Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f0fb7ac-cf64-3efe-84e8-16bdb00458c8.roa
File:                     4f0fb7ac-cf64-3efe-84e8-16bdb00458c8.roa (raw, json)
Hash identifier:          GCD3iD2oQz6GzKU8J9rRlgCnBHHjqzbDsQbc7lTFae4=
Subject key identifier:   65:E0:C8:85:A1:63:33:FF:2D:96:F4:6D:7E:48:1E:CC:2D:38:D9:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B99DCAE747DFE40850040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f0fb7ac-cf64-3efe-84e8-16bdb00458c8.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     36183
IP address blocks:        172.224.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:99:dc:ae:74:7d:fe:40:85:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=72a6eec9-bb68-4bf6-ac52-25b251c02db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:b5:4d:1f:d5:62:6f:6a:2c:cd:a2:9d:80:
                    e4:09:5a:69:3e:76:72:fb:f2:67:31:8a:d1:41:a2:
                    9e:02:95:37:89:fd:bb:da:53:be:4e:3a:cc:c6:04:
                    c5:fd:9a:c1:70:fe:bc:3b:12:f9:eb:fa:b5:2c:1c:
                    78:78:2a:86:4e:30:8e:82:e6:88:80:3d:f6:81:0b:
                    96:f5:0c:c0:a0:a5:4e:53:66:ed:59:15:96:10:1c:
                    6c:8e:24:bb:76:83:9b:a3:0d:d0:7c:cd:66:e1:bb:
                    ef:43:0e:6e:82:22:22:b2:de:53:a9:de:56:15:c8:
                    52:96:1c:11:9f:ff:e3:10:e4:5e:3b:80:ba:40:7b:
                    78:c8:49:38:24:29:60:0e:a9:ff:13:7e:a1:06:a7:
                    51:ea:5f:be:fb:8a:b7:c6:8c:41:23:5d:a7:a3:2e:
                    17:7c:5c:d9:9e:75:f2:92:d2:d9:2e:e4:0e:84:ec:
                    73:11:d5:8d:20:70:b0:ad:66:41:39:da:dc:28:4d:
                    ec:31:94:80:e7:d2:f0:7d:b0:87:14:99:4b:eb:43:
                    34:92:1a:ce:e2:13:5b:d2:d8:99:3f:e7:5b:1c:8f:
                    fd:c1:b5:b9:67:55:95:00:31:39:24:76:3b:68:ec:
                    88:da:32:d4:d5:8c:45:48:bd:9d:2b:5b:8e:41:a0:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E0:C8:85:A1:63:33:FF:2D:96:F4:6D:7E:48:1E:CC:2D:38:D9:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f0fb7ac-cf64-3efe-84e8-16bdb00458c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:de:40:c4:4d:30:95:41:01:55:9d:29:0b:c7:a9:6d:9e:5d:
         82:af:86:08:70:11:2f:4c:82:a8:6a:d6:d5:93:eb:40:f6:ef:
         4f:7a:75:c7:ef:21:ee:ff:db:62:ad:31:8f:e2:65:1e:ff:70:
         ad:78:29:70:1c:e7:22:6a:84:3d:57:4f:23:20:2e:ba:20:88:
         83:8a:ff:40:30:82:f7:a4:f8:b8:67:e3:c5:b0:0a:18:26:43:
         bb:02:5a:1c:c3:7b:39:d0:5f:87:fe:25:22:7a:6f:9e:99:1b:
         b7:af:4f:73:e6:63:e9:be:fa:f0:af:85:ed:f5:5d:c4:49:91:
         14:20:65:75:f2:1d:4d:3f:17:a3:38:d1:6f:1f:9a:20:52:38:
         af:d2:a0:c7:c1:3e:23:5b:d3:53:58:3a:39:4e:bd:34:0b:5c:
         88:dd:c2:01:e1:e6:d0:87:69:f3:3e:19:15:f8:46:bc:b0:75:
         08:18:04:79:95:55:33:06:39:3e:8e:be:3f:d7:3b:96:a3:cf:
         02:36:4f:4c:05:cb:5f:a3:68:00:9a:8d:0c:b3:0c:31:38:46:
         0a:22:4c:51:fb:04:aa:07:da:b1:d1:fc:27:35:68:e2:22:f9:
         3e:61:8e:21:65:61:a4:e8:75:b9:ba:30:8e:f4:f1:36:ae:1f:
         6f:69:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:26:54 2024 by rpki-client on console-fra.rpki-client.org