Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa
File:                     fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa (raw, json)
Hash identifier:          FXQmfPpJgcpM5eOVYFFo9Cy/78uD9C29qB8uxu34VjA=
Subject key identifier:   0F:13:EF:AA:38:FE:D0:96:AD:C7:71:3D:78:13:FD:0A:62:AA:D2:EF
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845883DEA090060031C728809B0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa
Signing time:             Sat 13 Apr 2024 13:00:34 +0000
ROA not before:           Sat 13 Apr 2024 13:00:34 +0000
ROA not after:            Fri 12 Jul 2024 13:00:34 +0000
asID:                     3223
IP address blocks:        172.94.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:88:3d:ea:09:00:60:03:1c:72:88:09:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 13 13:00:34 2024 GMT
            Not After : Jul 12 13:00:34 2024 GMT
        Subject: CN=c389e2ed-50c1-4001-9fa9-b79875005111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:ae:43:59:48:9e:70:15:0f:93:a7:03:e7:
                    63:56:1f:6c:a4:50:9d:b9:cc:29:cf:45:f1:ab:d4:
                    45:38:66:12:d8:3b:15:ab:ef:68:e4:01:df:49:93:
                    48:99:89:ff:7b:9b:87:10:cc:47:9f:8b:e6:1d:a3:
                    d7:79:43:5b:e3:95:fe:98:34:fd:ea:d6:ad:51:04:
                    65:29:36:4e:c5:69:b9:b6:b1:1b:3d:24:4f:e7:14:
                    42:30:6f:34:ee:e9:d8:46:0e:17:1e:d9:59:ed:5b:
                    c1:ca:ae:98:63:6f:51:c7:bd:74:4c:86:d7:5f:45:
                    ac:51:1e:de:e6:d8:11:c5:01:72:02:5f:46:73:4b:
                    13:5f:5a:06:3a:e2:8c:35:41:7d:62:72:17:51:96:
                    c9:55:b4:c9:28:1c:a2:9c:29:c7:85:34:b9:80:a2:
                    2a:ae:c4:c0:6a:e9:33:54:a2:1c:00:12:da:11:f8:
                    f9:a0:c4:ba:28:a9:37:08:79:94:33:3e:0d:db:18:
                    eb:38:f9:e2:00:79:cd:ce:c4:c8:c1:7c:10:e1:99:
                    9a:14:df:8a:f5:7e:e5:47:47:cf:c5:53:59:7c:f8:
                    7c:43:c1:2f:12:3e:97:79:f4:3d:6d:54:2e:bb:f8:
                    aa:5f:5e:b1:4e:57:ed:65:03:0c:25:f6:1c:7e:fc:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:13:EF:AA:38:FE:D0:96:AD:C7:71:3D:78:13:FD:0A:62:AA:D2:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fdbf53a9-72f2-397f-a2f2-92ec1d235077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:61:1a:94:c5:ce:a6:a8:a4:33:0d:78:4f:92:6e:78:4d:55:
         3b:0f:5f:b2:23:fe:c2:14:3b:14:4b:6d:42:00:aa:bd:b1:97:
         b2:4a:b0:6b:06:d3:75:7c:d6:24:7e:1c:03:1a:ef:28:2d:09:
         5d:64:35:3d:fb:e4:aa:e8:38:ff:99:b9:aa:bb:8a:a5:2a:a2:
         f7:ce:23:b6:91:01:79:eb:fc:98:8f:35:46:61:6a:e9:2d:9c:
         4b:aa:db:77:47:1c:f1:c8:50:6a:30:c5:ba:bb:05:e2:c0:2c:
         d0:16:09:82:85:33:fe:a5:89:10:07:63:32:dd:8e:3b:05:86:
         3d:e5:f1:5f:8f:ce:4c:c4:89:fe:8e:a8:94:fc:f6:ad:7b:7e:
         36:74:37:83:1b:ef:dd:61:27:00:32:91:14:53:79:ab:02:fc:
         34:9c:13:d2:36:57:c2:c1:5c:5a:c4:39:a9:11:71:e5:12:e7:
         2f:d4:ab:22:59:20:d7:d3:ce:79:9b:d6:40:8f:07:63:b8:93:
         e6:d6:e2:34:66:f3:05:58:86:bc:d1:5a:9f:e4:3a:73:44:62:
         2f:1d:d5:8f:09:4a:df:a4:f4:02:c6:70:e8:cf:ef:d5:70:ae:
         91:2e:d9:b3:8b:b8:6e:84:6f:37:10:3d:fd:90:a0:55:24:85:
         6a:98:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:23 2024 by rpki-client on console-ams.rpki-client.org