Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92501342-1eb6-3888-820a-9cf055f45083.roa
File:                     92501342-1eb6-3888-820a-9cf055f45083.roa (raw, json)
Hash identifier:          jOuQKnA5KXCWDVC+Ej3ynvNJ6vq2FM3yDF3AuMGOBow=
Subject key identifier:   05:0C:8C:54:38:1F:75:D2:7D:00:B6:39:CB:22:F0:3B:60:1A:D3:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584742BB633C47BA16E909765E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92501342-1eb6-3888-820a-9cf055f45083.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        96.7.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:63:3c:47:ba:16:e9:09:76:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=8b5d846e-115f-4208-b3eb-4fe4fac3bca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:37:5a:f6:bf:00:e2:ef:ff:cd:dd:ff:82:
                    14:10:f4:ed:2c:eb:f3:f4:8d:82:de:98:65:4f:58:
                    10:8f:83:f2:e1:17:e8:74:53:ee:cf:3b:6e:af:3f:
                    5f:16:0d:ff:5e:18:99:8a:ab:ac:12:4b:8a:0f:e3:
                    c3:f2:a4:3a:7c:57:51:70:3a:d7:1c:9f:55:78:1f:
                    e0:ba:9a:90:a1:d2:37:d8:5c:04:b2:19:f6:35:d1:
                    6a:3c:b0:0e:27:df:f3:7e:a1:44:7e:e9:39:f6:fc:
                    0d:90:ea:d2:1a:4e:3a:95:71:91:8c:cf:03:b7:08:
                    49:b9:3f:7e:09:ca:8a:ed:b1:92:a3:ad:34:48:66:
                    97:81:86:13:dc:17:2d:0c:56:ed:8f:a4:75:b2:33:
                    3a:a7:46:35:78:5c:63:7d:24:6b:8e:cd:c9:56:94:
                    17:dd:0b:92:83:a1:4d:0e:4d:63:14:a4:2e:62:25:
                    55:dd:4c:0f:70:a9:36:80:5a:52:95:e8:9e:98:19:
                    10:4a:f0:75:38:10:8f:a2:34:2d:12:ba:8a:e3:95:
                    c5:2e:46:a6:11:b3:15:2c:14:c4:b3:e4:51:8f:69:
                    96:e1:4d:5d:52:06:b6:18:2e:46:e0:ac:f7:24:01:
                    29:82:3a:68:6b:3c:14:62:df:42:98:c7:45:6d:1e:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:8C:54:38:1F:75:D2:7D:00:B6:39:CB:22:F0:3B:60:1A:D3:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/92501342-1eb6-3888-820a-9cf055f45083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:4d:ab:33:6d:50:bd:48:be:29:86:4e:06:3d:31:96:4d:
         c7:c5:61:38:bf:b1:18:02:57:93:d7:71:1a:04:82:4c:90:f8:
         b9:c8:c5:f9:88:14:d1:29:2a:99:b6:d7:9f:dc:82:4e:8b:47:
         47:ee:7b:3a:23:3f:f9:7c:af:33:02:2a:3e:09:1e:a9:06:a7:
         e1:cd:bf:57:f2:27:b8:25:56:2e:ef:3b:4f:57:03:69:44:83:
         9f:6c:5e:87:fe:d1:b0:b6:7a:41:96:9d:2f:12:7b:53:81:73:
         d4:fd:c9:76:bc:61:69:af:ac:1c:b6:17:02:2b:e7:45:03:1d:
         b8:96:81:af:2d:1b:9a:52:b1:6e:ea:78:2b:8c:5d:06:2f:1b:
         ba:39:8b:09:46:ae:08:d3:67:ec:81:c5:a2:17:a4:d6:4a:00:
         f5:02:28:90:c6:b6:b1:7f:d5:b1:10:b2:04:f3:cd:f1:40:df:
         38:6a:6f:03:55:ea:93:29:f4:0f:d0:ec:bb:89:91:94:52:0a:
         2a:2f:7c:07:58:70:8a:56:8c:54:0f:24:33:f9:49:a4:4f:df:
         40:3d:8b:50:11:fa:be:7b:4b:59:1c:80:92:37:df:67:88:6d:
         92:f4:b5:96:c8:da:00:db:7d:2d:1d:5b:ed:2e:19:d8:91:7e:
         bb:0f:74:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:21:24 2024 by rpki-client on console-fra.rpki-client.org