Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa
File:                     97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa (raw, json)
Hash identifier:          u7ZitA/I+l0KkXwlwnvHNwTEMlGc01nw5nLPlJQImr0=
Subject key identifier:   B2:67:92:53:FB:48:16:8B:A1:33:15:41:0A:FC:A7:DC:53:2D:DC:E3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472405D20FDEF0133FE5E7DCC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.225.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:d2:0f:de:f0:13:3f:e5:e7:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=921f3a16-d173-4f5a-97a5-bd84fa89a919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:84:2e:70:f7:6e:1c:5f:29:25:5b:63:71:
                    f0:e9:a0:5a:df:e8:58:8a:4e:d6:84:c1:b9:cb:44:
                    1a:74:89:0f:7f:81:e4:c4:97:21:31:19:ea:60:b9:
                    97:a2:ff:5b:0f:c8:0e:b3:1f:41:bb:e7:6e:48:08:
                    e0:37:70:1b:4e:58:3e:3c:4e:1f:7d:42:e9:70:00:
                    9b:17:08:d8:dc:6f:fc:00:7b:79:6b:ef:73:63:cf:
                    3b:61:19:a3:d1:99:da:dc:95:0d:3a:78:cf:fd:eb:
                    e7:67:0f:b5:64:12:6d:12:f2:43:77:01:fe:96:fb:
                    55:8e:69:11:ea:c8:38:e5:0d:8b:4e:a7:da:80:15:
                    89:e1:8d:3d:84:1f:c0:1f:86:44:59:e0:f6:60:a2:
                    35:e5:c9:fb:a2:97:ec:51:1a:04:ed:35:02:ac:fd:
                    0a:93:71:6b:fc:a3:e7:84:f6:ab:8a:af:57:c0:2d:
                    5e:32:41:72:90:42:2f:81:bf:46:e6:e8:8f:ba:b7:
                    97:ea:a6:6f:8c:17:41:6b:d1:81:d0:ab:23:5b:37:
                    eb:15:d1:ba:28:a4:80:92:ab:26:64:b4:a7:25:27:
                    30:3e:c1:5f:7b:c8:90:1b:8d:9e:a4:cb:12:6f:99:
                    fa:fb:4a:bc:a8:f6:3f:ed:ec:19:58:e1:eb:1f:82:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:67:92:53:FB:48:16:8B:A1:33:15:41:0A:FC:A7:DC:53:2D:DC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:b3:e8:10:89:7d:72:f0:70:11:02:d4:6e:ba:39:69:a5:
         00:da:4f:cc:49:ae:1b:0b:25:25:79:53:22:de:a1:d3:3c:21:
         59:bd:f7:3a:bc:2f:6d:18:13:94:b6:33:0e:e2:5a:7e:27:c7:
         fa:0b:0b:79:72:db:26:6b:af:c9:c5:6f:4c:8a:6d:2d:23:03:
         54:b8:b1:b0:6f:c2:f2:87:dc:42:9e:69:f2:dd:6a:07:fc:1f:
         9b:57:1d:94:52:9e:dc:55:eb:bd:b8:c6:08:ac:3b:ac:61:16:
         9e:79:e5:5c:8c:da:cb:2d:44:69:a7:75:a0:cb:0b:44:08:32:
         dd:55:9b:bb:1d:d2:69:e9:dc:03:d7:ce:25:2c:bd:9a:8b:89:
         38:24:04:15:33:2f:a5:5c:3c:f6:d8:a9:ae:6e:3b:24:33:94:
         87:e6:20:22:f7:c0:66:70:30:c0:b0:9f:44:0d:19:40:d3:1d:
         3b:70:93:07:62:ff:f4:44:4b:d7:dc:c7:51:11:97:61:b8:23:
         2f:0b:e0:bc:d1:87:31:bc:14:3b:6f:1b:97:d4:34:e9:19:de:
         01:a9:16:1f:e5:9a:63:4c:55:ec:41:84:1a:22:78:71:ef:31:
         2d:0f:22:d4:88:0d:33:f7:40:2b:37:af:51:2a:50:79:d1:1c:
         8b:04:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:26 2024 by rpki-client on console-fra.rpki-client.org