Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa
File:                     d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa (raw, json)
Hash identifier:          hlHBSTGmg9g34csekypPjw0bYZO9cJ/H+E/ozckVjHI=
Subject key identifier:   A6:FE:DF:21:91:5E:BF:AC:DE:F8:4F:32:BE:8B:E3:A9:86:66:5B:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858455E5D9B4C6FA1D4677FCD1880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     36183
IP address blocks:        172.225.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:9b:4c:6f:a1:d4:67:7f:cd:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=bbec27b1-62bf-4b99-94a6-929eca7ef339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:66:aa:f8:59:c2:79:22:67:3e:aa:22:56:
                    ef:bf:ce:bb:23:40:9d:43:02:ab:22:72:22:11:44:
                    e6:fe:bd:b6:a0:1d:2d:73:26:37:47:b6:98:d9:14:
                    88:ce:c4:b0:e8:ac:dd:bc:40:23:53:21:82:62:87:
                    bf:1c:d3:cc:22:7b:30:3e:99:6f:5a:e8:93:2c:e2:
                    81:42:8d:08:5e:27:0a:7c:2b:58:66:3d:2f:28:97:
                    53:47:78:2d:b1:66:50:36:16:3f:63:b2:c9:1a:9f:
                    a9:67:a2:48:ba:03:60:77:9e:c2:61:97:ce:2d:8a:
                    de:98:76:a9:58:64:8d:04:df:17:ac:a1:13:69:ec:
                    16:52:35:52:28:8a:65:f9:b2:18:b0:f6:79:ac:ad:
                    27:30:20:79:1f:8f:50:98:19:68:46:6d:9f:d3:3f:
                    5d:bd:ba:60:ed:a3:6a:07:b4:16:79:66:2f:d6:9a:
                    ff:88:15:81:a7:dd:af:36:e9:52:b5:c3:f8:e7:2f:
                    d0:72:46:a4:b0:7a:a7:15:d4:86:eb:90:b6:8b:65:
                    8e:40:d1:a8:bc:a8:db:55:9f:e6:5e:f8:a7:cd:77:
                    df:5a:a9:82:22:43:21:f9:aa:14:a4:23:b4:4e:68:
                    db:c7:85:a7:ca:a0:54:bf:56:95:9d:2a:87:fd:4d:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FE:DF:21:91:5E:BF:AC:DE:F8:4F:32:BE:8B:E3:A9:86:66:5B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:05:37:00:c8:2e:79:17:6f:39:12:32:e0:e3:4b:72:d9:
         17:8a:bf:90:1f:b3:14:ed:46:2a:25:fd:bb:6c:1f:80:05:64:
         c6:57:24:29:7f:20:c4:5a:3f:75:f1:5f:4f:bb:ef:b8:83:10:
         37:75:de:9f:32:24:30:9a:fb:cf:7b:e7:0f:2e:91:82:63:38:
         e4:bd:e3:d1:14:84:8a:ba:ca:5f:9e:3d:58:24:13:a6:61:9a:
         11:fa:96:98:63:43:b7:50:fe:2c:5f:82:21:a4:bf:d1:f9:f4:
         b3:86:2c:c9:9f:0d:7a:84:b2:b8:75:eb:46:82:2d:86:61:e1:
         94:44:16:24:75:3b:e7:a3:9c:a3:a6:41:03:bc:af:cd:b1:d9:
         44:24:ed:65:30:bd:6f:83:14:15:61:08:e6:27:b2:ec:f9:83:
         ad:89:0d:b3:58:fe:ec:61:9b:3b:2c:8b:04:9d:2b:f5:64:36:
         54:80:a0:cd:07:03:0f:b2:44:28:d3:e3:ee:93:96:49:12:37:
         b2:61:e1:59:b3:9a:d8:f3:0c:12:a5:f9:76:fc:be:a3:45:f6:
         d3:23:2e:20:15:f3:b3:4b:c0:98:16:42:db:82:cc:fa:b4:c8:
         b8:e9:5f:88:84:54:d6:f0:73:4d:ea:d2:a3:77:78:f0:1f:5a:
         c2:ab:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:18 2024 by rpki-client on console-ams.rpki-client.org