Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/1a5bc4fc-5ef9-3032-8d6c-f2e1cc218c55.roa
File:                     1a5bc4fc-5ef9-3032-8d6c-f2e1cc218c55.roa (raw, json)
Hash identifier:          XUdQ7Ph82Wk4dGF9QHwbk0HMKml0lFa2Z2wHLZle11s=
Subject key identifier:   C6:E1:A2:AA:66:B4:24:25:F8:B7:4B:71:17:D6:8F:CF:6A:CF:C9:82
Certificate issuer:       /CN=93305d6e-a480-43ad-be2c-5ec3066e1530
Certificate serial:       010D0C9F43285847B1015E533F4DC789AC16B180
Authority key identifier: 66:B3:72:2D:1C:44:99:7F:2C:7B:5A:53:EE:DB:28:AC:8E:A3:A5:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/1a5bc4fc-5ef9-3032-8d6c-f2e1cc218c55.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     53550
IP address blocks:        192.206.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/93305d6e-a480-43ad-be2c-5ec3066e1530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/93305d6e-a480-43ad-be2c-5ec3066e1530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5e:53:3f:4d:c7:89:ac:16:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93305d6e-a480-43ad-be2c-5ec3066e1530
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=362bc953-137d-4243-9c56-60c8d2817613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:e9:f5:eb:7b:f7:f9:74:fd:39:43:0c:f6:
                    61:b7:59:91:98:c0:77:0d:89:5f:ea:db:e8:08:a2:
                    16:36:ad:4e:47:69:f1:71:21:72:af:4a:e2:44:c5:
                    ba:04:f9:e3:7f:b0:9a:19:2a:b0:c9:44:62:10:40:
                    c3:59:4d:75:9c:ea:37:ad:76:f4:96:fe:5c:38:62:
                    c8:33:f6:55:2a:04:d8:b0:d0:f8:81:d9:00:1a:07:
                    3e:2e:7e:c3:e0:dc:8b:09:3b:5c:7e:89:51:b7:97:
                    82:07:a5:ba:33:8e:2f:5e:fe:c0:f2:ab:5a:e2:00:
                    3d:aa:1e:fc:f4:74:43:e5:ad:95:4e:00:fd:e8:65:
                    92:18:5a:e9:c4:42:3d:00:7e:69:ba:02:62:48:e1:
                    5e:05:bd:1d:2f:9f:77:9a:1d:ce:21:cd:0f:61:c1:
                    87:98:51:be:39:e9:ae:08:10:60:53:c7:88:f5:75:
                    f9:d4:21:dd:bd:ea:80:dd:26:d4:51:44:20:46:f2:
                    54:09:3f:30:47:ab:32:e3:e1:94:e9:2d:95:a8:78:
                    4e:68:55:53:f0:53:35:c7:1f:6e:38:cc:59:a3:84:
                    8b:41:52:17:54:a8:27:c4:3b:fd:e7:7e:88:9e:f0:
                    64:80:f2:da:5b:14:c7:d0:35:cf:1d:e3:2e:1e:1c:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E1:A2:AA:66:B4:24:25:F8:B7:4B:71:17:D6:8F:CF:6A:CF:C9:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/1a5bc4fc-5ef9-3032-8d6c-f2e1cc218c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/93305d6e-a480-43ad-be2c-5ec3066e1530.crl

            X509v3 Authority Key Identifier:
                keyid:66:B3:72:2D:1C:44:99:7F:2C:7B:5A:53:EE:DB:28:AC:8E:A3:A5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:00:bb:d4:28:fe:5a:32:69:a9:5c:1b:39:cc:42:ba:e8:
         9b:4b:db:e2:21:3c:0f:cc:cb:72:79:5d:5d:4c:06:7c:82:01:
         65:4a:40:a7:d1:7b:4a:ed:ad:e3:27:e1:f1:0e:67:85:6a:87:
         c3:e2:5d:c0:0a:a2:50:b7:fa:cc:40:73:44:94:85:7a:5b:b5:
         7b:28:ca:9a:a7:7b:b4:60:7b:0a:6e:ca:67:d6:57:76:24:90:
         f3:ec:d2:07:a0:5c:60:52:ca:05:6c:72:44:49:d7:a0:2a:0a:
         d1:a0:d5:57:03:73:0a:d9:36:3b:8c:db:54:04:56:d2:1a:5c:
         aa:2e:53:13:8e:00:d3:8f:43:06:0d:de:60:01:85:3a:e5:7d:
         1d:02:1a:b1:d7:49:5f:34:4a:0a:a6:30:cd:82:dd:14:67:4e:
         ee:40:7f:ed:37:03:25:68:e9:ab:a9:ec:fe:6d:19:91:63:16:
         cb:ba:ff:6d:66:cf:07:b2:b6:89:29:e8:6a:5d:83:de:92:de:
         73:d7:c7:9d:f8:fa:07:df:25:7d:88:e3:a5:55:56:84:b6:96:
         99:f9:98:87:e7:63:2e:ac:c3:fa:15:1b:32:df:dc:40:22:16:
         bc:6e:b3:46:37:b6:db:29:f0:3c:4d:be:1f:69:20:43:72:ed:
         96:e2:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org