Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa
File:                     bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa (raw, json)
Hash identifier:          U+n2FM0NLCws06WgK5EmnFnSJgEH9Q0DbnY+RH00FgY=
Subject key identifier:   2E:69:8F:14:12:30:59:38:5A:A2:3A:F4:87:18:EC:BA:C6:E4:13:25
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285844D17FC876BB2323CFB9150280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa
Signing time:             Thu 08 Feb 2024 02:00:26 +0000
ROA not before:           Thu 08 Feb 2024 02:00:26 +0000
ROA not after:            Wed 08 May 2024 01:00:26 +0000
asID:                     9009
IP address blocks:        172.94.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d1:7f:c8:76:bb:23:23:cf:b9:15:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb  8 02:00:26 2024 GMT
            Not After : May  8 01:00:26 2024 GMT
        Subject: CN=bdeb0317-913c-49a4-93e6-a7a603252d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:d7:a1:3e:e9:7d:02:7e:55:8d:e0:e5:49:
                    21:2d:d5:00:d3:47:08:84:0a:0a:80:43:17:cd:60:
                    16:37:29:74:20:3c:4a:57:bb:5f:cd:3e:f0:6b:18:
                    a7:b1:b2:29:51:32:81:87:fa:eb:43:5a:05:24:24:
                    b7:6c:39:4f:7f:3d:61:71:6f:33:d0:ac:a2:00:71:
                    a5:60:fd:82:4b:20:3c:61:a7:37:a9:ed:5b:90:c7:
                    99:7e:d4:86:c9:ff:65:a6:5c:23:e4:bc:cb:b6:be:
                    be:4a:49:3e:d2:20:82:cc:a8:90:52:35:fa:1e:35:
                    23:e6:b1:cd:d3:03:ae:5c:37:cf:5d:a0:05:0e:62:
                    20:74:09:74:84:69:ad:07:81:10:3a:85:c5:9f:97:
                    ea:13:a8:97:13:73:77:9b:cc:1e:3f:3b:84:25:f5:
                    09:c2:b9:b2:ba:60:3d:1b:d3:93:08:21:a9:06:2d:
                    24:38:88:23:36:e5:2c:67:be:fe:43:03:4d:3b:a0:
                    84:d1:a1:24:ea:fd:a4:85:45:13:b6:ab:5e:97:af:
                    f0:af:4d:a9:70:09:69:29:87:06:54:17:bb:67:fb:
                    34:78:af:d6:82:28:01:fa:a5:fc:7c:04:a5:63:d2:
                    97:7d:fa:b7:55:3c:80:1f:fb:3c:b5:a0:29:c3:42:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:69:8F:14:12:30:59:38:5A:A2:3A:F4:87:18:EC:BA:C6:E4:13:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:c6:c0:bd:5e:ca:5a:a0:89:80:38:b4:6c:f6:7a:77:93:
         a9:09:b7:6e:38:5a:0a:48:5b:8e:b9:57:b1:9b:02:c4:69:dc:
         e4:fd:86:d9:c9:3d:17:7e:cc:58:3b:58:64:fb:0a:44:dd:56:
         d9:85:1a:88:f0:9f:a4:c5:77:c0:4e:b3:04:16:3f:d8:d1:43:
         c7:25:92:5f:84:00:68:a7:8f:20:94:35:56:b6:63:c6:1e:e8:
         20:74:55:8c:22:7f:75:8d:5a:e9:27:fa:0d:58:2a:ba:61:60:
         0d:67:98:9b:8a:93:49:31:77:9a:45:7a:bc:30:4e:68:b1:52:
         a5:74:bd:40:67:ca:d5:70:13:6b:71:c8:94:74:8e:33:e3:c0:
         59:0c:78:db:81:c8:3a:fa:3f:33:7f:30:4d:63:89:62:e0:ff:
         1e:bd:bf:32:10:50:ba:12:46:e2:44:fa:fc:56:f0:41:c7:7f:
         f0:b3:25:76:a1:0f:c6:a8:43:49:cb:0d:50:51:01:9c:ea:fe:
         34:d8:ee:ec:da:07:a5:d8:54:32:3e:61:a7:68:ab:b9:3d:14:
         05:64:d1:c1:7f:23:fb:68:ff:b0:65:88:7c:57:72:92:da:a0:
         01:1b:82:71:5a:0c:05:f6:88:52:c3:67:2d:29:a1:83:c9:4b:
         50:b9:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org