Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8aa3bc-41d5-3c81-be1f-ee36c460dfed.roa
File:                     fc8aa3bc-41d5-3c81-be1f-ee36c460dfed.roa (raw, json)
Hash identifier:          j+GNEkNjdWT6pvEOrrb6rZC5cGPRV0uE6k471APIjFo=
Subject key identifier:   6A:02:A2:25:EF:3A:CD:BE:11:02:27:54:62:C0:81:55:72:34:AA:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858478456713C988C734D11F18A20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8aa3bc-41d5-3c81-be1f-ee36c460dfed.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     4775
IP address blocks:        96.7.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:71:3c:98:8c:73:4d:11:f1:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=c82a3ec2-23e5-4a82-950f-8081bf423639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:04:8f:d1:e5:10:5f:d6:02:29:62:30:0f:
                    66:f7:16:93:4a:98:df:f0:61:4e:2e:c7:c8:a8:38:
                    98:5a:da:02:47:07:43:5a:c2:92:62:fc:49:31:ae:
                    22:0a:a3:2c:52:28:94:56:c3:62:c5:49:02:bb:77:
                    04:fa:3d:42:14:ca:de:e8:52:50:12:91:c6:0f:0b:
                    74:58:d2:5a:2f:f2:da:01:62:23:cc:11:39:89:3b:
                    fe:c1:49:07:75:ea:00:79:00:c8:ee:f0:23:a3:40:
                    f3:33:2e:03:ae:ab:e8:b4:3e:1f:d3:e2:b5:52:1a:
                    47:ad:b9:9e:e7:19:db:c4:8c:09:b2:2e:8b:de:41:
                    ed:5f:78:9e:7f:89:42:d0:a2:96:78:72:17:35:8b:
                    e0:59:89:00:9c:10:78:5a:6c:a1:fb:41:70:6e:06:
                    44:fd:75:de:08:5b:01:fb:b3:43:04:d2:af:6e:d5:
                    76:78:8a:89:a9:e4:01:29:16:0f:11:ea:2d:fc:d6:
                    c9:39:b2:19:9e:dc:39:0b:d7:a2:86:c8:61:c5:2b:
                    9d:7c:44:f1:32:d8:54:cc:60:43:2a:64:64:de:19:
                    cf:31:7c:12:18:fa:4e:42:32:58:bd:a5:68:fa:48:
                    ae:ec:6c:28:b5:93:fb:02:26:96:ae:6b:40:ce:c5:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:02:A2:25:EF:3A:CD:BE:11:02:27:54:62:C0:81:55:72:34:AA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc8aa3bc-41d5-3c81-be1f-ee36c460dfed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:05:af:02:b1:fd:72:47:80:c7:35:e6:18:39:67:9e:37:
         d8:c2:8b:53:be:41:5c:77:d9:1b:52:f6:77:b7:bf:a2:e2:54:
         a0:50:df:76:21:e3:18:90:0c:67:f2:ea:08:5f:c1:47:db:16:
         51:c7:0a:bd:6c:77:81:c2:1d:6d:6a:f3:a5:de:bc:00:ce:c3:
         78:5f:c3:fd:37:c9:6c:7f:a6:cb:d5:16:ca:28:e8:51:f1:d4:
         6b:55:04:c1:81:1f:85:83:77:99:44:ca:4b:09:87:66:60:d1:
         4b:25:f3:b1:da:ad:07:33:4c:ae:aa:23:e7:89:37:c4:64:ca:
         61:b6:08:1d:d2:ac:54:c1:39:6a:c3:1a:f6:ec:d6:d8:8d:cf:
         51:fa:21:28:02:c7:a5:25:b4:e2:2b:d2:5a:65:92:6b:6f:af:
         b6:c1:f4:19:34:a6:22:21:49:01:04:62:c0:32:49:e7:38:d0:
         31:f7:f2:8a:62:f4:22:6d:82:1b:57:22:d0:14:fc:af:8f:d1:
         85:0d:52:e5:3e:b4:25:49:39:1a:f0:60:3b:7e:52:b4:ff:1b:
         b4:52:3e:ae:b7:6c:02:d0:84:54:84:37:ce:b3:7d:30:d6:17:
         57:af:66:1a:9f:79:9c:f5:a9:46:1f:49:f0:34:35:a0:50:8c:
         46:4b:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:34:22 2024 by rpki-client on console-ams.rpki-client.org