Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c455c9f-18dc-3e7c-b080-4754bffac73b.roa
File:                     8c455c9f-18dc-3e7c-b080-4754bffac73b.roa (raw, json)
Hash identifier:          SpjwMsaydwsORsjP3aiDGblPhag5O4i8VYLT5dq6gp4=
Subject key identifier:   B9:C0:5A:C2:D7:21:D0:0E:85:48:00:11:89:E7:16:B5:15:04:ED:F9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584762D672C7B8B72DC5A9814570
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c455c9f-18dc-3e7c-b080-4754bffac73b.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     20940
IP address blocks:        184.28.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:72:c7:b8:b7:2d:c5:a9:81:45:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=7c573641-750a-4d2f-a2e7-9fcfe4b4aa09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:45:a0:fc:91:2e:80:be:28:12:80:8d:7c:
                    28:35:e2:c7:84:a2:ee:76:df:b6:83:a8:bf:b9:c3:
                    00:0d:fa:af:ee:51:21:d3:33:c2:91:48:e6:88:07:
                    67:6c:84:ec:e3:3c:fd:5b:a7:89:34:d9:62:ca:1b:
                    e5:f8:77:e0:da:cf:55:ba:6d:4b:60:54:b8:31:9f:
                    10:7a:78:ba:f7:92:1b:75:f0:22:96:ab:0a:2a:33:
                    27:11:27:92:77:92:15:07:25:3f:4b:72:0b:77:8f:
                    7c:86:96:9b:f2:d6:66:10:07:79:60:7e:f9:79:53:
                    42:5b:66:18:35:e1:cd:ac:ec:88:52:ce:ac:5a:9f:
                    32:6d:5c:25:26:c4:be:f3:1a:f2:3a:81:91:be:95:
                    a5:eb:20:46:0f:55:9a:5c:dc:4f:7f:e3:82:04:d9:
                    67:9e:aa:97:e1:08:21:99:7e:50:c4:2b:ef:c0:59:
                    c1:98:11:24:56:a6:bf:60:0c:65:1d:59:75:44:4e:
                    16:76:66:2e:55:67:f2:d2:e3:af:c8:ff:51:eb:01:
                    14:ef:bb:c4:aa:c7:fd:84:c4:d5:09:78:db:be:fd:
                    f1:80:24:a5:80:3b:e4:32:82:b3:b0:1b:e3:4d:e1:
                    93:dd:3b:37:d4:6c:44:e8:9b:f8:14:8f:0c:3b:a1:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C0:5A:C2:D7:21:D0:0E:85:48:00:11:89:E7:16:B5:15:04:ED:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c455c9f-18dc-3e7c-b080-4754bffac73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:7b:46:3e:d5:69:1c:47:23:a4:54:db:c6:12:66:52:8a:
         06:cc:4b:55:df:36:e1:b7:e6:78:24:2b:86:5b:fe:f4:a2:ba:
         2c:1b:39:97:c1:30:aa:8b:99:38:5c:b9:cb:2c:40:d5:92:fb:
         84:3d:10:05:1f:e2:cd:11:3c:f1:91:67:3f:45:58:70:c5:16:
         5f:62:03:4d:92:3d:e0:61:23:c5:a2:aa:42:8d:34:52:aa:aa:
         b8:1b:52:60:80:c1:3a:ac:77:1e:4f:62:8f:86:29:c9:1c:a2:
         4e:db:59:12:15:97:07:42:ea:83:e7:ba:03:fd:75:40:d0:e9:
         d2:50:b0:9a:fe:16:7e:68:b4:c0:23:67:b2:20:cb:e9:64:2a:
         a1:a4:69:3c:74:a8:b5:57:bf:ee:af:3c:5b:64:1c:9f:41:3d:
         ce:d4:2d:b7:a5:42:62:07:9b:e2:6a:d4:16:99:d6:38:6d:d9:
         b6:40:c1:25:17:a9:90:a0:49:14:c6:0d:93:0f:79:c2:dd:cd:
         51:44:ec:b6:9f:f1:c5:28:37:fc:2d:ec:5f:64:74:11:b6:d3:
         59:fd:8a:86:1d:7e:ce:4f:27:9f:29:42:64:ef:2e:a0:02:a7:
         e1:e1:a9:f8:a8:84:75:f1:ca:4d:b3:34:42:dd:84:eb:5d:81:
         9e:34:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:12 2024 by rpki-client on console-fra.rpki-client.org