Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3483dad-ea74-32d3-87d2-a7348ba2397e.roa
File:                     b3483dad-ea74-32d3-87d2-a7348ba2397e.roa (raw, json)
Hash identifier:          0+a6wFnUQb89KKYDOuiUpZ2WJk62fK3/NO1m6MCkgpU=
Subject key identifier:   E6:CA:FE:C7:84:B3:D8:C0:FD:26:5E:48:F8:1C:EF:DA:93:07:E7:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473095DC5772157CB303135680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3483dad-ea74-32d3-87d2-a7348ba2397e.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     63949
IP address blocks:        172.235.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:dc:57:72:15:7c:b3:03:13:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=a3d83a8f-eaec-4688-aa4a-74a71a599880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:21:a9:45:51:3e:ad:e1:35:c7:0d:e4:a5:
                    b5:84:72:83:49:c4:7d:33:c1:aa:8e:e4:a9:79:6f:
                    93:ad:f8:4b:9d:f3:2e:42:42:cc:47:15:38:47:01:
                    b8:7e:7d:ee:de:4d:6f:a6:f5:b5:f9:cc:90:96:1a:
                    45:02:23:fd:3e:2a:5f:10:92:a8:ee:0a:36:b0:d5:
                    ee:2d:56:98:41:15:c5:0f:3a:1d:92:df:88:78:bf:
                    95:bc:af:13:8f:84:15:a5:f1:58:fb:f6:bc:df:ef:
                    dd:93:b0:49:1e:8f:93:12:68:98:bf:0b:bb:95:d6:
                    92:b2:f2:7f:1a:12:1d:9e:38:45:d6:a1:dc:cf:49:
                    c6:d2:0b:68:7f:58:c7:c4:9d:47:b1:5f:3f:2b:96:
                    93:85:92:04:cd:48:16:e7:4c:6f:43:1c:44:76:95:
                    9b:96:c1:36:94:d1:9b:54:1e:ab:28:11:8c:d0:2e:
                    2c:71:d2:b4:fc:d7:c4:f4:55:78:5f:25:8e:a1:00:
                    51:d3:95:98:e9:ed:c8:5a:98:5f:5e:d1:96:44:da:
                    b6:82:97:97:35:eb:40:26:e2:ad:e1:09:16:69:4b:
                    83:f8:a3:e4:18:f3:80:60:96:18:9c:eb:4c:6d:88:
                    63:ca:b5:36:b8:15:a5:9d:32:a3:8a:f2:f6:bb:48:
                    d9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:FE:C7:84:B3:D8:C0:FD:26:5E:48:F8:1C:EF:DA:93:07:E7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3483dad-ea74-32d3-87d2-a7348ba2397e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:f1:1d:48:47:ff:91:b5:42:ef:1e:29:f8:f7:b5:cc:bd:
         05:fb:46:4b:7f:0f:5f:11:cb:21:42:25:25:4b:24:a2:e7:7c:
         d7:9f:b4:4f:8c:46:e3:bc:a6:0a:b7:3e:4c:ea:1e:4f:47:a2:
         4d:37:2b:ec:dd:c9:82:1b:23:b7:e6:47:80:13:52:0a:19:cc:
         fc:eb:61:09:00:be:d7:28:a3:17:b4:7e:89:6a:87:32:80:33:
         09:98:d3:1e:2d:51:da:52:b9:7b:b4:45:39:73:de:de:c9:b6:
         ca:11:df:b3:e4:3d:0f:4b:87:63:5a:7c:36:d0:2d:f4:a5:01:
         79:67:c2:71:61:f3:d1:c9:01:3e:b5:bf:fd:80:ec:30:3e:42:
         c2:23:07:8e:30:ca:e1:bc:c8:09:91:c8:13:e6:71:a7:c2:79:
         45:ec:72:72:63:30:d3:30:03:54:d3:61:52:6f:e5:70:34:70:
         60:0f:a9:61:09:8e:31:94:b5:c5:7d:27:6e:3d:e7:4a:d3:26:
         b9:4f:be:b6:cc:6a:f7:08:fe:33:42:56:21:69:7e:39:d3:84:
         d7:5b:fa:31:24:83:48:73:ff:9a:ab:76:eb:f3:49:57:16:d0:
         9b:12:b9:01:29:d3:3c:3b:e2:ee:fa:09:2c:1c:b3:35:28:a0:
         65:41:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:23 2024 by rpki-client on console-fra.rpki-client.org