Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74532f44-0de7-3efb-8ce7-1279d0da021d.roa
File:                     74532f44-0de7-3efb-8ce7-1279d0da021d.roa (raw, json)
Hash identifier:          GzXAhUOrR7Qm00c/VuYWq9LfpJN5fdf9LgaDP10rBUk=
Subject key identifier:   7F:71:53:AD:70:D9:0F:FE:B1:12:2B:B2:9D:F6:66:DE:5C:C0:D3:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472F308B7D5D2B076A3AC19300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74532f44-0de7-3efb-8ce7-1279d0da021d.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.226.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:8b:7d:5d:2b:07:6a:3a:c1:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=40a0940a-90c3-46cd-ae17-2d3a3987ebf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:b8:46:6c:e8:d6:26:0b:c2:f4:30:40:bb:
                    74:f9:16:b3:35:69:fb:88:f3:a3:f7:5c:b5:7a:d7:
                    47:93:42:4c:bb:4a:8f:a0:a1:e2:b5:e1:36:ef:c6:
                    17:64:8f:04:94:9d:96:7d:6a:97:e7:fe:fe:83:0c:
                    e4:9d:7c:d4:94:6c:79:ac:6e:7f:72:76:9e:21:83:
                    6b:9a:13:34:38:0d:a0:d6:78:23:77:b7:36:c9:ae:
                    9d:07:be:7d:f1:2c:31:01:f2:d2:d6:99:fd:af:0d:
                    09:ca:d9:fb:3d:d5:85:08:ed:42:fd:d7:f8:11:09:
                    87:58:f9:c5:30:a9:f9:6a:de:7b:0e:31:5c:0f:d5:
                    26:bf:28:bf:c9:53:50:c9:bc:50:9d:5f:7e:dd:a4:
                    03:28:c7:44:eb:dc:b0:6d:e8:e7:2f:19:bc:d2:a8:
                    98:7e:b7:09:24:df:75:64:23:8d:32:9c:79:9e:d1:
                    58:7b:68:46:47:34:ed:e4:70:14:e8:6f:b1:17:d2:
                    62:3e:fd:a0:d7:4d:cf:0e:18:7c:c4:92:80:23:39:
                    5d:3b:21:82:a0:fb:0c:f5:98:a5:a5:bc:23:a8:5a:
                    ce:12:23:e0:8f:78:8b:3c:49:89:ad:b5:17:d2:e6:
                    dc:c4:3d:16:66:0b:7c:8d:ab:03:f2:78:19:ed:4b:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:71:53:AD:70:D9:0F:FE:B1:12:2B:B2:9D:F6:66:DE:5C:C0:D3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74532f44-0de7-3efb-8ce7-1279d0da021d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:90:99:e8:86:d3:dd:11:60:da:5b:3d:33:f3:48:6c:67:b9:
         91:81:71:7f:0d:f5:4e:e0:98:8f:94:1f:c6:75:ce:97:20:92:
         29:2f:9f:e7:58:7d:4b:d1:ad:54:6c:41:13:28:72:58:ae:28:
         2e:27:28:7d:6a:c7:a0:16:cd:a8:e2:43:a3:b3:71:74:46:40:
         43:6a:29:99:83:be:68:37:88:c7:39:b9:25:de:7c:82:bb:94:
         d2:45:2d:fa:01:e7:4e:7a:ff:b7:00:af:84:3b:0d:7d:30:fc:
         ff:e9:d4:df:ca:fd:32:17:c3:a8:34:f5:19:8a:84:4d:81:9f:
         5c:53:1e:ae:ff:ea:85:c5:e2:01:f6:e6:15:ce:10:0b:1f:7f:
         95:1c:6d:5a:ee:21:13:62:92:fe:cd:eb:c3:25:26:27:af:96:
         e4:76:e0:2e:0d:fe:f5:42:c0:27:71:c0:96:06:bf:f6:73:87:
         ff:26:00:ca:55:fc:e4:a9:54:dd:99:eb:a8:68:51:87:2f:36:
         a1:35:d2:99:67:8c:7b:26:3e:05:d6:4f:83:3d:f7:79:10:3d:
         c6:ad:13:e1:59:44:cc:0c:14:5e:0d:d6:58:1b:d9:4f:23:a5:
         d2:59:1b:32:4d:97:d5:ca:aa:7a:8d:20:54:1b:16:b4:c6:10:
         1d:c5:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:32 2024 by rpki-client on console-ams.rpki-client.org