Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d87229eb-6792-3a39-8b76-4cd852c9dc57.roa
File:                     d87229eb-6792-3a39-8b76-4cd852c9dc57.roa (raw, json)
Hash identifier:          QWFlozwyWLve41ojUyoi0hfafoBV7AROAudDOOd/piI=
Subject key identifier:   9C:05:D8:0A:E2:DB:E8:78:86:A5:68:9B:B3:11:5B:21:F8:EC:49:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847362B67853D1B6AF66581F980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d87229eb-6792-3a39-8b76-4cd852c9dc57.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     36183
IP address blocks:        172.224.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:67:85:3d:1b:6a:f6:65:81:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=74a07eb6-e040-48a8-b580-f6e2b3608afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:69:51:eb:20:b1:38:dc:d5:8c:00:a9:49:
                    b5:ab:04:aa:93:0b:36:a1:20:2e:53:a5:44:f6:01:
                    9d:35:2c:d3:34:cc:d7:26:70:36:b5:43:4a:e9:dd:
                    09:10:fc:3c:fa:b5:eb:8a:fa:3f:a4:8f:66:4e:fa:
                    cc:99:50:8d:7c:63:0d:a9:05:d6:fb:db:e0:07:5a:
                    6d:05:a6:a5:6c:20:f5:8e:50:e5:10:5f:e8:1b:ef:
                    a2:21:18:a1:f6:a9:52:7e:c2:8b:d0:2d:dc:3d:55:
                    93:f0:35:74:c5:bb:fd:1d:94:4d:bb:bc:a1:8e:39:
                    6d:36:91:da:09:a6:12:eb:d7:dc:d8:22:0b:92:ab:
                    1d:59:18:4e:84:a0:91:4f:33:80:7b:d6:b3:7f:9b:
                    12:76:7c:56:4a:03:fe:d9:7f:3f:83:3e:b1:74:23:
                    2d:35:80:08:2e:e2:31:e0:b1:c6:e5:c5:24:3c:6b:
                    10:60:e7:dd:ea:10:76:53:ea:b5:a8:66:3b:84:0c:
                    04:fb:75:98:e2:fe:1e:32:99:8e:a2:b3:35:dc:3f:
                    a3:19:d3:28:87:1c:07:3f:1d:87:2e:c9:73:84:08:
                    a9:13:1b:3c:97:f5:13:eb:2f:5a:fa:2e:8f:c6:50:
                    81:5e:57:3b:20:60:df:34:dd:99:0a:75:2c:20:fb:
                    e7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:05:D8:0A:E2:DB:E8:78:86:A5:68:9B:B3:11:5B:21:F8:EC:49:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d87229eb-6792-3a39-8b76-4cd852c9dc57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:81:74:81:ea:c4:85:ee:3f:eb:93:57:f7:6f:df:27:2d:
         f2:f2:67:1b:75:da:71:22:af:b7:a7:a0:6a:44:1b:57:3c:34:
         f0:17:22:41:83:38:2c:d0:24:60:8d:75:61:c1:df:45:ef:9c:
         92:56:ff:69:dd:29:9b:02:7f:1c:1f:15:db:8e:52:b5:22:34:
         4e:84:cc:b4:85:59:99:06:94:b1:f3:86:93:57:27:4a:a1:64:
         b6:68:20:68:1d:40:59:72:fb:23:e4:69:2d:c5:21:80:5e:42:
         90:41:75:12:76:21:3f:6a:19:0f:89:41:6c:da:31:c6:4e:d4:
         82:72:10:27:c3:11:e1:07:e5:d3:d4:87:22:71:d6:e9:d1:10:
         70:c3:4b:b2:16:0e:af:f8:df:5d:99:8b:bc:20:74:2f:89:93:
         9e:43:5f:76:6a:90:08:af:5d:35:9a:a8:c5:1b:b1:e8:b3:b3:
         87:4c:b3:0b:0f:37:ad:d4:0c:32:33:fc:14:6c:48:69:6d:a2:
         a5:a8:da:1f:d5:36:41:be:48:78:68:a4:19:18:8a:7c:49:b3:
         fb:57:fc:2c:0c:39:3e:df:72:b0:8d:2f:41:55:5f:de:b3:a4:
         e4:48:8e:f8:9a:44:be:31:ff:d1:b3:2d:75:5c:58:4a:4f:47:
         08:e1:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:27:49 2024 by rpki-client on console-fra.rpki-client.org