Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa
File:                     c162141d-e85e-3661-95e8-c0baecb23358.roa (raw, json)
Hash identifier:          p35T8ElEvXMA5PimmowafkVYaR7evgVat5YPnkdW0N4=
Subject key identifier:   BA:69:50:88:F3:B7:68:EB:5A:70:27:F2:1A:09:AA:C4:E3:BF:28:8A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858474C80DC937F40C6103BAC5380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     35994
IP address blocks:        96.17.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:dc:93:7f:40:c6:10:3b:ac:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=c917d714-060e-4bee-9cc0-ce23673253d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:fd:57:1c:39:63:45:18:dd:37:4e:cb:a3:
                    2c:58:0f:28:20:d1:17:b4:4d:9e:65:91:2a:02:55:
                    fd:5d:d1:86:20:45:60:f0:b9:9c:77:01:2f:95:75:
                    74:60:25:d8:23:ae:4d:94:cc:73:ee:85:71:ba:31:
                    50:ea:10:d9:c2:0b:af:fc:3d:7c:c4:b3:23:5e:e9:
                    23:de:64:57:2b:6e:9d:b8:f9:ec:5c:0c:4c:56:c0:
                    47:86:72:98:38:32:28:90:5f:33:d9:bc:a7:93:ff:
                    2d:51:a9:4c:d2:88:81:1f:43:c8:ec:f5:0e:91:5d:
                    2b:da:a1:f8:6c:33:3c:f2:e9:7d:d7:9c:e1:95:95:
                    02:81:0c:2d:50:a3:e3:37:43:fa:10:67:4e:e5:07:
                    5d:b1:58:2e:4b:aa:2e:c6:e6:24:92:08:d9:c4:02:
                    c0:a4:2c:30:9c:80:52:9e:88:95:0f:c8:05:69:19:
                    81:d9:80:da:8f:84:cd:91:cf:55:b6:bf:90:e9:12:
                    19:bb:af:6f:41:a8:40:03:ab:1c:91:86:86:19:d6:
                    9c:d8:64:6b:b9:ff:5d:81:dd:6e:e3:96:45:93:f6:
                    59:70:cc:a6:d0:20:15:99:70:08:bd:2e:9c:34:15:
                    30:cc:b3:f6:0e:48:62:64:c5:65:a4:49:9e:2d:dd:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:69:50:88:F3:B7:68:EB:5A:70:27:F2:1A:09:AA:C4:E3:BF:28:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c162141d-e85e-3661-95e8-c0baecb23358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c6:9a:17:cf:e2:26:75:9f:5a:4e:8b:47:4e:ed:11:4b:62:
         72:93:d9:60:05:b7:d7:cc:77:a2:d6:a7:b2:9b:12:7e:52:53:
         0d:68:c0:84:f9:fe:bf:0e:98:88:b6:af:fe:f8:4c:4f:cd:ec:
         d7:a4:97:4c:ce:45:7f:93:d4:49:c7:92:d5:68:9c:d0:d3:a8:
         a1:41:cc:80:08:10:f2:35:09:a8:d5:94:68:f8:8c:be:15:31:
         04:05:ac:7d:f4:df:b6:8d:a7:8a:c6:cc:d8:89:68:2f:2d:1e:
         2b:5b:b3:4c:8f:0e:43:1d:56:20:19:eb:05:c9:5d:68:5a:de:
         9a:53:59:ae:ee:a8:61:49:9b:23:87:c5:ee:d7:c8:42:9d:2a:
         1e:72:1d:7a:d8:06:d7:a5:81:91:5c:55:76:a3:e0:36:48:51:
         16:0d:65:3b:10:ec:c9:89:c3:9a:2d:98:93:3a:87:f5:f3:b5:
         63:8c:a6:81:ed:f7:b3:82:4f:60:54:4c:9e:0b:cf:f0:5a:8b:
         cf:55:46:b5:bb:54:eb:3d:d8:9c:6b:15:87:13:73:63:a2:01:
         97:0a:02:0f:d6:e8:8a:1f:8f:01:4b:42:64:72:57:27:df:fd:
         03:13:e9:d6:ac:96:e6:69:a8:a7:35:b8:01:84:43:46:70:c5:
         a8:e3:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:30:29 2024 by rpki-client on console-fra.rpki-client.org