.rpki-client.org