Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa
File:                     65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa (raw, json)
Hash identifier:          /RghUmMkBcM/RCGIa3drhWpRCSWtjv9znhfSmd7CE20=
Subject key identifier:   7C:D0:E3:F4:BA:5E:F0:10:EC:B9:BF:47:E5:FC:3A:8B:16:78:6D:3B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858454625ACCE91DB21AA98AE9518
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa
Signing time:             Wed 20 Mar 2024 20:48:34 +0000
ROA not before:           Wed 20 Mar 2024 20:48:34 +0000
ROA not after:            Tue 18 Jun 2024 20:48:34 +0000
asID:                     15169
IP address blocks:        172.217.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:25:ac:ce:91:db:21:aa:98:ae:95:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:48:34 2024 GMT
            Not After : Jun 18 20:48:34 2024 GMT
        Subject: CN=79a8116c-2916-4398-9885-e3aed191fbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:ec:8f:b7:cb:5f:6b:ef:7b:4d:46:32:77:
                    5c:01:01:2b:33:00:a0:4a:a3:c7:8a:05:0c:ca:09:
                    26:08:8a:64:39:61:3c:cf:ac:98:c0:15:dd:1b:eb:
                    af:10:3f:4c:8d:22:85:89:25:6c:ff:06:02:37:83:
                    0d:30:a8:96:05:00:36:ed:e8:9a:52:57:55:51:19:
                    46:10:9e:9a:f5:95:60:60:b0:f2:15:7e:76:c4:3c:
                    8a:a3:e6:d1:6a:3d:a0:a0:03:bb:52:4c:24:1a:e7:
                    9b:23:83:49:1c:52:fc:a1:a7:9f:82:55:be:5d:82:
                    61:ce:55:05:2c:02:b6:85:38:27:96:f4:0f:52:fb:
                    bc:4c:b6:a1:66:2f:72:11:4e:2e:dd:e7:0b:7f:c5:
                    6c:2e:4d:5e:a5:8e:ec:69:4e:bf:24:1a:3f:f5:8c:
                    a7:b8:ba:da:b0:b4:68:f7:13:90:1b:7c:ab:9c:a0:
                    01:e8:a5:60:2b:c0:56:c7:bb:43:11:56:9c:a2:d4:
                    d2:f7:1b:1a:c2:cf:1d:0d:ff:cf:87:df:82:0b:ca:
                    4d:c8:43:65:00:c2:ea:a6:71:52:dc:82:9b:f1:04:
                    8d:86:15:5f:66:37:cc:30:6a:25:eb:7d:1f:b6:9f:
                    83:e4:aa:c8:0a:f1:df:de:64:73:e0:6d:e0:65:5d:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:E3:F4:BA:5E:F0:10:EC:B9:BF:47:E5:FC:3A:8B:16:78:6D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65a6e5ba-c054-3a04-8c3f-2d4de11e972c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:48:94:67:8e:bb:8d:54:7f:bd:b5:c8:c2:7c:86:37:c2:15:
         41:a7:56:49:02:2c:ff:2e:04:55:81:6c:48:f6:91:48:09:cd:
         07:b9:90:d4:ba:32:ba:53:66:eb:9c:45:8e:7e:3a:52:40:b8:
         40:99:62:85:56:3d:87:38:7a:21:39:2e:c0:1a:4e:24:15:01:
         d5:03:d5:d5:68:d7:48:0c:72:f3:15:53:55:ca:c5:b1:2b:a7:
         dc:f9:1e:5c:72:0e:6d:d6:7a:79:fd:c0:df:11:c1:24:1c:2c:
         25:44:c5:a8:3b:1b:cf:81:68:50:55:01:5a:84:85:4c:e4:3f:
         06:28:5c:ce:f6:59:cf:f3:31:c4:2e:89:83:0c:bc:5b:49:07:
         59:ac:8a:c1:30:7b:bc:90:0d:3f:46:74:ad:00:9f:0a:2a:21:
         a4:1a:7d:2d:5d:1a:18:23:e4:b0:0a:19:d3:60:b3:24:04:c3:
         c3:4f:01:fd:fd:2c:83:7a:b6:00:da:b9:9d:ee:5b:15:1e:ad:
         72:f6:55:1c:df:34:98:2e:c9:15:90:66:be:79:e6:36:06:de:
         77:92:d1:ea:a6:00:af:3d:45:77:b3:25:f7:f7:ed:5b:4d:7a:
         cb:a9:5c:a5:d9:f5:4f:47:23:09:03:bf:de:eb:fe:53:4c:5f:
         b0:4e:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:40 2024 by rpki-client on console-fra.rpki-client.org