Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa
File:                     8917e5fe-6b12-3804-9883-7a75cbc60100.roa (raw, json)
Hash identifier:          Q0Wfyp/RKv74Qu0JJeENt43DS7CXu+p7TDBWDaWaiuU=
Subject key identifier:   D1:A9:EB:45:ED:1F:02:BF:B0:FC:7B:C1:3A:74:A8:97:DE:43:E0:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584762D685FAFE01A1BD0B242680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     16625
IP address blocks:        184.29.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:85:fa:fe:01:a1:bd:0b:24:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=5433d85a-98c9-45e3-9186-a929c8bef63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:a5:b8:d3:7f:b9:a4:9e:c4:29:ef:f9:df:
                    f3:cd:8d:07:5d:41:fc:ed:55:9e:2e:69:69:54:21:
                    82:ef:08:4a:f4:87:f3:83:d7:29:1e:75:15:10:da:
                    00:f8:b5:74:e0:f4:78:30:4b:e0:4b:2b:22:05:d6:
                    7e:18:ba:b1:5b:55:e4:fa:82:ab:4c:22:cb:d3:f9:
                    ac:51:eb:df:35:97:c9:10:59:2a:34:8f:d7:4f:2b:
                    e2:d0:e1:10:3f:6a:50:1c:31:22:ae:65:bb:0e:b3:
                    86:12:9c:aa:c4:ee:0b:88:9c:88:9e:d2:d9:90:2f:
                    fa:eb:61:4f:13:8e:d8:4c:e2:fb:50:48:15:33:de:
                    ae:54:c6:04:ba:aa:8b:9c:c4:c5:4c:3f:dc:1d:f7:
                    72:a7:61:80:d2:d7:5a:3f:66:e8:a2:cb:6f:de:2a:
                    d7:a6:13:b1:91:6b:76:a8:97:1f:9f:3a:aa:5e:06:
                    8c:61:ac:39:0f:49:d3:c1:cd:aa:09:bf:44:fa:c9:
                    3b:74:ff:b1:bc:37:90:af:2a:de:58:ab:d9:5d:1c:
                    2c:77:d4:c0:8e:2e:0d:16:69:b2:0b:39:c2:53:f5:
                    b7:c9:cf:5f:34:bd:97:00:9d:91:e2:54:5c:95:51:
                    9e:90:12:35:39:e4:d6:fd:aa:a4:f1:d5:74:c5:89:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A9:EB:45:ED:1F:02:BF:B0:FC:7B:C1:3A:74:A8:97:DE:43:E0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:93:96:d4:3b:94:89:fb:e6:98:17:5e:48:82:0c:8c:31:57:
         cb:79:cc:f2:94:6a:de:35:49:44:1d:55:28:83:5d:b6:ee:08:
         4c:25:83:86:7d:7b:d8:ab:e9:d2:e7:6b:4f:45:f5:53:44:33:
         81:0e:eb:8f:32:12:70:59:33:c1:dc:26:aa:db:0e:c7:76:7d:
         70:fb:ef:3e:4f:60:57:09:b5:ea:c1:2e:b6:43:2e:1c:11:bd:
         f8:fd:2b:9e:b8:71:f9:1b:0e:a3:63:64:3f:0e:bf:8f:55:b5:
         fe:97:9d:c9:3c:d4:e8:86:82:2e:a6:d0:38:9c:fd:25:91:3f:
         ae:44:8f:95:5c:fc:2a:34:b5:68:1e:7f:be:e5:54:4b:32:6b:
         d6:32:c3:d5:89:df:56:71:c6:44:87:ab:47:88:17:82:e1:b2:
         86:6e:c3:1b:de:8f:54:f3:f5:20:5e:cc:21:33:54:3e:4c:c0:
         24:96:9e:d9:cc:b6:a6:96:8e:89:6f:2e:3c:29:94:e8:93:6d:
         8a:b9:ef:90:b5:17:25:97:99:5b:ae:4e:6a:bc:5d:90:49:b8:
         fd:62:e9:0a:68:93:45:4c:b2:50:9b:45:22:ef:ec:58:59:77:
         09:b2:78:bb:9e:5c:56:cd:0d:11:46:ad:af:37:db:05:6f:5c:
         cf:fe:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:04 2024 by rpki-client on console-fra.rpki-client.org