Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a84bfc8-92ac-3548-b3d7-f716a2aedc34.roa
File:                     4a84bfc8-92ac-3548-b3d7-f716a2aedc34.roa (raw, json)
Hash identifier:          iiqIJzg7vi9WTdLp5sz2kkBskQPJOFZwSEs0d5UGG+8=
Subject key identifier:   B6:1F:68:A9:8D:02:50:36:32:0D:68:4D:9A:73:0F:39:D8:59:0A:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584757AB865C7D1FB1C8D118E200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a84bfc8-92ac-3548-b3d7-f716a2aedc34.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     20940
IP address blocks:        184.25.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:86:5c:7d:1f:b1:c8:d1:18:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=47a26ee7-affa-4538-9e16-5d2626b2b23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:b5:b1:49:77:3d:1f:1d:88:f1:b1:01:04:
                    57:e5:8b:36:22:ac:10:24:99:76:60:be:07:05:49:
                    17:b9:88:0e:8d:7d:a0:fd:00:62:67:c3:5d:eb:28:
                    fd:76:8d:50:96:f9:21:69:36:40:19:ff:8a:76:64:
                    dc:6c:cb:64:76:ad:07:77:66:71:40:ef:c3:d2:cb:
                    63:41:dd:4a:48:c7:5f:a6:78:c9:b8:2a:2b:d2:57:
                    79:dd:6b:90:ad:b1:a4:77:ab:0d:87:38:d3:58:e5:
                    0c:5e:66:9e:8f:b4:9d:fd:a7:17:a5:95:9c:48:2b:
                    12:5e:45:25:c6:93:46:36:ff:28:f5:8c:88:96:ec:
                    cd:cf:a2:97:80:09:6f:65:14:0e:ee:d9:d0:85:75:
                    61:69:c0:8e:f3:91:a0:c4:56:f4:1b:e5:d0:49:13:
                    35:83:06:ea:7b:2f:1e:9a:16:7f:01:d8:dd:28:67:
                    3a:d3:53:b6:c3:42:0d:7b:0d:5b:f5:11:23:84:5e:
                    f3:d7:23:d3:4c:f7:6a:4e:04:7d:d0:b5:73:ba:80:
                    f5:89:a1:78:5a:27:f9:cd:40:df:a7:a7:fc:e1:ad:
                    08:cc:29:7c:ce:f6:41:e7:aa:c9:77:0c:70:f9:eb:
                    63:c9:19:6b:ed:20:49:f4:8a:4a:cc:e6:e8:d9:5b:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:68:A9:8D:02:50:36:32:0D:68:4D:9A:73:0F:39:D8:59:0A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a84bfc8-92ac-3548-b3d7-f716a2aedc34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:c7:5b:7b:ae:6a:c0:90:43:21:db:e5:a2:a4:6b:b2:1c:
         e4:05:96:9b:c3:a8:91:1d:7f:ba:fd:7c:98:b3:aa:aa:50:f8:
         cd:5c:44:12:fa:77:a1:be:31:ea:2a:16:ce:91:f7:f6:3a:35:
         13:d7:ac:dc:ea:d8:9b:ae:6a:f9:92:55:21:a1:71:06:e6:6f:
         99:f6:e3:5a:d3:f7:46:c9:5e:5d:b0:30:88:be:d7:24:08:6f:
         7c:7a:30:e6:4f:24:91:40:61:3e:af:4e:4b:b6:68:d3:9a:c8:
         0e:66:39:9c:53:c5:74:67:10:e9:78:3a:76:18:83:c7:af:95:
         39:bb:68:2e:81:09:66:5c:15:43:fe:5c:11:39:a1:70:07:ea:
         1d:e7:fe:47:5b:d8:63:36:ff:dc:9d:4a:29:77:c2:53:f8:31:
         bb:c9:a4:09:ca:ea:f6:ed:a1:e0:fc:b9:e2:cb:69:f1:56:cb:
         ba:77:e0:7e:ed:e1:4c:7d:a1:b4:2f:d4:a8:e9:5f:7d:7e:f9:
         c2:21:87:87:9b:a6:93:28:66:2e:c8:3c:b8:1f:5d:d6:5a:eb:
         34:82:4a:00:c8:39:d3:ea:79:8e:c2:37:71:6a:37:72:14:f4:
         c9:45:49:b4:d7:f4:c4:a9:85:c9:7d:88:ba:86:53:c0:25:38:
         fd:d4:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:44 2024 by rpki-client on console-fra.rpki-client.org