Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa
File:                     5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa (raw, json)
Hash identifier:          K3eobTTFx/jUHt0nxYErU/JoPGVW4TDI3p63l/oIH2E=
Subject key identifier:   4B:FE:EA:6D:4D:3A:07:28:B4:2F:52:A7:0B:56:BB:D3:5A:36:70:18
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F43285847A5D6AB7051053A86D194B980
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        172.86.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:ab:70:51:05:3a:86:d1:94:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=b9ebed67-cdb8-4786-ac7c-99a9a17e9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:52:9c:e1:a2:8b:dc:53:b8:c7:83:fc:d4:
                    c2:20:2b:b9:a3:13:bd:a7:4a:cc:5e:5c:fe:64:3c:
                    14:a7:69:49:51:78:25:08:99:79:26:dd:ba:2e:b2:
                    38:bb:99:6f:ee:b1:8d:d2:6e:5d:56:a2:d7:a4:49:
                    00:ad:74:a2:40:08:37:ea:27:b0:3f:d3:28:c4:53:
                    4e:c3:a7:66:8e:9a:6f:b8:55:82:ba:a7:db:8a:b7:
                    b9:3d:9e:3f:4e:c3:dc:c8:6d:9c:56:8a:a0:ad:65:
                    ee:23:7d:3a:74:8d:06:4a:c3:58:89:9c:1d:ed:46:
                    6f:fd:fb:9d:73:2f:af:bb:19:9b:de:13:4c:06:ea:
                    26:63:a1:f8:03:41:9b:5e:81:c9:dc:fe:71:7e:d0:
                    5e:56:ce:69:d9:c4:fa:75:e3:af:d7:e6:65:a4:4d:
                    51:f1:ea:80:1d:f1:7d:49:5d:a9:63:71:e3:0f:36:
                    d3:2d:ac:64:0a:64:22:3b:2b:43:9a:02:b7:b7:66:
                    ef:45:75:e7:5d:bf:7f:9e:19:97:ee:b9:46:c6:8c:
                    e6:a3:6a:10:77:d0:af:c0:9c:9c:3c:8f:11:ed:cd:
                    a1:c4:9d:0c:6a:63:7b:f5:88:6d:28:fa:4c:e6:1b:
                    b0:63:37:25:f1:b2:83:94:03:f8:a8:dc:14:a3:8c:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FE:EA:6D:4D:3A:07:28:B4:2F:52:A7:0B:56:BB:D3:5A:36:70:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:33:25:25:bf:46:08:51:80:b5:3a:e6:d2:17:02:28:23:a0:
         1b:40:86:14:d2:20:b5:f4:8c:a3:4c:0e:8d:c9:5f:af:93:db:
         cb:94:33:cb:75:32:a3:50:0a:4d:f5:34:df:37:78:bd:a9:2b:
         44:21:50:fc:37:c0:80:bb:3f:de:47:58:b2:3b:87:b0:dc:1b:
         41:d3:f8:66:cc:02:a5:7e:e6:b6:92:23:a0:bf:f1:88:6d:c0:
         f9:3e:f2:2b:0a:5d:75:ff:36:e8:aa:27:14:08:71:56:24:7b:
         2a:e4:0a:e6:1e:9f:37:46:7c:b3:46:a9:15:a1:33:b6:cf:3c:
         39:93:a8:ba:b3:3c:e0:1c:e9:49:36:0c:be:9c:a1:d7:a6:88:
         58:5d:9f:1c:0c:df:af:a8:98:fd:1d:33:51:44:fa:a9:4b:72:
         83:a4:35:b4:78:db:85:10:b3:99:6c:8b:45:57:5d:cb:00:75:
         13:38:50:79:6f:24:14:42:67:14:58:3d:8f:8f:05:ab:fd:9f:
         a6:c4:79:09:a3:eb:d9:9c:05:1d:ea:bc:2b:75:8b:a0:36:dd:
         af:d7:9e:0c:86:17:d8:14:b4:df:5a:c4:c9:42:f9:d1:43:06:
         0c:65:83:20:60:e9:60:86:e6:5b:43:40:2d:31:b4:ff:94:1f:
         70:ad:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:55 2024 by rpki-client on console-ams.rpki-client.org