Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/de18c53b-cf5d-3164-885c-c387c6780eca.roa
File:                     de18c53b-cf5d-3164-885c-c387c6780eca.roa (raw, json)
Hash identifier:          T0YGhweMy+Sekhyl0OL9pp1rKZGyls6hzA24e9thfQw=
Subject key identifier:   2B:21:95:67:9E:E8:A7:23:E4:26:7C:B6:8A:06:6D:AC:21:AC:DB:11
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584693F005462716BB713B831820
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/de18c53b-cf5d-3164-885c-c387c6780eca.roa
Signing time:             Wed 17 Jul 2024 12:00:00 +0000
ROA not before:           Wed 17 Jul 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:93:f0:05:46:27:16:bb:71:3b:83:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=70e6181e-14b9-4ed1-9ff6-728e1b5b039c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:4a:5c:5a:40:34:d3:c9:65:d5:6b:b2:63:
                    f5:51:b1:b3:cf:c3:cb:3a:85:ff:b0:1d:09:de:2c:
                    ee:44:b2:bb:77:0d:9c:11:ac:5b:ae:31:be:9d:31:
                    17:90:fe:70:ac:b0:bc:4b:9c:9d:06:82:70:39:a0:
                    8d:c2:0a:1a:16:d4:d9:f9:94:9b:d9:31:90:60:ec:
                    ec:cd:71:9e:49:2e:60:37:be:c2:05:93:20:b2:ad:
                    0b:19:4f:99:8f:6d:9c:14:31:76:8b:da:24:b4:e9:
                    e2:98:d6:10:56:35:db:ea:97:40:92:ab:4e:62:50:
                    54:28:45:6c:c8:90:5c:5c:00:b1:ef:a3:2c:c0:0e:
                    b5:5f:3c:e2:e1:71:7b:e3:2f:31:4b:8b:33:e3:52:
                    08:81:2f:f6:f6:13:da:5d:17:d8:ed:08:00:13:71:
                    c1:7d:3c:73:f0:80:ff:32:82:26:a9:25:d7:24:5f:
                    a1:67:e5:c4:f3:43:d5:7b:cf:96:23:3b:d7:48:71:
                    4e:c7:dc:bd:0e:bc:e0:fa:60:9a:32:e6:d1:40:c0:
                    de:a4:24:9d:07:d4:b0:a4:85:a9:0e:40:73:4f:61:
                    d5:8b:0d:b6:46:f0:ae:0e:78:07:96:9a:52:35:d5:
                    f4:e7:0d:99:5c:44:fe:c3:ff:49:ad:39:c9:f4:db:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:21:95:67:9E:E8:A7:23:E4:26:7C:B6:8A:06:6D:AC:21:AC:DB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/de18c53b-cf5d-3164-885c-c387c6780eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bd:0b:ef:94:72:6c:78:6c:90:62:4c:31:03:6e:02:47:0a:
         23:26:c0:bc:39:dc:eb:0c:b9:d7:60:f3:2a:d1:c3:f9:ed:09:
         f7:c1:7b:11:66:44:53:ba:1c:77:7d:e0:e6:ba:98:19:e6:37:
         33:f6:f3:5e:cb:27:28:e2:22:65:57:38:d9:09:80:75:90:12:
         70:3b:d4:57:fc:c7:78:08:72:c8:28:61:fd:93:39:85:5e:ca:
         16:a3:ee:42:16:36:87:7e:0a:1a:99:4c:8a:dd:59:10:ca:31:
         86:07:98:42:a2:3b:1d:12:2d:b0:3d:86:c0:ee:96:75:7c:3d:
         d7:f3:32:d7:96:86:99:ae:13:f8:c1:19:19:7d:b7:6a:ba:3c:
         2d:b8:68:b0:90:87:c9:aa:9d:36:77:96:2b:3d:b3:1d:f7:2a:
         41:92:60:cc:ab:d2:99:cd:d7:3c:aa:1d:ab:0e:a9:de:d3:39:
         b9:1c:80:18:ef:d8:77:cf:cf:12:35:11:c5:18:b9:d2:ea:56:
         29:26:19:fc:52:76:88:b1:3d:1a:3f:f6:c4:3b:f7:be:ed:0b:
         2b:a9:49:7f:4c:a5:c6:24:ee:38:c5:5e:77:6c:0f:08:ec:c0:
         73:1a:67:86:60:e5:17:ac:5f:2d:2d:74:56:f7:6d:44:05:0d:
         4e:2b:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org