Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae89693-2fb1-3cba-8e7e-87bb0cd67295.roa
File:                     8ae89693-2fb1-3cba-8e7e-87bb0cd67295.roa (raw, json)
Hash identifier:          8A7rhe2PIQVqp+FZF49Dath8tjanH2k6sMZsdxfpv1k=
Subject key identifier:   FD:9F:8A:F3:52:DC:38:9A:E0:1B:32:BF:B4:20:2C:72:A2:A4:2E:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847256B1FFF7D134953A37739C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae89693-2fb1-3cba-8e7e-87bb0cd67295.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     4775
IP address blocks:        184.29.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:1f:ff:7d:13:49:53:a3:77:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=a1aced3e-d747-47bb-a293-37cd28e58ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:10:2a:27:db:33:62:84:9f:8e:cb:3d:4e:
                    10:a8:cf:03:3a:16:2b:0c:e3:35:bd:8c:00:2d:f2:
                    b6:78:c2:93:18:11:01:dd:ad:0c:61:5a:8c:69:3b:
                    81:37:0d:88:ac:2e:fa:38:3e:61:00:d9:fb:a3:7b:
                    1a:3b:1a:34:f1:8d:aa:de:2a:c4:ba:7b:d1:3c:0d:
                    35:a0:10:28:24:49:97:dc:35:45:0c:00:c3:89:bb:
                    2a:44:5f:01:5c:60:41:97:88:d8:95:65:fa:72:d0:
                    88:60:1a:7f:8c:be:c7:3f:1c:5b:a3:6a:63:dd:7e:
                    eb:5c:f0:f9:f2:b1:56:4e:09:61:25:45:80:ae:fa:
                    1d:d1:6f:cc:1d:c9:1b:4b:ab:9f:2a:fb:33:50:40:
                    67:b0:07:e8:35:54:45:a2:b0:aa:82:df:6e:e6:8e:
                    7e:c4:2a:1e:b1:61:34:53:f3:46:34:df:30:57:60:
                    59:ec:d3:53:c1:3b:7a:ee:c2:27:54:12:2e:57:2a:
                    af:89:65:86:9f:f1:80:e6:cc:7e:0b:19:2b:d4:84:
                    3f:c2:e3:1e:12:9a:5e:90:dd:f4:40:b3:31:62:2a:
                    6e:0e:52:3c:f8:e9:22:da:93:ec:6a:07:f7:76:95:
                    ef:88:b0:73:54:bc:df:95:38:f8:b5:35:62:ff:cc:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:8A:F3:52:DC:38:9A:E0:1B:32:BF:B4:20:2C:72:A2:A4:2E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ae89693-2fb1-3cba-8e7e-87bb0cd67295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:79:5f:09:38:84:ac:51:f7:4e:e6:d2:3e:9b:fc:b3:77:8e:
         0f:2f:6e:ce:ba:5d:fd:a7:10:1c:ac:10:2e:94:ce:04:a8:8f:
         ce:7f:74:1d:e2:27:24:96:a3:42:0c:77:c4:5c:38:e2:cb:f0:
         b4:07:e8:0e:8f:2d:02:e6:5f:c2:64:a5:6c:d4:44:20:48:ee:
         94:6f:fd:23:30:c9:f9:43:5f:e2:e1:b3:cd:39:b6:df:f3:98:
         02:d5:42:0e:75:8d:a2:d1:2d:81:93:cd:6f:07:b5:48:7b:8f:
         39:59:61:f2:5f:0b:b5:74:c5:9b:51:62:e5:a9:ec:69:63:95:
         35:90:ba:55:06:8b:e5:c0:1a:ef:c1:d7:b9:4f:f3:5a:7c:1c:
         fe:5d:47:a1:07:b2:7b:f0:64:52:26:5f:a5:ce:2f:0e:84:b5:
         1d:0c:ca:e1:eb:b7:46:3a:a7:77:32:98:d4:50:94:30:a4:a8:
         f1:6e:78:22:aa:8a:27:27:77:3a:6d:6c:6f:8d:ee:0d:2a:a5:
         40:17:2e:4c:ad:ba:16:90:40:2f:27:94:bf:2b:69:44:22:31:
         c1:aa:9e:ba:19:9e:90:66:7e:3b:10:e4:6d:f3:19:fc:d8:3b:
         ba:d3:06:4b:bb:f3:eb:b7:82:65:3e:9c:83:e1:25:25:a6:1f:
         8d:08:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:33:23 2024 by rpki-client on console-ams.rpki-client.org