Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa
File:                     8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa (raw, json)
Hash identifier:          W6E8D0mqnJjXYAIvDmkaGQCHE2vI5ZAQvv5D7JQSm8k=
Subject key identifier:   0D:51:8A:F7:7C:CF:8D:3D:CE:1A:71:53:99:91:7E:25:6C:39:FD:BC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285845462784C587278AF40170F3E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa
Signing time:             Wed 20 Mar 2024 20:52:17 +0000
ROA not before:           Wed 20 Mar 2024 20:52:17 +0000
ROA not after:            Tue 18 Jun 2024 20:52:17 +0000
asID:                     396982
IP address blocks:        172.217.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:27:84:c5:87:27:8a:f4:01:70:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 20 20:52:17 2024 GMT
            Not After : Jun 18 20:52:17 2024 GMT
        Subject: CN=571f8a72-9920-4b10-9964-6a981f73c358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:91:9b:d4:ea:22:f6:c5:db:8b:f8:02:0a:
                    63:f2:e9:9e:6e:76:2c:45:ee:8b:59:f2:1d:91:0a:
                    4c:d1:a7:f3:b9:00:f8:1d:2c:0a:66:cb:8f:6d:f7:
                    ef:91:99:5a:c9:a7:9b:cd:75:5c:ce:e0:eb:2f:23:
                    87:04:d4:f1:7f:aa:83:9d:22:30:88:21:98:fe:4c:
                    5a:bf:95:90:9a:0f:dc:3c:0b:51:d2:31:b1:9f:b1:
                    52:ca:de:64:ad:ca:50:28:6f:f9:ed:b1:34:ce:7b:
                    74:38:61:44:2c:85:17:a1:8d:7e:08:b0:22:27:19:
                    84:0a:ad:d5:84:e7:51:12:3e:93:cd:28:be:12:1c:
                    e9:6b:61:c9:38:fb:08:f0:6e:de:39:1c:34:8b:81:
                    af:eb:54:bf:6d:61:ea:34:e9:82:72:1e:56:36:f2:
                    21:a6:41:63:b2:90:6c:77:71:3c:8a:e9:2e:e4:ff:
                    9b:b6:3d:a2:fe:a4:38:87:56:d4:e7:f0:b5:83:12:
                    7b:9e:67:e7:cb:6c:85:f5:2f:55:c9:64:37:94:d4:
                    ed:1a:13:55:47:70:e3:5f:3f:78:3a:ed:81:f0:5e:
                    c0:82:fd:62:7e:bf:12:98:89:8a:9a:16:0b:54:60:
                    6a:50:95:13:2c:90:36:6a:f8:d2:56:35:a9:35:32:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:51:8A:F7:7C:CF:8D:3D:CE:1A:71:53:99:91:7E:25:6C:39:FD:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0070b7-8b43-32be-babf-4bdb59c2fa48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:61:87:e5:63:95:87:c1:d7:d3:51:d6:36:e4:ae:37:55:68:
         2b:31:21:0d:2c:df:ac:15:e1:41:0e:49:8b:ff:61:d7:73:73:
         45:88:4b:4b:98:69:95:34:13:9f:71:fb:8b:49:78:8f:57:a0:
         28:00:40:84:5a:62:57:dc:aa:69:ef:a2:f6:f8:89:a0:cd:26:
         8a:5f:3b:e7:b5:0f:57:29:c0:a4:e4:0a:d7:95:08:4d:02:0f:
         02:ed:29:a8:5f:10:ef:89:e4:ab:26:1e:99:9a:34:87:0e:5d:
         78:57:1c:7d:a3:b2:58:a2:15:26:4b:72:11:f8:d6:f5:fa:b2:
         17:b0:72:ac:ca:ad:ff:24:92:d6:e1:48:6f:ce:27:2c:09:60:
         e2:87:22:14:63:eb:3e:86:b1:4e:16:67:52:40:d9:2d:00:17:
         54:7d:00:1d:e7:a5:2d:59:a8:cd:22:45:ca:20:5a:81:29:eb:
         4c:b0:14:fe:6b:25:ae:8f:ef:5d:13:55:08:fd:87:95:c7:e2:
         ee:4b:75:20:c2:3a:16:47:87:25:a6:11:8e:8f:5f:82:02:4b:
         15:04:ae:e3:9c:ff:e2:5d:13:ac:7e:9b:ec:9f:a8:5c:b2:cb:
         c6:1c:8d:a7:b4:14:37:c9:cc:96:12:0d:5d:94:25:e2:cb:d5:
         a1:87:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:54 2024 by rpki-client on console-ams.rpki-client.org