Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c05835a5-1546-3802-a84d-2d1407b7979e.roa
File:                     c05835a5-1546-3802-a84d-2d1407b7979e.roa (raw, json)
Hash identifier:          5R0TV5xYRDhafptE3q+lk9bTT1V8PDE2V234V+CD0sI=
Subject key identifier:   48:D2:AE:06:8B:64:50:6E:2C:E7:AC:00:F4:78:DC:47:B0:D4:13:E9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847564607C7AFFD2B8AAA9CDC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c05835a5-1546-3802-a84d-2d1407b7979e.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     20940
IP address blocks:        184.84.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:07:c7:af:fd:2b:8a:aa:9c:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=916c2a3c-0970-4ce5-8144-fbf5601691da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3e:4f:a7:18:0b:6e:26:66:73:09:38:7e:26:
                    0b:a6:81:1e:a3:9a:1d:91:0d:2b:87:60:b2:c6:d3:
                    23:59:ad:40:64:c6:09:c1:6f:28:fa:29:24:75:73:
                    b0:8c:44:a3:5e:f3:38:cb:e0:d3:4b:b4:60:da:e7:
                    28:38:7a:38:6f:18:84:42:e8:ea:4a:4a:bd:79:9e:
                    83:9e:44:a6:34:84:74:d7:bf:b6:b7:38:15:80:0e:
                    a1:40:3b:40:bb:86:60:f3:af:b9:72:9e:a5:33:25:
                    72:25:20:3e:ac:df:71:6e:df:17:48:e9:60:40:6d:
                    4b:94:65:ec:91:f3:b1:99:29:85:48:af:56:b1:a1:
                    53:b6:91:84:d9:0f:03:be:7b:2b:f7:7c:fd:a7:7b:
                    65:56:a6:a5:64:17:08:ab:59:b8:ba:ed:e5:cf:83:
                    60:40:25:05:81:09:fe:bc:08:f2:e4:9e:6c:b8:21:
                    5e:55:31:14:ab:f2:95:ed:60:0a:fe:ab:9f:d9:0a:
                    2a:8f:1b:b8:df:b9:f2:5f:f7:97:05:9d:fc:cd:41:
                    21:8f:e3:a1:3e:90:2e:b6:24:f8:4f:8d:a2:04:e7:
                    91:dd:b6:76:d1:ea:a9:95:a4:15:39:46:2d:fc:7f:
                    5e:67:53:9f:4e:89:6e:d9:0c:ba:90:2a:dd:5d:dd:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D2:AE:06:8B:64:50:6E:2C:E7:AC:00:F4:78:DC:47:B0:D4:13:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c05835a5-1546-3802-a84d-2d1407b7979e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:95:38:14:e2:2d:e2:47:f7:94:20:ed:a6:49:ee:2a:d5:2c:
         c6:3b:83:83:00:45:a1:dc:df:97:15:6d:c0:d2:6e:26:3f:3d:
         84:6f:c9:32:62:8b:d8:a7:2a:1a:58:83:1f:c7:25:07:e3:88:
         0d:67:73:7b:9c:1d:f1:ed:29:aa:5e:65:5e:18:ae:02:47:0c:
         44:66:1d:64:5d:3c:be:0c:69:33:10:df:53:5e:8f:91:f3:25:
         7a:23:8a:7b:38:f7:05:f8:e5:68:df:52:01:82:6b:70:6b:76:
         fc:1a:0a:45:83:99:bf:27:b1:f9:e1:1e:77:29:3d:9d:47:4c:
         5a:0e:50:1f:07:3c:1b:bc:42:d9:a1:4b:05:bd:80:0c:f0:12:
         3b:c2:08:45:19:6e:6e:63:e7:24:ab:c2:88:62:a8:a8:7f:0d:
         66:ed:3b:df:9f:86:25:c5:14:7a:29:bd:8e:0e:cb:5b:84:39:
         65:28:49:1f:80:25:87:b8:28:d1:d6:e2:27:9a:d3:e5:2a:94:
         53:f8:b2:72:c9:53:3c:35:d1:a5:6c:c7:0f:35:ba:5c:05:f9:
         92:fb:46:b7:04:c4:43:4f:e4:4c:fd:df:e3:81:63:03:7a:2f:
         7d:71:11:f8:d0:01:a5:c8:b7:b4:02:cf:4a:eb:cc:ce:11:77:
         9e:5a:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:38:33 2024 by rpki-client on console-fra.rpki-client.org