Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa
File:                     661fdda3-d9b9-336b-868c-5694c1d1cfea.roa (raw, json)
Hash identifier:          1fOgS1ogNm68l2kyJk0rClKZQOzVz+RQ+RJu9fYzaA0=
Subject key identifier:   A9:D9:4C:2B:CA:EE:23:C3:4B:3A:DB:52:F4:60:65:D8:01:11:11:08
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462CBC6BFC31F59417903B30
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa
Signing time:             Wed 20 Mar 2024 21:02:48 +0000
ROA not before:           Wed 20 Mar 2024 21:02:48 +0000
ROA not after:            Tue 18 Jun 2024 21:02:48 +0000
asID:                     15169
IP address blocks:        172.217.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2c:bc:6b:fc:31:f5:94:17:90:3b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 21:02:48 2024 GMT
            Not After : Jun 18 21:02:48 2024 GMT
        Subject: CN=da4624c6-e0c5-4a6c-9aff-3edd25300df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:92:f2:90:3c:ba:e4:28:74:58:ca:df:ec:
                    20:f7:8d:28:03:7d:c6:2b:75:17:0e:ec:cb:03:2b:
                    0e:6c:4d:98:3c:ec:02:86:38:f9:7b:bc:25:84:dc:
                    19:a0:ac:72:20:ed:de:3d:76:17:45:e6:2c:eb:69:
                    12:01:ab:47:a8:15:66:7c:66:11:5e:4d:a9:ea:68:
                    c9:e9:36:9b:e3:6c:39:e8:ac:5c:3b:47:c6:75:e0:
                    5b:1d:77:55:94:e6:d1:ab:52:b1:66:f2:a7:69:38:
                    d4:b8:43:5a:58:20:6c:bc:94:e1:d2:24:f0:af:24:
                    df:24:0e:ab:02:16:42:b6:4f:68:9e:e2:10:6b:2d:
                    75:cb:fa:d8:3a:6e:77:5b:a2:35:c3:d3:36:11:16:
                    6c:50:96:65:46:96:91:12:a1:de:a8:9e:14:83:30:
                    ae:11:b0:41:73:96:e6:36:fc:b3:49:c7:c5:a8:87:
                    6c:10:29:0a:9a:46:b6:55:18:6d:5c:03:8e:18:f1:
                    32:be:55:25:4b:e7:bd:ca:9c:81:9c:8a:0b:84:db:
                    70:49:b6:84:75:0d:f9:87:ac:47:73:aa:d9:1c:d4:
                    df:66:f4:f6:81:ee:05:fb:a1:23:23:11:8d:df:a6:
                    51:d9:c2:44:cb:21:08:b0:97:aa:ad:85:85:97:bf:
                    be:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:4C:2B:CA:EE:23:C3:4B:3A:DB:52:F4:60:65:D8:01:11:11:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/661fdda3-d9b9-336b-868c-5694c1d1cfea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:d1:92:90:56:80:26:0e:a7:ea:35:c5:7d:10:d5:77:9d:
         8d:a3:22:10:79:05:96:3d:9f:e3:cd:ac:40:bd:eb:97:9d:ea:
         fd:90:64:ef:ed:a3:4d:80:0d:ca:e4:d9:b6:df:a4:0d:39:0a:
         45:38:1a:11:33:65:ae:5e:82:a5:d2:7a:ab:6d:99:99:b3:f3:
         95:96:c6:cc:7f:91:53:41:c7:c5:c4:08:70:77:97:b8:4a:c7:
         09:bb:0a:15:0b:d5:18:05:cf:18:26:e8:f4:eb:07:42:12:21:
         cb:7e:64:56:b5:76:92:e1:30:7b:0d:52:f0:4e:f5:7e:68:0a:
         55:98:ea:77:4a:d3:a2:ce:ac:6a:60:e2:0f:9e:c3:bf:e9:d0:
         51:70:58:92:8f:29:73:47:fd:f3:87:d6:13:4a:f9:a0:69:f6:
         07:a0:d6:c1:53:df:71:30:e8:34:14:18:8b:df:db:01:80:d0:
         9c:0c:61:49:93:f0:a3:da:75:5d:38:ee:42:ea:a9:b7:23:05:
         33:58:9d:4e:35:4c:15:d7:aa:67:58:1b:4b:36:19:17:7d:37:
         b5:f8:2c:e4:ad:3d:ea:8d:a1:0d:80:51:ed:ce:b3:33:03:71:
         e1:1e:e2:ef:74:c2:62:10:f8:56:0d:05:bc:3e:76:26:a2:6d:
         10:78:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:41:29 2024 by rpki-client on console-fra.rpki-client.org