Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa
File:                     5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa (raw, json)
Hash identifier:          1cQFTWaARu2BzLnNIXrf5nL6d68ccMD/zyydU3POZQE=
Subject key identifier:   F2:79:30:35:4D:A5:0D:F1:54:21:AC:42:CA:9A:E7:53:BC:30:BE:A9
Certificate issuer:       /CN=78108340-c24e-45fa-a787-5578ce17c653
Certificate serial:       010D0C9F432858452AB7E114A5A82C29FA122A40
Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     11796
IP address blocks:        172.82.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e1:14:a5:a8:2c:29:fa:12:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=5d43ecb0-c4f8-47dd-bc32-0367ac4601d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:a6:5a:91:36:aa:94:df:3d:cc:2e:2a:52:
                    af:9d:6c:de:69:63:1c:c6:2d:f8:e0:f8:0f:b0:36:
                    49:1a:77:8f:69:63:69:22:fe:56:43:68:36:01:10:
                    85:84:b3:69:31:6a:74:81:93:fe:26:c9:6c:c5:80:
                    48:66:a1:12:8e:4c:a0:8b:9f:b4:bf:eb:3b:7a:16:
                    b8:56:4c:bc:0e:2f:ab:7e:ac:cf:f4:de:6d:89:40:
                    9b:bf:08:b1:20:e9:3b:79:3f:7f:8f:06:00:c5:f8:
                    72:6e:c6:14:53:e3:85:d4:bc:44:b4:55:96:af:e9:
                    27:0d:2e:71:7d:da:67:c8:1b:ee:a9:66:22:50:54:
                    07:fb:e3:c5:44:3f:bc:ac:d5:a6:d1:42:b9:4b:5c:
                    9d:c5:41:eb:4f:c9:53:0c:b2:39:45:ab:58:a9:52:
                    95:e5:ad:c2:09:d0:68:ed:78:5d:5b:08:0f:fa:de:
                    9c:98:01:12:dd:ef:e8:c6:2a:6c:9f:9f:05:6b:cf:
                    24:82:6a:83:6f:b2:52:09:f3:ce:42:76:a7:d1:43:
                    86:e9:36:ac:bc:8f:07:d2:e6:dd:2d:13:e3:38:19:
                    d1:5b:51:c6:bc:7b:9a:7d:b0:be:0c:a7:00:e3:40:
                    14:59:50:d4:26:69:85:f3:8a:47:44:2a:1c:78:8f:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:79:30:35:4D:A5:0D:F1:54:21:AC:42:CA:9A:E7:53:BC:30:BE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl

            X509v3 Authority Key Identifier:
                keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:06:ae:13:35:ae:e7:be:82:8b:9a:ff:8f:0d:f1:63:54:67:
         21:be:66:10:5d:9b:ff:1e:72:79:dd:34:36:3b:1b:61:09:c1:
         a2:79:84:47:18:5a:9d:6b:c1:e8:d5:81:86:c1:c2:ce:90:4f:
         d9:84:91:ed:1a:40:2f:c1:10:89:dc:1c:87:9a:f1:c9:d5:17:
         8f:3c:77:52:a2:9d:aa:60:1c:4c:a4:66:c1:bb:1c:46:4f:71:
         f8:78:0b:cc:14:9e:77:f4:a5:21:17:30:18:c3:4e:32:4d:1c:
         bf:c7:2d:c7:72:8c:91:e0:eb:d6:a1:45:63:f5:53:b2:19:04:
         92:44:f7:80:cf:b6:1a:40:f5:c3:97:06:74:a7:f0:07:84:23:
         f9:5f:79:c0:d7:d6:00:a0:d0:d0:4a:e3:ad:29:62:9a:0a:d1:
         6e:64:88:e6:ae:b4:b2:1d:4b:71:dd:93:a9:c7:8f:df:f4:39:
         e3:00:8d:68:b3:05:f5:de:b7:2a:c5:94:3e:48:be:9c:b9:2c:
         1e:79:c1:0a:82:71:78:e2:b2:1b:ae:1a:ab:e8:52:df:9e:f0:
         51:2b:cc:a8:8f:77:eb:d8:95:89:c5:87:08:c1:04:a0:7f:4a:
         48:14:8e:77:9f:5d:37:7f:fe:02:7a:28:90:46:76:81:0d:9d:
         ad:a1:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:07 2024 by rpki-client on console-ams.rpki-client.org