Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/226cee61-823b-3fcd-9e56-be80ae52ed44.roa
File:                     226cee61-823b-3fcd-9e56-be80ae52ed44.roa (raw, json)
Hash identifier:          TK8K+FvfoKvQ2tH6cF0lnZAkY4Oefh/Asa0P1PxwOhs=
Subject key identifier:   BC:5B:FD:3D:CD:7B:C8:F0:83:FF:16:CE:E3:28:16:8A:76:CC:49:33
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584547E70DE16E8F00F74CF7A940
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/226cee61-823b-3fcd-9e56-be80ae52ed44.roa
Signing time:             Thu 21 Mar 2024 11:54:01 +0000
ROA not before:           Thu 21 Mar 2024 11:54:01 +0000
ROA not after:            Wed 19 Jun 2024 11:54:01 +0000
asID:                     28753
IP address blocks:        172.85.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:47:e7:0d:e1:6e:8f:00:f7:4c:f7:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Mar 21 11:54:01 2024 GMT
            Not After : Jun 19 11:54:01 2024 GMT
        Subject: CN=e25c0ba3-cb05-4dcf-8576-313663d76801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:56:99:bf:88:7c:3f:2d:a7:79:d9:33:e2:
                    2a:91:a9:35:01:30:7f:89:72:f3:c6:33:f2:56:ea:
                    e3:04:b4:5f:ff:a5:46:8c:f8:ce:c5:c8:c6:d4:e9:
                    d6:a2:e2:15:8f:07:70:f4:73:f2:3d:0f:75:54:44:
                    20:5c:28:9f:5b:80:3c:53:d7:1c:55:7d:fc:79:10:
                    97:01:87:ad:ef:d0:77:12:1f:3d:c8:36:76:df:72:
                    53:8c:f3:79:db:9a:06:9e:19:c3:bb:47:f4:06:14:
                    53:db:89:5b:6a:6b:4f:b4:c8:44:18:7c:e3:c5:68:
                    57:99:44:ab:13:06:10:7a:6d:59:e7:b0:a8:3d:c1:
                    05:a5:9f:47:43:54:5e:8f:bc:07:91:01:63:8e:52:
                    44:7c:49:ea:ea:6b:88:91:22:3f:25:2d:d1:43:9b:
                    2f:f5:0b:d4:c0:d9:a3:99:e8:78:c0:1d:29:b7:e6:
                    cd:b5:7f:29:0b:e2:90:61:9b:c8:60:4e:3b:76:58:
                    32:a0:e0:31:af:e5:4f:8a:e6:88:8a:f3:9c:df:ca:
                    a5:c9:08:a2:f1:76:e2:f6:9f:37:93:0f:a7:12:40:
                    8f:5b:1b:86:1b:58:42:fc:6c:60:ce:af:db:a9:06:
                    4f:b7:86:1d:97:57:ac:7d:f3:8b:28:fb:ed:c9:d1:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:FD:3D:CD:7B:C8:F0:83:FF:16:CE:E3:28:16:8A:76:CC:49:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/226cee61-823b-3fcd-9e56-be80ae52ed44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:24:af:a6:6b:2e:c2:3b:57:71:80:8e:ca:8e:e0:14:6a:
         fe:a6:c6:61:cd:27:45:74:23:15:a1:3f:bb:ab:27:bd:f4:dd:
         cc:4d:42:98:03:fe:ea:ca:b1:0d:ea:b5:60:30:1f:05:c2:f3:
         a5:4a:bc:33:b2:e3:ab:30:f0:bd:24:72:80:76:85:8b:1b:86:
         18:d6:0d:6a:30:2a:06:98:f0:70:2b:6b:00:f5:30:b8:f5:ea:
         96:66:e1:46:2d:40:20:ba:dc:79:0f:6c:24:4d:d4:3a:5a:8b:
         f2:a7:ab:66:47:f6:2f:c5:a9:ac:e8:14:03:94:47:41:7c:d3:
         a7:07:9a:0f:45:f3:fb:07:dc:cc:e9:4b:4f:2d:d8:e1:7b:5c:
         6e:ca:ae:45:f7:e4:b2:e4:b5:18:10:c1:d8:35:ed:c7:06:82:
         9a:15:eb:47:9a:fe:5f:b1:92:62:21:36:9f:26:29:45:0f:8e:
         2e:3a:3c:6f:59:8b:d7:2e:f6:dc:0c:5f:c6:29:e1:bc:30:fb:
         1c:b3:cc:e1:de:e8:5f:76:4e:77:2d:0b:38:16:80:fc:60:10:
         d1:bb:f0:47:fc:0a:e5:65:5c:e7:23:1a:c1:95:6e:78:d0:34:
         4f:e3:40:ee:46:34:e1:53:79:d4:33:cf:83:b3:c7:0b:16:41:
         3c:af:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:37 2024 by rpki-client on console-fra.rpki-client.org