Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa
File:                     74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa (raw, json)
Hash identifier:          7BemWF5/Lp0lu0jXW6gAJ70o2E9QZVhow2zQgjRRS9U=
Subject key identifier:   0D:A1:29:D2:01:82:F6:87:0A:F4:6F:97:EE:F1:27:E4:D4:97:6D:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584756460AB11857DDB41F3F7D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     20940
IP address blocks:        184.87.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:0a:b1:18:57:dd:b4:1f:3f:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=b1712c86-1e37-4a6c-8879-ac2fe28e70fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:47:e7:35:89:6b:a3:52:74:de:a2:3c:4b:
                    9f:1a:28:c2:cc:25:84:93:56:c8:8e:67:47:35:85:
                    84:22:03:21:a6:28:cd:a9:04:1f:8e:6a:93:29:00:
                    b7:5a:d3:dd:47:d8:35:ee:3e:eb:bb:10:25:1b:6a:
                    e1:69:73:44:23:8f:55:a5:1a:3c:ca:f4:f0:e9:5e:
                    1b:c9:e0:b8:bf:34:46:33:8a:b2:11:f2:0b:63:57:
                    72:a1:2e:c7:cc:79:70:ed:56:d2:c5:ef:0c:8d:48:
                    04:b5:eb:12:d1:67:ce:84:09:56:0e:5e:d7:3b:1b:
                    10:c4:e7:f2:63:0e:42:a4:83:38:dd:40:d9:4c:c7:
                    72:cd:d9:e0:a8:a5:cf:83:8b:b8:d3:b5:2b:d7:78:
                    89:47:95:63:75:97:1a:d2:89:41:c6:4d:b5:c3:c3:
                    59:81:f8:41:ec:5e:09:66:81:15:f7:ce:00:8d:2b:
                    84:7e:b3:59:55:52:cc:7c:e6:f5:24:8a:a3:5a:a6:
                    8d:53:98:b4:b7:0f:6a:77:f3:22:c9:83:dd:11:a2:
                    73:0a:c2:03:c6:69:54:3d:48:ff:58:dc:11:ea:b9:
                    a3:1a:b1:29:1e:1f:77:4d:99:30:71:c9:01:10:fd:
                    a4:2c:19:13:21:5b:a7:51:ff:c1:d7:4b:f6:e9:7f:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A1:29:D2:01:82:F6:87:0A:F4:6F:97:EE:F1:27:E4:D4:97:6D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9b:9a:83:c9:0f:71:77:44:6f:a5:2a:0f:eb:e6:10:e8:a3:
         f6:21:18:64:6f:2c:01:31:01:94:2a:d9:da:60:73:28:27:08:
         21:87:68:58:cd:08:e6:c0:b7:53:2e:ea:2c:87:8d:75:23:22:
         94:f4:66:25:39:96:0d:c6:28:08:66:d5:fb:f2:f6:20:ea:f6:
         93:17:62:f1:97:64:33:d9:ef:62:4c:6f:d1:c2:56:5e:27:c2:
         56:e8:20:a0:84:bc:35:0a:2b:47:e2:24:1e:54:02:e4:7f:10:
         64:d8:40:ac:bb:bc:78:43:31:6f:1d:03:0c:d3:c8:d3:ee:2d:
         0c:e3:a8:d7:ff:d5:a0:c4:31:d7:d4:46:65:d0:a5:9a:73:0d:
         c9:64:01:3d:d9:9f:39:b4:74:5b:f8:8f:35:76:e0:0e:1c:25:
         0e:0f:91:cf:c6:e5:8a:f4:0f:c4:2b:80:64:44:d4:50:fa:1c:
         38:4f:02:4d:75:54:68:d5:15:72:31:11:68:95:c0:43:1a:a1:
         c1:bd:c0:c4:d7:eb:df:cd:11:a7:c2:bf:28:21:a3:76:bb:a1:
         a8:3b:dc:49:60:78:aa:bc:3a:67:ba:d1:01:8e:4a:d4:1f:76:
         a1:76:5a:62:ad:56:0b:55:35:d8:1a:73:b6:03:b4:f6:d2:74:
         9d:40:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:02 2024 by rpki-client on console-fra.rpki-client.org