Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa
File:                     7834dcf2-c3a6-3c09-83b3-46d136891b88.roa (raw, json)
Hash identifier:          x4q4odNgv87nEojT0ecgb1mLZ1T+PWBKoNTabvKP1A8=
Subject key identifier:   A6:5D:D9:12:93:8E:BB:B0:42:74:FA:1E:F4:16:16:56:BF:92:F3:DA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847213B29D93DFED3D37DC24DB8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.225.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:29:d9:3d:fe:d3:d3:7d:c2:4d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=1ca43e13-fa0c-4015-9a1c-5e33fb1e86a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:97:85:64:a2:60:6a:e5:af:f7:6e:1e:06:
                    3d:d0:90:bf:0b:b8:52:a3:f3:7d:a1:a5:5b:74:f1:
                    bf:c6:e4:29:ea:1d:56:fe:08:d1:ec:8c:91:bd:17:
                    dc:98:09:44:23:84:b1:27:f3:0f:50:3f:d8:9c:93:
                    61:a1:3a:9d:8d:c7:ff:14:36:94:e5:68:ff:8a:c0:
                    6d:cd:5b:34:58:54:0c:db:fd:db:5a:18:d3:83:1d:
                    19:cc:91:9f:b0:94:1e:71:d5:0a:59:c5:73:b2:72:
                    ee:06:19:dd:6b:8a:48:a1:b3:03:0a:c2:1c:8a:9b:
                    e4:9e:f0:02:f9:05:93:8d:ce:8e:ff:af:bb:48:81:
                    ea:7a:b4:32:4a:6f:7f:de:75:45:44:cf:c5:36:02:
                    dd:15:62:f9:5d:28:52:8e:1c:c9:ff:37:29:7c:4c:
                    48:bf:0d:d7:3a:39:fc:6f:60:ee:f2:90:51:dd:8f:
                    61:f3:13:b9:ed:f9:18:9b:75:71:e1:10:9e:60:b8:
                    70:cc:28:2d:2b:9d:18:90:91:37:70:df:d8:79:4b:
                    06:83:46:c2:78:f5:7c:ae:d6:10:21:54:1c:83:18:
                    27:42:89:c4:86:71:7c:b7:9c:18:ca:57:ac:63:20:
                    f1:61:20:d7:fd:53:a4:43:94:5f:d3:75:9c:41:06:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:D9:12:93:8E:BB:B0:42:74:FA:1E:F4:16:16:56:BF:92:F3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1c:a9:40:38:43:16:97:7c:6f:d5:05:44:94:66:a4:a6:71:
         e6:83:5a:1a:b3:92:21:b2:88:d4:bf:78:26:6a:84:db:c2:9a:
         fc:3e:bf:bc:6a:2d:de:b0:c2:d7:e0:24:df:37:a4:85:51:b3:
         f3:db:1f:4b:4c:7f:81:5c:60:d2:0c:75:2f:a4:6c:38:b7:7a:
         76:2a:8b:b8:6b:55:63:70:28:94:68:ab:02:c8:53:ea:d2:5c:
         1b:93:f5:70:1c:25:dd:63:4c:20:bf:cb:39:87:83:c3:50:77:
         cf:01:37:58:5e:d1:40:50:29:8c:bb:15:b5:ed:1f:b6:55:c5:
         23:3e:29:83:d4:c2:46:c7:0f:6f:d0:e1:29:f0:3a:f4:9c:04:
         b0:8a:d4:11:7b:2b:b6:79:86:14:a8:dc:0e:32:0a:7e:af:59:
         9c:52:82:da:5e:01:6c:17:2b:44:17:c1:22:88:93:2c:8f:fa:
         1b:5a:09:dd:c7:76:0c:b3:86:34:ba:dc:49:ff:c1:10:f2:63:
         21:a0:2e:53:e6:91:c1:4e:2e:5b:4f:eb:44:fa:0d:d7:45:ee:
         aa:06:6a:58:a9:77:f8:90:00:d4:4f:ca:e3:e5:3d:ee:78:f1:
         5e:55:fc:3a:a0:56:bc:09:90:73:58:a0:7e:b9:ab:37:7a:4f:
         c0:27:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:13 2024 by rpki-client on console-fra.rpki-client.org