Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7320ea83-29fc-3129-980c-290a8625bde5.roa
File:                     7320ea83-29fc-3129-980c-290a8625bde5.roa (raw, json)
Hash identifier:          1PMEbc3+PzqclyMqLAuD9E9Fv0AFGAI2VxDa/RJFifs=
Subject key identifier:   A9:CB:15:7C:02:DD:D8:02:10:A6:9A:97:E6:FD:DF:2A:45:C3:BA:78
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584507F028D51815EF34AA2CB580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7320ea83-29fc-3129-980c-290a8625bde5.roa
Signing time:             Tue 27 Feb 2024 14:00:31 +0000
ROA not before:           Tue 27 Feb 2024 14:00:31 +0000
ROA not after:            Mon 27 May 2024 13:00:31 +0000
asID:                     9009
IP address blocks:        172.94.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:07:f0:28:d5:18:15:ef:34:aa:2c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 27 14:00:31 2024 GMT
            Not After : May 27 13:00:31 2024 GMT
        Subject: CN=c7b54446-8b63-4cd6-82d4-8849a8e9548a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:d7:ba:22:cf:df:73:1a:61:4a:f9:06:8f:
                    ca:89:7c:58:b5:ee:f8:9f:2d:2d:19:7c:3e:b8:d3:
                    2a:6a:61:73:ad:53:a7:1c:65:f9:ae:cf:a8:40:f1:
                    0a:8c:65:2c:1a:a3:73:04:27:9d:49:56:53:54:e5:
                    57:eb:a1:bd:01:8c:8c:c1:8d:f6:8c:d0:77:82:4e:
                    4c:e3:c8:ed:19:b1:59:f7:e3:cc:50:e1:48:43:e6:
                    7a:cd:e7:fc:75:c1:06:9e:4a:ee:ef:8e:45:a8:88:
                    86:e2:54:71:9c:ce:23:4f:70:99:6a:85:f8:de:52:
                    1d:60:1d:60:13:a7:17:f2:71:9a:aa:4c:68:cc:be:
                    5a:d3:ab:03:41:58:7f:d6:e8:0f:c1:ba:cb:8e:b4:
                    a1:a4:37:0b:58:2b:62:4e:f4:55:dc:39:b2:1e:79:
                    39:97:7d:69:e7:7b:f0:ed:7b:97:0c:0d:19:32:23:
                    87:22:0b:9d:1d:11:e6:0c:68:bb:3a:41:80:19:cd:
                    a6:52:39:73:f3:04:5b:1e:d1:e6:48:a1:f8:39:af:
                    86:c1:1e:a7:78:68:f4:1a:40:14:ea:a6:11:38:a6:
                    38:3c:ae:1d:2d:20:b7:37:8d:a4:59:21:e7:12:bb:
                    83:12:1c:f1:92:5b:1b:28:cd:2a:f7:9f:09:6d:01:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CB:15:7C:02:DD:D8:02:10:A6:9A:97:E6:FD:DF:2A:45:C3:BA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7320ea83-29fc-3129-980c-290a8625bde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:7c:99:a0:b2:ed:38:ea:77:0d:99:a6:57:ed:7d:94:78:
         9a:25:7f:3e:cb:d6:8e:46:60:10:7b:1c:b6:db:73:e7:e6:8c:
         7d:e5:a9:fa:d2:f0:18:14:f3:0f:c3:c3:e1:75:be:bd:8d:72:
         b4:69:c4:97:3d:4e:8f:0e:2e:fd:a5:b6:58:bb:fa:c9:78:80:
         ee:69:4c:dd:fe:37:63:6e:fd:2a:34:88:ec:25:41:4a:ab:40:
         7a:2d:7c:cb:d3:2e:1b:3e:8e:e8:a3:13:79:ad:92:1f:4b:31:
         8c:29:68:91:d3:11:8a:d4:30:f2:ba:ab:9a:24:59:f2:49:77:
         2c:85:da:58:24:8f:f5:e5:ac:ad:ed:19:6a:90:30:63:93:b9:
         c0:ad:5e:78:a1:b2:20:78:c0:7a:cb:dc:40:d3:eb:15:db:1b:
         64:1e:e1:69:a9:c2:47:79:4d:fc:a2:56:95:9e:ff:8e:72:01:
         82:8e:2c:f3:6f:7d:43:9a:dc:68:c9:bf:ac:8f:d1:48:ec:03:
         1e:7c:7b:6c:3e:32:40:8a:fb:ad:87:ca:54:1b:16:58:38:d7:
         c4:d7:d6:3f:89:e7:38:b8:c2:a4:dd:3b:d0:b4:0f:ae:95:5b:
         6e:b3:aa:d3:22:a5:59:ca:8a:a1:36:57:0a:b7:0e:f6:32:ff:
         8a:80:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org