Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa
File:                     b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa (raw, json)
Hash identifier:          otwKBwuw1UQ6Y/d7sMvaTIf+KNCSJRCXi4YIwbiUuP8=
Subject key identifier:   96:AA:7A:0D:BE:DE:7B:76:6D:B3:E7:59:41:DE:CF:0C:B8:EE:52:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584756460B1FAF41FB9D8DB18F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        184.87.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:0b:1f:af:41:fb:9d:8d:b1:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=268e8bf4-d7e0-43af-988f-144d71098171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:2d:3d:6a:1c:f8:35:9a:e6:de:93:17:66:
                    9a:e9:45:f1:0f:5e:92:b1:39:d5:a0:eb:de:82:65:
                    cb:ab:a7:0e:51:03:0c:0c:ba:55:45:6b:01:53:23:
                    96:2e:8e:d9:09:c3:25:78:31:22:a4:c4:ac:cc:e6:
                    a8:87:c7:f5:88:91:6f:10:42:db:7e:c3:31:dd:40:
                    25:95:a5:72:e6:be:7d:c8:2f:99:44:9b:20:f8:57:
                    e2:78:b7:6a:09:8a:04:33:2c:22:5a:d9:ef:aa:b0:
                    c4:1e:3f:b2:5e:89:8b:55:08:9a:01:53:46:08:58:
                    a3:3c:6e:9e:f3:62:fe:46:50:c4:1c:48:46:74:ea:
                    9b:2f:86:75:73:1a:93:03:f1:25:6b:dc:27:ac:2c:
                    a1:73:54:67:e6:52:7d:cf:ae:a0:32:bb:f9:a5:d8:
                    5d:b5:b7:c9:c6:c1:58:9c:e3:70:93:bb:27:b5:a7:
                    74:dc:1f:57:24:bd:f0:e7:24:b4:73:b9:77:2a:f8:
                    ba:bb:42:e2:4d:58:2e:5b:08:ed:17:18:8d:29:d7:
                    98:12:a0:c6:f7:d6:ee:0f:dd:cd:a5:dc:71:f6:46:
                    c9:14:29:6c:74:f8:ad:bf:75:32:3f:01:ff:70:14:
                    7e:dc:48:73:e6:b5:41:e4:dd:1c:1f:ad:c2:bf:97:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AA:7A:0D:BE:DE:7B:76:6D:B3:E7:59:41:DE:CF:0C:B8:EE:52:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b34f24ea-d0e3-37ff-b9eb-17ccc1ff5b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:78:99:fa:80:c0:7d:82:77:23:f7:47:67:91:cf:88:c6:53:
         d3:13:31:2d:11:78:90:8b:de:1c:cd:10:8d:20:14:c8:ff:f4:
         58:30:fd:c4:9f:9c:86:10:f4:9a:3c:c3:cb:75:dd:41:f1:70:
         1c:0f:9c:ec:e3:1f:39:53:a1:95:66:a6:a0:0c:4d:8a:d5:be:
         ed:24:e0:b2:52:31:2b:66:7d:be:64:db:1a:57:e4:c4:60:5a:
         19:4e:96:36:5e:04:d3:08:d8:8c:67:83:b6:c7:6f:a8:64:b2:
         3c:ea:9c:8c:62:3e:6a:a9:81:de:68:30:3f:a3:20:ab:17:a3:
         26:9c:33:86:68:69:46:f1:5d:79:14:01:27:ff:bb:4f:26:c4:
         de:48:4c:f2:27:7c:3e:bd:dc:f2:4d:81:2a:1f:7f:60:22:0f:
         2f:79:44:04:9c:1b:8a:f9:83:e7:aa:c2:a8:df:13:20:ea:c5:
         fb:72:a2:ad:40:9f:9b:0a:42:80:a5:16:30:bf:6e:ad:b1:a0:
         cf:29:d5:7b:0b:80:2c:a6:19:0e:48:a7:ce:73:b4:ea:e5:d3:
         65:04:cc:8a:40:9c:d4:62:49:cb:c3:ff:15:0c:70:f0:e7:aa:
         c1:61:e3:0d:7b:39:47:32:8e:78:b3:4f:60:a9:7e:81:3f:09:
         b6:04:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:21:35 2024 by rpki-client on console-fra.rpki-client.org