Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/965e20dd-21ae-3197-953d-06f803ff55f0.roa
File:                     965e20dd-21ae-3197-953d-06f803ff55f0.roa (raw, json)
Hash identifier:          +x6P/ZfS3aCdfJ1K5m/9htuG5W/bS/vQPoMhc69Dak8=
Subject key identifier:   0F:93:67:E1:3A:3A:B3:36:61:F1:7E:23:84:86:C2:6F:A6:C8:1D:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473A5B80140F0078A6DD376D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/965e20dd-21ae-3197-953d-06f803ff55f0.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     33905
IP address blocks:        184.25.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:80:14:0f:00:78:a6:dd:37:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=98882037-5c8f-4afd-a389-3f46e0d815a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:85:0c:70:4f:77:08:cd:cf:5e:fe:98:1c:
                    85:3b:de:f2:11:5b:8f:48:13:48:9e:a9:20:66:a1:
                    17:d4:c8:38:95:2d:59:3a:50:91:ca:a8:62:57:fb:
                    bd:74:93:0d:c5:09:67:60:51:16:13:24:a3:66:06:
                    54:f9:13:33:d2:a2:4e:4c:b8:4f:d0:75:4b:46:55:
                    6e:4b:68:0d:be:93:6f:b0:66:a9:6b:fd:89:3b:b4:
                    c6:0d:12:8d:18:9d:a8:ea:af:20:9f:8a:62:8d:a6:
                    b5:6c:0f:a4:a4:88:dc:69:d2:1e:aa:86:eb:ab:65:
                    37:67:71:ea:84:c3:3c:c8:dc:67:6d:27:39:33:87:
                    d0:20:04:7e:6f:f3:1a:31:22:c2:7b:52:4d:74:8a:
                    a3:4b:89:e7:df:ec:4a:53:b8:cf:76:cb:2a:29:c8:
                    ed:2a:88:3e:7e:89:68:1f:d2:41:0c:7e:67:21:2e:
                    02:03:7f:da:c0:70:bc:dd:32:aa:ad:67:2c:5e:98:
                    0f:5b:66:1a:a2:c2:2c:e2:73:5f:7e:fa:43:4d:93:
                    20:1a:17:74:1b:f1:bc:04:69:57:ed:3a:7a:75:4a:
                    c5:27:09:20:fb:62:4e:19:c5:08:82:2a:84:1e:ef:
                    c1:5f:f7:9e:00:50:7f:63:8a:be:81:f5:69:3e:e4:
                    d0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:93:67:E1:3A:3A:B3:36:61:F1:7E:23:84:86:C2:6F:A6:C8:1D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/965e20dd-21ae-3197-953d-06f803ff55f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:50:d5:0c:e7:83:2d:46:17:20:19:25:55:2e:83:0d:1e:
         e1:dc:fe:f8:b9:28:0f:58:cf:15:a0:5b:fa:d7:35:c9:0d:f0:
         e0:f2:da:92:5e:78:26:92:7e:af:c3:04:c4:aa:ea:18:aa:e2:
         52:be:d0:5b:cb:9c:ad:a5:6b:2b:61:4e:34:ca:57:73:54:1d:
         84:30:0c:d9:59:bd:0a:89:a8:fa:66:1c:de:6a:13:91:f2:f7:
         e8:09:1a:36:53:a8:0b:03:b0:c1:02:b6:51:4c:df:75:e8:b8:
         e0:35:10:70:cb:bc:08:15:61:21:84:2f:83:49:5a:78:dd:e2:
         99:29:ca:3e:56:0d:e5:a1:1c:dd:d4:7b:15:54:df:4d:e6:20:
         23:38:a5:bd:a0:35:d3:62:4b:25:6a:16:57:0c:25:99:09:46:
         86:73:ec:3c:eb:31:97:e6:bf:fe:ea:58:65:68:00:48:f4:7e:
         d9:f5:2f:e5:26:b3:42:33:79:f7:b2:dc:06:7f:84:ba:5a:82:
         ef:1a:fd:d4:09:00:94:81:8b:dc:85:a1:9d:b7:bd:22:0e:70:
         a5:25:65:cc:29:7f:c7:1d:b2:79:56:1b:a9:2c:e8:22:16:45:
         5c:ee:2e:ee:0e:5a:1c:5f:8d:a0:d6:9e:22:d3:f5:69:a6:7f:
         b1:12:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:17:16 2024 by rpki-client on console-fra.rpki-client.org