Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa
File:                     15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa (raw, json)
Hash identifier:          WCWZpu+fGo9/XrBa8g88VapSeKbfl1koFdw3YM6swpY=
Subject key identifier:   06:B2:40:76:BD:66:D7:1B:68:93:7B:AB:82:0D:A0:D0:53:6C:91:C3
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845E45E6ABF95C96BE507333600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     396356
IP address blocks:        172.94.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:6a:bf:95:c9:6b:e5:07:33:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=c3aa51d5-52bb-4e1f-85a1-2102a968ccc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:0c:33:c8:fc:35:d7:7f:a1:93:41:bd:a7:
                    9b:40:4f:c1:01:0d:33:16:13:01:d7:27:88:11:54:
                    38:d1:33:8a:57:fc:ca:59:b1:61:8f:67:dd:3a:34:
                    83:42:0a:53:12:8a:92:0c:75:0a:6d:54:4c:c1:53:
                    7d:c1:64:4e:8c:bb:9f:cd:e2:ad:3a:d9:40:84:95:
                    1e:e6:ae:7d:8b:5d:72:e1:ad:f4:32:e0:78:42:59:
                    55:0a:4c:ca:15:e5:73:89:2d:f0:0f:c0:5a:2e:95:
                    78:ab:30:ac:ca:50:76:d5:54:67:b3:d3:60:86:58:
                    58:86:13:07:9f:6b:1c:18:f7:8d:c8:95:69:7a:c0:
                    ee:9f:20:ea:0a:1d:1c:f5:d8:8e:2d:32:ec:27:6d:
                    9b:dd:09:0a:3c:d0:4a:fd:e4:48:be:f4:b2:22:8d:
                    b9:4f:7a:ef:6f:b5:e2:e4:20:20:59:2d:4c:0e:b8:
                    80:53:54:5e:d9:0f:7f:dd:b7:d6:a0:90:14:61:b4:
                    16:1a:ce:5d:b9:a1:49:2e:bc:20:31:2d:37:15:93:
                    ce:8b:04:83:9d:52:38:ab:72:a9:19:38:17:a6:3f:
                    8d:e8:25:24:6d:29:48:63:ed:7d:87:8d:3e:87:d4:
                    f4:6a:1e:46:f3:b8:25:23:b3:83:f6:13:d7:47:21:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:40:76:BD:66:D7:1B:68:93:7B:AB:82:0D:A0:D0:53:6C:91:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/15e54fa4-2e03-3f96-bb8b-f64db3728cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:87:48:bc:08:96:5c:54:60:40:0e:c4:7f:52:63:db:86:
         06:5c:32:6e:34:08:95:72:ca:14:37:fc:1d:c7:01:f4:16:1c:
         e3:6c:dc:c2:27:37:f8:55:a5:2a:dc:5d:a2:cb:8b:11:43:a0:
         53:92:da:10:fe:58:45:97:07:84:6b:d4:bd:c8:b2:5f:0d:42:
         86:44:61:fd:ef:1f:86:50:c1:a7:25:d6:22:b8:74:6e:9e:b5:
         7e:40:3b:4d:cc:b1:84:26:74:1d:a8:28:e2:26:97:99:1b:18:
         d3:09:7d:4e:a5:10:06:48:9b:f3:58:d6:28:96:09:0d:56:3a:
         4b:b5:ed:30:84:26:f1:02:cf:d4:7f:da:0d:ff:e0:02:96:3a:
         c4:4f:17:a0:e2:d4:5f:8c:87:e3:58:40:ee:8f:3c:0f:58:aa:
         28:58:15:0f:e9:20:3f:d1:1e:0d:32:b6:d1:5a:f2:41:e7:77:
         c1:9f:27:29:75:24:3b:dd:3e:7c:1c:3e:38:a1:f3:70:01:3f:
         00:3b:27:3f:e9:3d:e8:37:45:c8:67:e1:82:dc:dc:4a:93:9c:
         8d:e9:6c:d2:b4:92:04:3c:06:98:da:44:de:62:9e:87:37:72:
         bb:80:45:15:cf:8e:57:e3:6c:be:29:3b:65:a4:3b:ce:14:2a:
         04:8f:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:22 2024 by rpki-client on console-ams.rpki-client.org