Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b7163c3-c2ff-3df0-a761-aeb73ff3e168.roa
File:                     5b7163c3-c2ff-3df0-a761-aeb73ff3e168.roa (raw, json)
Hash identifier:          zAEQbA1OiiPIxskUZY1e5KNkbGrF1by4lwZOkEJEfuA=
Subject key identifier:   B6:E2:2C:6E:CE:3A:F8:93:FA:C4:08:8E:31:18:FB:5F:56:CC:0A:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584761719057E9C19EDB92486B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b7163c3-c2ff-3df0-a761-aeb73ff3e168.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        184.26.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:90:57:e9:c1:9e:db:92:48:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=b7b3e744-838a-4e65-ab13-163bfdbce35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e8:e5:f0:2d:d6:71:0c:ed:30:20:a2:5d:5d:
                    e8:b8:c3:a1:fc:d0:fa:c7:bb:07:d0:a6:44:1b:3b:
                    0c:5a:32:91:a7:01:fa:3a:0f:6d:49:6c:29:3b:8c:
                    fa:b4:c9:11:88:9c:3f:e7:e9:38:8c:3b:94:31:6f:
                    f0:ba:99:25:49:62:d4:ce:4d:36:72:52:10:f8:2c:
                    e0:d9:08:38:15:61:c6:c6:57:c1:8e:ed:a3:3d:01:
                    c1:bc:75:69:a2:72:72:20:80:e7:1b:b0:42:81:ac:
                    56:df:9a:c2:cf:3d:2d:5f:10:8d:0b:c8:cf:28:8b:
                    4c:51:e9:69:af:60:32:1d:81:37:74:91:ac:8b:9f:
                    8a:54:b9:23:39:43:e4:bc:51:7d:3c:06:7e:16:61:
                    33:25:b5:7b:7b:f9:06:d8:a1:2c:ab:dc:59:bd:3f:
                    c3:d9:72:b0:46:06:ac:60:9e:5b:2b:ba:f3:5a:87:
                    a6:66:e1:ed:11:45:0b:7e:d0:b3:85:0a:fd:b7:c3:
                    1b:78:2f:03:87:cd:bf:3e:16:85:f7:03:3a:26:4e:
                    68:f3:41:ef:ba:50:2b:4f:2e:f1:7e:81:2a:29:cf:
                    99:cf:83:39:4e:76:37:3f:28:27:20:81:32:7f:73:
                    30:dd:23:5f:b1:00:06:db:fb:2c:ae:e6:64:f4:fb:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E2:2C:6E:CE:3A:F8:93:FA:C4:08:8E:31:18:FB:5F:56:CC:0A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b7163c3-c2ff-3df0-a761-aeb73ff3e168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:3e:d8:87:d2:e9:5d:07:88:df:87:2e:fa:6d:d4:68:48:
         30:28:88:4d:0d:f1:fb:c7:db:8a:05:28:b1:26:aa:9e:2c:49:
         d7:f9:16:54:46:dc:21:40:4e:14:6c:9c:ed:32:59:1c:60:16:
         be:3d:fa:e9:ab:5b:0a:d2:62:f8:ef:07:a8:d0:c1:8d:20:14:
         fe:64:60:f1:3f:37:0e:93:6a:e2:a4:24:42:3a:18:90:d7:cf:
         e2:c5:df:bd:3e:36:49:a1:54:ef:f9:04:0d:5d:9c:8c:ef:08:
         11:dc:16:1e:fa:d4:16:c4:0c:b2:c7:01:cf:87:2a:ce:5f:d3:
         c6:c3:4b:6b:f4:ee:1f:9f:9e:32:03:69:cf:bd:a4:b1:a2:b0:
         37:5b:24:e8:73:12:b0:88:7b:5f:49:ff:a2:1b:ed:9c:9b:71:
         93:47:9b:1e:40:b2:12:a6:ab:17:11:8c:7b:38:8b:73:f5:83:
         c6:c4:0d:3e:61:0e:a3:78:97:92:84:f7:8c:36:f3:ab:2e:3f:
         c5:f4:18:b6:14:70:d9:9b:bc:74:e1:68:fe:87:55:32:58:ff:
         ea:43:ca:a4:71:e4:11:2d:82:70:ed:a1:63:08:54:3c:07:df:
         60:76:3d:a4:ef:33:0f:91:42:7e:48:02:b8:19:31:10:57:9a:
         d5:6d:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:06:24 2024 by rpki-client on console-fra.rpki-client.org