Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48187770-36fc-38f9-9122-7f1070d1cea7.roa
File:                     48187770-36fc-38f9-9122-7f1070d1cea7.roa (raw, json)
Hash identifier:          0NL4ZtVrFA5HGC0WHgM+ldW/GS50b0ulop7ktU6ZqGw=
Subject key identifier:   8F:23:9D:67:C1:99:24:9C:9A:B2:98:17:F3:F7:0E:25:D3:6E:B8:F6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472F308B8B7828E7FD99D35B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48187770-36fc-38f9-9122-7f1070d1cea7.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.226.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:8b:8b:78:28:e7:fd:99:d3:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=98b95c4f-c58f-4737-ac05-db324740859e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0f:ec:90:23:55:18:f9:72:bb:87:b7:1d:a4:
                    56:c9:15:18:06:50:c6:5d:c0:97:1d:bd:46:f7:d2:
                    d5:97:de:68:94:d5:4a:f2:5a:26:97:f3:b1:4d:3f:
                    c8:94:65:92:70:b3:ce:d9:4a:cb:ff:b4:b7:3f:ac:
                    28:ad:0a:cf:d2:85:a6:f8:88:a7:50:4e:4d:e5:2d:
                    68:d0:10:b4:99:e3:9c:5c:88:be:4b:53:00:ae:92:
                    a2:fb:f5:9d:d5:76:c5:64:1d:76:61:b3:61:42:87:
                    2b:44:9c:bc:68:f6:5c:aa:63:49:8f:c2:70:b7:59:
                    1e:b3:d7:49:c7:0d:f2:e0:d6:e4:ea:a1:f5:e1:ee:
                    16:05:7b:4f:8b:2f:d3:91:a6:2e:96:79:71:77:8b:
                    a2:28:1b:44:07:90:65:d2:5c:3e:28:30:a1:aa:c1:
                    e9:1d:b1:69:0a:5a:26:72:0c:93:0f:6c:2f:cb:35:
                    b2:8a:57:bf:19:80:0e:41:0c:6d:e3:9c:d0:36:c0:
                    84:c1:cc:97:82:cd:88:cb:62:7e:0f:0b:a3:31:54:
                    a7:17:24:0d:90:eb:49:f2:82:4c:1b:24:e5:92:d4:
                    3b:b9:b7:1d:1b:ae:57:c1:6b:9b:b1:91:f7:2d:1c:
                    44:6f:bd:cd:d7:58:e3:f6:78:a7:96:61:32:b4:da:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:23:9D:67:C1:99:24:9C:9A:B2:98:17:F3:F7:0E:25:D3:6E:B8:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48187770-36fc-38f9-9122-7f1070d1cea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:b4:68:d4:45:f2:5f:76:4c:fa:59:ac:30:a8:01:64:3f:
         1b:ea:0e:c8:53:aa:d0:b5:85:c6:18:d8:c7:a3:a2:dc:5d:3b:
         be:05:23:50:22:74:8d:21:cb:ff:44:76:fe:c1:7b:24:71:42:
         2a:79:8c:17:08:ff:d8:22:47:dc:ae:cd:14:3a:f1:58:d6:8e:
         39:34:3a:1f:a0:7f:e4:fe:03:f3:c9:64:aa:63:bb:21:4a:29:
         9f:ce:81:20:1f:c2:20:bd:85:66:89:d6:6f:27:80:4d:e8:6e:
         d0:78:90:e6:94:03:01:1e:b6:30:4d:60:1a:7c:19:d1:ab:d2:
         5f:56:99:72:4b:7f:ae:e4:81:e6:7e:45:91:75:06:cb:cf:2c:
         84:c1:8f:97:51:6d:3a:8c:1b:dd:27:6b:af:1e:72:03:98:23:
         c9:f0:7e:b3:08:09:fd:3e:98:3a:9c:c8:ae:6a:2b:99:2c:e2:
         de:fd:7f:1b:8d:62:87:fd:74:1a:a1:52:c9:8f:45:21:1e:3f:
         5e:0d:3d:e2:31:91:e4:7f:21:4a:92:5c:bb:3d:5d:ba:52:e9:
         d3:4b:00:ec:e2:41:6b:81:29:39:5a:3e:1f:c7:3d:1c:fe:be:
         17:aa:47:54:d6:e7:06:1c:af:66:05:d8:28:b8:db:16:ad:49:
         4a:9a:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:26:51 2024 by rpki-client on console-fra.rpki-client.org