Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa
File:                     bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa (raw, json)
Hash identifier:          LfuGbSMNbO+GCM9DJI21fIMtArNgCZ0qkFqwQ3JDVgU=
Subject key identifier:   12:11:29:48:EE:DC:0C:B9:D8:F8:B5:1D:F4:D5:32:F8:EF:95:8D:65
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474420C149CB426D99AD665480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     20940
IP address blocks:        96.16.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:c1:49:cb:42:6d:99:ad:66:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=902724b8-6c3a-4c32-851f-2251e9634671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:90:8f:76:f2:d8:89:f1:80:30:2b:8c:80:
                    17:8c:ef:24:97:ad:31:96:cc:b8:ab:9a:53:55:b1:
                    58:ca:d8:fe:2d:a6:45:f6:7c:71:77:f4:7e:9f:ba:
                    f6:94:15:b0:79:7a:0a:3f:5e:bd:bf:89:8a:c6:ce:
                    32:4c:86:9a:f3:61:82:da:a5:d4:0f:c8:3d:e4:c0:
                    60:13:2e:82:70:54:76:c2:fd:2a:0f:c8:fd:0f:08:
                    b9:8d:e9:5a:64:26:00:4d:72:1d:cc:55:65:15:4d:
                    ea:c5:13:c3:f3:e7:d1:c8:15:ac:17:cb:b2:e2:f9:
                    e6:be:01:e6:a4:91:93:9a:3f:f6:39:12:01:6c:da:
                    00:42:50:15:ff:96:03:77:68:fd:7f:2e:f5:09:5b:
                    c8:ff:5c:d3:f7:6d:6b:2e:0d:60:66:7a:1f:2f:9c:
                    46:87:cd:c8:ef:bb:07:79:36:cb:b1:80:87:89:ae:
                    c7:70:d9:70:82:44:51:c3:26:c9:91:2b:b4:22:05:
                    a9:4c:d1:aa:98:41:7a:ed:f4:72:bb:9b:cf:94:27:
                    78:b8:44:4b:ad:cb:ab:4d:40:46:70:f7:64:1d:a7:
                    04:f6:3d:9b:fd:10:d1:7f:0a:ab:6d:fd:a2:c2:7b:
                    e7:74:e3:39:22:97:21:99:4b:07:2e:7c:20:74:6b:
                    99:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:29:48:EE:DC:0C:B9:D8:F8:B5:1D:F4:D5:32:F8:EF:95:8D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb9c6f6-a8be-31a2-b79e-aec03914a532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.16.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:ce:4d:52:f7:85:f2:6a:b8:fb:48:0c:a8:9f:5b:9f:3b:
         4e:12:28:90:f4:d9:f1:e3:d1:f9:59:f3:da:46:b0:fa:62:bd:
         c5:88:d7:f2:0d:4a:8b:da:27:52:fa:bf:f6:a2:80:60:e9:fa:
         4e:f9:8a:1f:5e:74:11:3e:0b:3e:f4:a4:23:9e:fe:82:e0:84:
         18:a4:d9:35:5b:f8:ae:bf:92:0f:d7:51:a6:1b:83:56:63:87:
         6b:ac:3a:e6:8d:5c:d2:36:e6:e9:c2:70:29:5b:92:3e:bf:2b:
         49:be:48:b4:04:9c:8d:87:6b:25:19:5a:dd:e2:df:6d:5a:61:
         6c:11:ca:32:d4:38:bf:27:df:6b:dd:bb:4c:72:da:10:51:bc:
         2b:05:f7:d3:c2:b1:02:c9:33:b9:ed:96:73:6b:70:b9:16:13:
         26:40:1c:0f:b2:33:33:e4:41:e3:48:2d:b1:61:ee:b3:e3:0e:
         9c:38:e1:a0:8a:d6:d8:a0:1c:04:fb:04:ad:94:11:5e:16:bf:
         f2:f2:c0:fd:2f:96:3d:46:a3:94:4b:71:b0:12:ac:88:9c:aa:
         bc:cc:c7:e5:1b:25:a5:5e:40:a5:38:55:f4:c8:65:52:da:53:
         93:09:c8:42:91:73:46:9d:fc:1e:26:e4:5d:25:b8:a9:99:5c:
         9d:22:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:33 2024 by rpki-client on console-fra.rpki-client.org