Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa
File:                     cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa (raw, json)
Hash identifier:          oWy83TF2ftEPuscwsOiamNbrHfFrBd3ikEm3f41CLxo=
Subject key identifier:   34:1A:C5:B5:1D:93:B3:7B:97:A6:B2:A0:05:44:CC:9F:B0:AF:99:F7
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F43285845C5A8E77F81A4E9AD249BF480
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     7922
IP address blocks:        72.22.32.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:e7:7f:81:a4:e9:ad:24:9b:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=8ada57d8-3c7f-4c34-a7fe-2c7dcf97dced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:81:10:dc:3a:da:21:94:9a:f7:25:f9:f7:
                    dc:7e:e5:d9:0c:14:95:f2:9d:28:83:c8:d6:d9:fc:
                    4e:ec:41:c5:4d:b5:c4:f5:9a:2f:ba:bd:df:d3:b3:
                    e6:0b:fe:0e:94:8e:72:e1:5e:11:58:77:e2:87:cd:
                    34:b4:e3:0f:0c:25:70:d3:a4:dc:f1:cc:d4:35:a1:
                    10:82:8b:18:e0:b8:3d:af:53:57:e9:42:29:74:4a:
                    05:ac:50:39:77:0f:b0:97:ec:c0:49:4b:77:d9:8b:
                    87:d1:81:53:30:7c:87:02:6f:35:b9:06:93:43:31:
                    16:f4:c2:0c:64:10:88:d5:6d:2e:65:81:29:4a:d6:
                    77:e1:68:51:ec:24:23:89:aa:d7:6d:7b:cb:28:6e:
                    e4:97:56:16:4f:00:62:1e:dc:26:cb:56:ac:3a:6a:
                    8b:9e:09:a0:91:08:5a:35:1b:19:7c:78:05:59:a3:
                    d9:f1:46:7b:a0:bf:17:74:b8:82:51:7c:d4:86:ed:
                    f5:9d:37:98:0a:5d:39:9c:d8:cb:b5:82:78:23:c9:
                    67:a7:ee:46:81:2a:32:fe:eb:ee:f0:9e:a4:31:5c:
                    11:2d:e3:0d:2f:88:d1:61:2f:45:88:d1:96:d2:92:
                    bb:e4:9a:0c:bd:52:cc:c0:6d:58:f3:bc:79:4a:50:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1A:C5:B5:1D:93:B3:7B:97:A6:B2:A0:05:44:CC:9F:B0:AF:99:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/cfbd1984-b34f-3328-8072-85e2e1ecfdfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:0e:3b:60:27:b8:b6:19:2f:ac:5f:62:5e:33:57:fe:c7:
         6d:b5:bc:21:ef:9b:91:30:05:11:68:1e:ad:62:ff:11:ca:f1:
         88:ee:d6:90:02:96:16:7d:fb:0b:7d:94:44:fe:5d:24:bf:90:
         de:b7:02:95:4b:62:f4:8e:89:86:3c:61:13:84:81:5d:45:e6:
         d7:60:8d:63:13:4d:41:6c:26:11:53:79:ae:aa:ae:1b:ad:83:
         0c:32:ed:04:e4:c7:0d:8d:fa:25:f3:a9:cb:f3:7b:13:d2:bd:
         ac:48:f0:c6:83:d5:16:d6:cf:86:d6:c8:66:de:be:76:b1:c9:
         1a:c9:f7:03:a7:d2:79:07:29:63:55:82:17:70:79:92:db:3d:
         aa:0e:ec:07:53:e8:5f:cc:82:06:9d:2a:89:4a:e1:fe:ef:db:
         77:c5:67:5e:56:4a:3d:4e:8e:1a:2f:0f:91:2c:47:0f:fa:0e:
         fc:df:48:a9:c8:8b:bf:55:e2:ba:27:5c:ba:dd:42:1d:1a:46:
         a5:57:fb:52:1b:dc:cf:30:a6:c8:d2:2e:0d:32:6b:68:4e:84:
         c0:e9:24:df:5a:17:32:be:f8:fa:83:85:2b:4b:5a:38:38:fd:
         de:09:40:b9:1e:87:cf:f7:9c:04:df:ee:81:d6:bd:9d:3b:16:
         07:e0:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:18:10 2024 by rpki-client on console-ams.rpki-client.org