Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/068f564c-72d1-3af1-870f-02a675ebf3a6.roa
File:                     068f564c-72d1-3af1-870f-02a675ebf3a6.roa (raw, json)
Hash identifier:          tUqiLHWb9KVE/gz6+urTEbExh5NhD/SG/NOi2iyJstg=
Subject key identifier:   53:AA:97:B0:B4:9E:10:BD:6E:3B:18:B8:D3:21:1E:1C:1A:1E:2E:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858458B088752EB7E338C69033380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/068f564c-72d1-3af1-870f-02a675ebf3a6.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     12222
IP address blocks:        72.247.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:87:52:eb:7e:33:8c:69:03:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=ffc75c97-c93c-47d2-9cef-3be08042e225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:5f:c1:1a:59:c0:10:5f:21:9d:9f:42:f2:
                    d0:9f:9d:3b:f2:cc:a8:2e:aa:7e:81:47:a4:cc:49:
                    5d:0f:73:3f:2b:e5:b0:bb:90:18:06:2b:ae:3c:32:
                    5f:ac:55:98:f2:f8:f4:7a:7d:8c:da:b1:cb:d0:e6:
                    fc:7c:de:5d:5e:94:b1:46:cc:ae:85:f1:63:b3:a6:
                    3b:07:93:59:c8:0b:f6:94:43:01:51:64:0c:b1:d0:
                    72:f6:d9:cc:f9:cc:5e:a0:9b:09:75:77:f6:ce:9c:
                    2d:aa:f9:1a:3d:cc:c4:8d:7e:a1:d5:1b:70:cb:cc:
                    96:46:c5:3c:50:9c:e0:5f:68:d0:83:70:0e:bb:e9:
                    e4:b5:e8:c0:76:e1:42:7f:03:07:08:5c:16:94:49:
                    c1:fb:df:4e:27:11:5e:71:ed:a6:a6:ca:4c:89:29:
                    e7:11:05:40:b8:e9:4f:64:97:fc:4e:56:26:6a:aa:
                    29:ab:d4:a5:22:d1:2b:4d:df:0c:67:ab:6f:9d:e6:
                    5e:49:7c:e1:e6:39:d4:b3:27:97:32:d0:2c:7e:01:
                    e3:0f:37:83:93:0a:69:38:ad:4e:51:fc:da:b8:7c:
                    9c:ab:06:d6:3c:2d:9e:21:f8:2b:59:17:0f:74:80:
                    6d:59:98:b6:f3:55:3a:9c:3c:0b:30:61:e1:13:6e:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AA:97:B0:B4:9E:10:BD:6E:3B:18:B8:D3:21:1E:1C:1A:1E:2E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/068f564c-72d1-3af1-870f-02a675ebf3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.247.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:24:c4:52:4d:c8:74:f5:e2:03:38:2c:b2:fd:04:ab:da:
         50:0c:0d:8b:f6:51:26:e4:35:f7:49:7d:11:98:0b:74:1d:05:
         50:29:f8:1d:6e:ae:da:83:bc:19:22:a2:d2:c6:8e:aa:62:d9:
         b9:e7:c9:55:45:aa:85:b7:78:df:8c:7c:3c:fd:48:b6:cf:b7:
         d3:12:10:2c:48:84:73:cd:7a:a3:8b:6c:0c:c6:07:f6:78:73:
         c2:ef:11:e5:51:c1:13:be:c0:da:5c:01:1a:18:50:4c:06:7e:
         f3:fc:b5:38:e4:c4:fb:11:95:e2:4b:73:17:4e:1d:cb:43:f2:
         cf:1e:c3:13:3d:5e:08:11:10:f0:b3:18:62:6e:73:0e:e3:30:
         c8:d4:bd:c6:c5:ae:47:66:50:87:24:b5:c4:70:c3:49:95:e6:
         07:71:27:a7:ea:e4:e3:0f:0d:b2:69:64:02:6d:af:b7:7f:ef:
         87:af:da:e5:24:de:22:ab:8d:09:21:49:93:a2:b9:50:3a:d3:
         e8:da:a9:c7:21:ef:8a:35:b2:25:25:b8:91:03:20:d1:25:69:
         0c:e2:42:69:83:4a:c7:ed:21:59:1a:eb:c5:d2:73:22:f5:bd:
         77:86:f2:e5:5f:41:f7:ee:8b:ed:31:84:e3:ff:f7:b8:2d:47:
         72:f2:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:02:58 2024 by rpki-client on console-ams.rpki-client.org