Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbd55bef-c6cb-3cc0-88b3-351584908f9f.roa
File:                     bbd55bef-c6cb-3cc0-88b3-351584908f9f.roa (raw, json)
Hash identifier:          3M+wluSa2SImzE3u+e7zOcJgGkuqcjkXyWC7HYhAZxI=
Subject key identifier:   A6:83:DD:BB:57:67:A2:C5:F2:13:84:95:E9:5B:90:12:13:0A:D0:5D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474C80DBB4A57A6D6A6B5ABFE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbd55bef-c6cb-3cc0-88b3-351584908f9f.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     20940
IP address blocks:        96.17.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:db:b4:a5:7a:6d:6a:6b:5a:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=1c1fc8ae-c304-4e10-84a0-1420d5ef9d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:8b:c1:74:7d:97:b5:ff:c2:c3:bc:c8:8f:
                    eb:1e:cd:ae:da:01:31:32:5f:7b:43:c5:de:ad:16:
                    84:61:7d:71:9f:18:a1:1b:4b:25:2b:a4:a5:a9:1f:
                    7f:54:2a:69:6c:07:fc:f2:56:bf:75:d8:69:eb:de:
                    81:05:0d:21:d1:44:a0:ac:48:97:5a:fa:86:26:03:
                    54:dd:46:02:e6:40:7e:0b:1f:a4:d7:bd:92:56:3a:
                    84:32:d5:6a:b4:ac:ab:b1:e3:a5:9c:7f:20:0b:61:
                    90:6a:93:ab:35:7c:26:87:48:e1:0f:bc:7c:ef:19:
                    6f:bd:ee:e5:c9:8d:5a:0b:d5:9d:a5:1c:e9:49:de:
                    6c:ef:97:d9:38:37:35:66:1b:f0:69:77:2f:2b:6b:
                    f2:0d:3c:f0:e8:34:2f:28:9f:72:c5:11:66:60:4f:
                    63:f5:c2:e7:bf:3a:a8:01:50:3d:d8:95:b6:eb:bc:
                    31:f9:da:2b:66:80:87:27:34:52:9a:95:b6:c0:88:
                    41:56:68:8d:1d:e3:27:26:ec:26:16:8b:12:b8:a6:
                    f2:f2:1b:1e:05:a0:ff:64:73:ab:ee:74:16:b6:06:
                    48:eb:70:48:55:c6:80:a0:74:83:6d:36:d5:0e:70:
                    74:8f:76:f6:c5:65:75:fb:66:4c:18:52:91:de:d6:
                    8b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:DD:BB:57:67:A2:C5:F2:13:84:95:E9:5B:90:12:13:0A:D0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbd55bef-c6cb-3cc0-88b3-351584908f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:34:e4:73:a7:8c:f0:93:46:69:7c:f1:b3:86:42:24:d0:
         33:bb:8c:61:88:ec:d4:75:e4:93:7c:1e:43:f8:b8:9f:65:c5:
         20:da:44:33:8b:1a:04:b5:8d:a3:8e:64:b0:5a:20:75:7f:fb:
         fd:89:26:a8:56:b4:0a:47:60:22:d0:94:f1:66:e3:8c:af:68:
         87:63:bc:c6:12:10:ae:67:87:8d:4e:8d:a0:b6:07:82:11:26:
         a1:1a:84:5c:5c:66:51:e0:05:82:50:64:0d:38:b3:68:2a:cf:
         02:ae:1d:43:16:a1:55:61:9c:6e:b5:b8:2a:b5:1d:c9:80:71:
         2f:1d:40:4b:b4:e8:a7:f6:a7:81:30:a9:cd:8c:e2:28:cb:55:
         b5:3d:20:41:8e:7d:f4:86:b1:95:97:52:fe:4e:69:c7:47:70:
         ab:81:f0:12:7a:a6:af:5f:e0:76:90:59:61:3a:1b:a2:6b:f2:
         09:1e:b4:36:f6:c1:f3:d1:bc:5e:d1:09:1f:46:2b:86:5b:38:
         c2:1f:83:b3:87:18:af:d7:45:29:53:4e:fa:29:a9:62:81:11:
         8e:2b:97:1e:17:00:09:25:47:1b:a3:8a:df:ef:cd:3d:82:1a:
         de:33:da:2d:c2:99:ec:f5:2a:92:39:90:c0:65:69:4d:7b:45:
         f3:64:60:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:31 2024 by rpki-client on console-fra.rpki-client.org