Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c308eb16-887b-3051-b54c-03789471ff36.roa
File:                     c308eb16-887b-3051-b54c-03789471ff36.roa (raw, json)
Hash identifier:          qJRXe/jyXjrNU9pSBVyhKSt4ba/EfyGvP33X2WSoNQM=
Subject key identifier:   32:26:45:E3:A0:A7:16:3E:8D:44:27:8F:9A:08:50:D4:BC:2D:04:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584574B310F38807E3A12D656300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c308eb16-887b-3051-b54c-03789471ff36.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     36183
IP address blocks:        172.224.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:10:f3:88:07:e3:a1:2d:65:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=ab176011-9789-4b1e-bb7f-beb6c0b1769a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:f8:c1:58:b8:b4:41:0c:a0:f2:f0:6f:33:
                    90:ec:b1:61:13:d7:0b:02:1c:df:d0:a2:52:9f:b8:
                    5d:ef:40:32:d2:f9:a3:f9:09:81:9a:72:c0:94:dd:
                    30:4d:9c:19:5a:35:b4:2a:8f:80:fa:d3:24:86:7b:
                    36:10:1b:fe:cf:24:5d:86:2e:f8:ab:9d:6a:e1:6e:
                    ec:a6:3c:93:9c:b8:d7:6b:2f:52:1d:75:c1:b5:77:
                    3c:e4:0d:ca:51:6c:44:17:4a:03:13:5e:54:f7:80:
                    7a:c8:71:5c:c5:2c:29:39:54:d5:df:9a:9d:bd:f7:
                    ff:7f:26:0d:b8:2f:49:38:b5:bd:be:48:2a:3a:f9:
                    dd:80:33:c1:ce:43:fe:cb:f1:d0:fb:3b:03:f9:9a:
                    28:6c:06:7e:fb:29:b4:cf:0c:1b:4d:ad:12:d5:be:
                    69:81:84:ca:a9:da:be:30:22:63:a5:4e:ee:e3:59:
                    d7:de:77:f6:b5:6b:68:f7:5b:ae:9e:0f:6e:1a:13:
                    41:0d:ed:18:09:c4:7b:b0:2b:8f:4d:50:a5:63:59:
                    ae:cc:0f:dd:91:2d:96:8f:73:60:91:fb:cf:82:c5:
                    f5:b6:2f:ea:67:cd:48:9a:4e:e5:61:5d:a3:ee:5a:
                    e4:56:ee:9d:13:b1:b8:46:fc:2d:8b:20:8c:85:01:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:26:45:E3:A0:A7:16:3E:8D:44:27:8F:9A:08:50:D4:BC:2D:04:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c308eb16-887b-3051-b54c-03789471ff36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:1a:ca:7e:d8:7d:f6:ed:90:1c:94:dd:4a:1b:aa:1e:d2:
         9c:0b:45:ca:13:69:6d:56:dd:8d:aa:58:13:de:8a:31:1e:f7:
         d5:4f:56:5f:f0:60:af:1b:7f:79:b1:92:b1:42:c7:d9:fe:c7:
         d0:27:a7:9a:5b:8e:ad:67:2b:94:88:2d:da:e5:f2:51:00:0a:
         5b:5b:5f:b4:44:5c:09:3f:bb:28:67:69:8e:21:bc:c7:a9:d6:
         55:1a:bf:c2:a5:c9:80:26:61:1e:6d:ae:91:3d:62:76:49:fe:
         12:01:61:aa:93:82:4f:a9:50:fb:b9:5c:14:84:c9:67:25:e6:
         c6:79:16:ce:86:7b:9e:9e:e7:e7:e8:a8:9e:31:b9:e1:0d:17:
         e7:1f:38:81:74:76:4a:e5:d2:58:1f:65:b3:e3:2c:26:99:70:
         f7:c3:34:f9:83:43:ec:42:65:ac:22:88:57:79:71:de:20:d8:
         0d:7b:a4:6d:b1:8b:bd:46:84:6f:74:c3:ce:6c:ae:5a:63:8b:
         88:dc:df:5a:2d:52:4d:f9:66:f4:d5:80:94:6a:aa:6e:91:a2:
         03:2b:ee:b4:1c:a8:4b:a9:2d:80:5e:df:e0:e6:c2:f6:b9:e4:
         c0:78:28:a8:36:a9:85:7b:a8:af:e5:9c:8a:c9:71:1c:5a:cb:
         ec:8e:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:36 2024 by rpki-client on console-ams.rpki-client.org