Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d9a000-4aba-31d4-99b6-148083f77db6.roa
File:                     c0d9a000-4aba-31d4-99b6-148083f77db6.roa (raw, json)
Hash identifier:          PgAzEqpxf6AcA9jHph/Yl5hXzrQWyH64T4w1FccuDH8=
Subject key identifier:   21:CC:43:B9:9B:72:57:63:11:13:73:13:D3:08:D7:BC:EA:ED:92:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472F308B235E99DA16E9F5B780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d9a000-4aba-31d4-99b6-148083f77db6.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.226.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:8b:23:5e:99:da:16:e9:f5:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=8fd15419-4667-48e5-86e9-585e54423ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:3d:7e:43:a8:e3:d0:0c:86:b6:48:01:29:
                    cb:78:97:2c:9c:fa:a3:08:d0:73:60:b4:8e:cf:c0:
                    d3:3c:61:09:89:5c:b9:68:66:b8:70:98:6d:d0:1e:
                    cd:c6:19:09:ac:d0:7f:34:4d:d7:45:41:38:0e:56:
                    bf:86:c3:7a:28:81:c0:4f:ed:94:ec:37:78:55:44:
                    ca:44:97:65:31:a6:9d:22:98:5b:22:51:fe:9f:4a:
                    0b:a0:8f:80:6c:11:14:85:87:b6:33:87:3f:e4:83:
                    68:ee:38:ea:0a:25:67:2c:cd:6d:57:fd:81:75:9c:
                    3c:bd:7e:d2:8f:96:41:c7:b0:e3:90:fc:47:c0:47:
                    62:65:77:fc:08:39:5b:24:20:c3:71:b8:da:21:66:
                    47:15:55:8a:30:83:97:3b:f1:f8:65:d2:29:de:22:
                    48:d4:e4:5f:bb:db:71:e7:54:3c:e7:d0:de:a0:ab:
                    c2:5a:4c:35:ba:ee:24:e7:de:99:c2:82:8f:db:0f:
                    2f:a3:ec:0b:1f:87:5b:cf:5d:18:dd:bb:8c:fd:de:
                    ef:d9:ba:80:e5:6c:29:17:36:01:40:b2:6f:9c:64:
                    fa:42:97:67:28:cc:43:a7:43:3c:ca:85:73:63:5a:
                    86:8d:49:1e:bb:25:75:ff:d6:dd:5d:03:83:d3:3c:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CC:43:B9:9B:72:57:63:11:13:73:13:D3:08:D7:BC:EA:ED:92:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d9a000-4aba-31d4-99b6-148083f77db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:41:d3:b1:5d:f5:61:9c:de:e4:13:b0:88:75:95:0a:88:
         6d:08:82:a4:b3:0d:d0:a4:da:85:7f:d8:3b:51:ee:0f:49:9e:
         22:94:0b:9f:e2:93:3b:49:58:14:cd:69:ca:a9:cd:ee:3e:1a:
         db:c1:24:c1:74:81:a5:0e:45:0d:80:af:34:eb:b2:4e:d4:9b:
         19:b6:fb:d0:89:e9:6f:a8:25:7b:61:13:a9:7a:8d:29:68:15:
         74:b9:8b:2a:26:3d:87:57:1a:87:b3:d5:4d:78:40:ad:bb:c4:
         83:ca:83:03:60:7c:d5:c6:85:f2:05:e8:c9:79:d3:59:61:28:
         eb:78:86:dd:02:fa:a3:82:2c:ed:ca:59:18:9e:0c:3f:bc:37:
         50:22:52:f8:10:fd:00:30:db:21:5d:20:54:4d:d1:3b:f7:95:
         55:02:58:b3:29:73:bf:26:c7:18:9d:2c:10:cd:7f:b0:56:4f:
         dd:04:21:c7:0b:a9:4c:ae:7c:db:a1:44:93:b0:52:2c:45:d2:
         94:40:b2:fc:b8:06:7d:04:4c:56:04:24:56:43:0f:c6:a1:9b:
         16:90:98:b2:84:88:75:69:99:b7:1c:23:3b:33:26:5b:b6:9a:
         30:a3:e7:c5:d2:ed:70:75:b8:de:d1:26:44:62:45:30:a0:5d:
         8f:82:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:39 2024 by rpki-client on console-fra.rpki-client.org