Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/634349a0-f73f-399e-a496-ee6ba2f90d8c.roa
File:                     634349a0-f73f-399e-a496-ee6ba2f90d8c.roa (raw, json)
Hash identifier:          QHUDtv+c8RXc6Tzg47N3XiqJX/DQgVnFTqJXal0WBx8=
Subject key identifier:   9A:00:A5:ED:7A:B7:C8:91:A4:46:CF:22:9E:DC:82:24:FA:73:11:B9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474C80DC84458AD09B0BBD2C70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/634349a0-f73f-399e-a496-ee6ba2f90d8c.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     24319
IP address blocks:        96.17.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:dc:84:45:8a:d0:9b:0b:bd:2c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=41157961-1b7b-4fc1-985c-c9a3290de2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:2f:f5:60:84:ec:ee:42:45:f9:8c:a9:da:
                    94:20:48:af:26:1f:3f:db:dd:11:18:90:ce:f1:39:
                    6f:b2:bf:94:bc:fe:19:19:76:2f:87:e9:91:3d:01:
                    4a:53:64:c2:98:56:ec:ea:5f:87:12:db:ad:ce:9b:
                    1f:f7:6d:ff:19:51:a3:f8:5d:32:5d:5f:e9:91:18:
                    cd:dc:2c:70:94:7c:0d:1d:df:c7:4c:4c:fc:0a:c8:
                    73:c7:8f:5b:19:ac:15:bf:a6:8e:7b:b4:4c:ed:ad:
                    17:ab:3d:cb:57:67:e7:b6:2a:30:d4:54:4d:a3:f3:
                    fa:f5:10:bb:43:68:f6:76:b0:5d:d9:f3:b3:9f:37:
                    49:ec:6a:76:6b:24:34:5c:72:a7:88:6a:92:f1:9f:
                    58:5e:aa:59:bf:2d:0a:85:c2:11:8a:da:ca:bb:53:
                    96:fc:76:a1:f8:70:89:1b:cc:4e:47:90:2a:61:2a:
                    85:ec:09:91:c1:53:e2:28:2f:4d:da:a3:12:ee:e7:
                    98:ee:d7:4c:3a:d7:b7:5d:1a:cd:2f:d9:bb:43:1d:
                    16:c0:00:d0:a6:31:31:2b:ad:3f:98:30:79:cb:70:
                    e4:21:55:55:30:3b:98:88:09:8b:c3:8b:5d:fc:13:
                    f2:24:f5:f4:5f:77:cc:88:52:0b:c5:c2:54:63:a9:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:00:A5:ED:7A:B7:C8:91:A4:46:CF:22:9E:DC:82:24:FA:73:11:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/634349a0-f73f-399e-a496-ee6ba2f90d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:e3:9d:71:7b:6c:eb:3e:42:42:cf:23:6a:77:07:8a:36:
         f6:7a:d9:b7:3f:43:97:b4:e6:ce:8b:59:ea:79:b0:3f:6f:99:
         e7:e8:65:04:71:5a:d4:3c:e7:ff:a4:98:16:bd:37:80:6e:ea:
         f4:a9:f4:d4:9d:43:c1:b9:06:aa:b3:df:11:af:98:4b:52:48:
         c0:8b:f9:3e:3c:b2:18:92:18:4b:cb:12:81:f4:27:65:b2:5d:
         4e:eb:aa:09:b2:b3:96:66:84:8c:f4:44:c8:a0:19:e8:84:07:
         43:ee:85:89:64:db:8a:53:92:7d:92:fd:51:62:20:6b:22:a5:
         b3:41:be:05:07:c1:af:81:6a:ac:fc:5d:9b:95:e9:be:a3:d1:
         1b:da:d1:27:1b:0e:58:39:bc:5d:8f:66:b1:68:cb:4d:80:4f:
         68:15:98:d0:c5:11:37:c5:ca:13:e2:53:d7:f2:aa:4a:32:fe:
         73:07:c3:47:b5:40:51:63:4d:37:ca:4c:54:95:3e:99:9f:1d:
         d8:be:2d:0e:c9:04:38:17:77:cb:ee:38:ce:0c:7d:c1:51:0b:
         1e:dd:82:bc:dd:82:46:92:1a:26:80:bb:96:09:d5:ee:83:89:
         5f:b6:5b:59:1a:d1:c7:5b:a7:5e:9a:8c:a9:b1:03:23:3e:ef:
         5a:05:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:20 2024 by rpki-client on console-ams.rpki-client.org