Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa
File:                     a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa (raw, json)
Hash identifier:          YFqieR/AIQe6mFrVOsjGdWIsix4Y3Z4+Q/W7OIGzTvs=
Subject key identifier:   92:3F:D8:6B:45:C6:40:C8:19:C8:26:D0:23:5A:D0:01:2D:6E:05:D5
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285844D3D2B1A70F063FC8D41FB1C0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa
Signing time:             Thu 08 Feb 2024 21:59:13 +0000
ROA not before:           Thu 08 Feb 2024 21:59:13 +0000
ROA not after:            Wed 08 May 2024 20:59:13 +0000
asID:                     9009
IP address blocks:        172.84.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d3:d2:b1:a7:0f:06:3f:c8:d4:1f:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Feb  8 21:59:13 2024 GMT
            Not After : May  8 20:59:13 2024 GMT
        Subject: CN=212460db-7a01-4f21-9103-8ed4add6331a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:2d:23:07:22:95:ae:0b:b4:cc:8c:28:69:
                    e8:b9:ec:89:8b:14:ae:ad:40:e8:de:73:46:ec:a4:
                    65:5b:3f:f9:f6:a1:3c:7f:ca:43:e0:6a:72:9e:78:
                    e5:73:6d:34:90:1f:ab:2f:05:10:04:61:a1:ce:1b:
                    cd:05:80:65:7b:5f:e6:5c:95:5f:6f:27:27:c6:2f:
                    43:8f:18:a1:4f:31:b3:f9:39:7f:38:ec:74:5f:32:
                    60:f4:fb:6f:80:22:f4:97:13:4e:52:d6:21:62:9a:
                    e8:85:82:b9:e3:56:72:cd:55:2e:f0:27:ed:0d:f6:
                    a4:fa:85:9a:55:0e:83:71:70:fe:fb:13:fc:fa:7e:
                    d6:8a:32:d5:e1:79:b8:a8:b5:e4:3a:3e:61:b3:26:
                    16:07:ed:9a:d6:2b:02:f0:f5:86:d1:c2:4d:83:9b:
                    7e:68:1e:aa:3b:4a:0d:76:33:49:26:e4:37:2c:b3:
                    e5:83:b1:16:76:18:8b:11:07:bb:8d:7b:7b:9d:fb:
                    c0:67:97:92:7f:8b:8e:8c:19:e3:54:3c:a5:5d:75:
                    3e:4a:d2:c0:07:51:e8:9b:b6:dd:e9:b7:03:2c:2c:
                    06:be:8d:e8:7c:c3:51:3e:ad:79:11:1c:54:40:70:
                    b6:05:4b:0d:bf:36:8c:3d:8c:74:7d:3d:b3:dd:97:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:D8:6B:45:C6:40:C8:19:C8:26:D0:23:5A:D0:01:2D:6E:05:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a2e7e277-d2c4-3201-b501-0a1f9a8b848e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:12:b0:fd:97:b9:96:6f:b0:eb:13:fe:e2:90:3e:37:83:
         c3:c1:c9:7c:87:bb:3e:5b:83:f7:3f:50:8c:47:15:0a:b0:7e:
         3b:9d:8b:76:33:ca:55:a1:c2:84:33:45:51:b8:12:76:e8:6b:
         2d:1f:db:33:6e:90:4c:ff:d8:b8:a2:57:b4:13:96:bb:64:18:
         f2:04:58:f4:2d:5b:ad:88:64:f9:b5:3e:a6:5c:44:39:89:ef:
         70:10:88:02:80:02:43:65:0c:44:38:24:1d:ad:d2:ac:85:ba:
         f7:87:7d:94:46:c0:f1:0b:65:ce:9f:fe:2f:67:19:f2:60:5a:
         ba:cd:25:15:62:7f:df:49:3a:62:b3:9c:b0:03:7e:e4:ad:0b:
         fb:0d:b3:ca:f1:de:a1:32:1b:cf:dc:62:b5:cc:41:42:32:ae:
         c5:6a:e9:17:0b:61:31:1e:9b:cb:b1:fd:a7:ba:b0:1e:73:c9:
         7a:90:1b:a1:78:6b:2e:f9:d3:58:0b:51:fb:b8:f9:0e:a3:31:
         3a:2e:31:3f:28:03:85:f0:38:47:7d:e1:7c:c5:74:44:ea:a8:
         fe:3b:10:a7:66:ac:5a:e5:3e:9c:98:8b:d3:11:b6:2f:42:51:
         6a:1a:56:f4:97:96:03:77:49:a4:75:32:9f:67:8f:45:a9:bd:
         6c:39:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:13:45 2024 by rpki-client on console-ams.rpki-client.org