Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab7328fc-0352-304e-9435-df90dd511034.roa
File:                     ab7328fc-0352-304e-9435-df90dd511034.roa (raw, json)
Hash identifier:          EhI5aKemyIRYIGGACpuaKpkBrGa2kFAt61G9ojMcOGc=
Subject key identifier:   18:07:35:E2:13:A5:36:28:3D:E6:CC:E6:A4:04:68:A7:69:F9:3C:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847362B697C58202674F5844700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab7328fc-0352-304e-9435-df90dd511034.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     36183
IP address blocks:        172.224.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:69:7c:58:20:26:74:f5:84:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=590c3373-13d9-40ae-bd8d-5fb5643657b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:86:43:c8:30:e2:68:94:de:30:3a:00:df:c5:
                    5a:ca:c0:36:ba:6f:90:88:0a:bf:52:f5:78:18:64:
                    b5:83:38:5a:f3:ea:8e:87:c1:46:d7:0b:4f:31:a5:
                    5a:6b:4a:24:70:f8:db:e9:04:d0:c4:90:be:3e:75:
                    de:10:ba:ea:cb:f4:8a:e9:fd:22:90:d5:0f:a5:13:
                    f2:05:45:1d:fb:20:83:a7:dd:9c:a3:36:95:66:a3:
                    3f:ea:c8:13:e7:18:d1:de:99:fe:0c:d8:f9:84:fb:
                    e5:9b:11:13:ca:ee:4a:c4:eb:57:5e:77:84:cd:0c:
                    de:58:19:1b:0e:1f:4e:fb:09:42:b6:5a:4d:29:b0:
                    be:fb:0e:c8:2b:01:ab:63:a3:94:0a:f0:2f:86:99:
                    de:e3:a0:9c:4b:c0:ae:c4:85:11:89:5a:63:cf:43:
                    79:79:96:b9:0d:0f:57:25:96:a3:58:05:a9:7f:d3:
                    b6:11:d3:78:06:f5:c8:4f:94:0b:67:c3:4b:a0:0b:
                    c1:38:d3:a6:c6:90:fb:7e:bf:8a:e1:d4:bd:04:01:
                    57:00:52:de:b9:8d:51:7c:56:8e:46:89:29:56:98:
                    0c:d8:51:41:19:99:0b:83:17:fa:d9:f3:55:81:fc:
                    61:83:0a:44:b3:df:a4:50:79:cf:50:61:da:27:71:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:07:35:E2:13:A5:36:28:3D:E6:CC:E6:A4:04:68:A7:69:F9:3C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab7328fc-0352-304e-9435-df90dd511034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:ea:5b:a6:1f:60:95:f1:05:e7:dd:63:59:66:32:d7:db:
         f1:6f:8e:6b:ca:89:86:b1:a4:b9:6c:1b:77:6c:4b:bd:3e:c7:
         88:44:ed:9d:4d:5f:c8:2d:e3:ab:3b:41:6d:12:c8:3d:b3:34:
         85:53:2d:47:ce:a6:db:2e:b3:70:fc:cd:f7:79:54:ab:e2:13:
         12:ea:6c:10:53:fc:d1:21:9a:4e:28:67:04:cd:ec:1c:43:69:
         52:93:6e:a2:e0:b4:56:aa:41:9c:0b:86:e0:c7:30:a1:ad:6d:
         22:b0:c6:b4:08:77:75:08:c4:2b:15:0c:04:5c:86:90:8d:48:
         b8:78:6e:0c:1d:d2:59:03:13:55:a4:87:42:62:12:12:e9:5a:
         43:74:fc:18:7d:ac:74:06:51:61:ad:08:c9:6b:ba:93:6b:c0:
         c7:36:81:49:5c:7a:8e:30:03:11:63:1d:b6:7d:69:6a:15:a3:
         b9:fd:34:5e:89:59:bb:63:65:38:6c:f0:5a:54:e5:7d:e4:78:
         47:82:6b:ab:1c:51:96:ed:70:dc:73:bb:45:7d:40:18:a1:b2:
         e8:76:b4:a3:23:6d:b9:bc:4c:98:75:59:71:e5:aa:bf:77:58:
         24:78:61:5c:de:21:88:ab:4e:0a:a3:67:22:39:b0:fd:b3:90:
         9a:94:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:32 2024 by rpki-client on console-fra.rpki-client.org