Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa
File:                     e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa (raw, json)
Hash identifier:          XDLidP4alEUq5K/sCTdi97t4R89IaQ87XUTm0SsfgVw=
Subject key identifier:   D2:A0:F5:9A:EA:55:57:01:34:D9:CD:DF:E2:8C:B1:C5:D4:71:6F:7F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F07858234E19220FCBC7920
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa
Signing time:             Fri 29 Mar 2024 18:43:01 +0000
ROA not before:           Fri 29 Mar 2024 18:43:01 +0000
ROA not after:            Thu 27 Jun 2024 18:43:01 +0000
asID:                     15169
IP address blocks:        172.217.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:07:85:82:34:e1:92:20:fc:bc:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:43:01 2024 GMT
            Not After : Jun 27 18:43:01 2024 GMT
        Subject: CN=49c257b0-f527-433f-8913-5e8e152a3234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:91:9f:23:e1:33:eb:a9:b0:63:c7:bb:33:
                    eb:82:0b:32:93:e4:cc:0c:29:c0:68:8a:cb:91:fa:
                    3a:0f:a2:fb:49:1c:51:03:38:0f:1d:ea:48:c3:e5:
                    93:72:b2:bb:b0:6c:de:40:81:ef:46:8a:9c:8e:3c:
                    db:b6:72:99:38:4c:13:67:2b:19:b4:fd:44:0e:e1:
                    b3:da:6d:bb:84:50:67:b3:67:3a:18:04:0f:76:20:
                    28:44:47:ea:af:2f:d1:82:ea:50:dc:ff:15:96:cb:
                    42:cc:08:13:bc:e2:1d:b6:74:0d:ca:8b:56:45:6c:
                    11:4e:6d:af:33:df:3c:d5:8f:37:2a:cb:03:21:2d:
                    9c:c5:3b:ed:42:47:8f:b7:b8:4e:bc:b3:7f:3c:0e:
                    cf:41:e2:4c:12:5b:bd:46:60:bb:a0:1b:0b:62:f9:
                    ed:86:e5:10:61:40:5e:42:4e:f6:a7:6f:59:6a:48:
                    b0:5f:a7:5a:47:c0:02:9e:f3:4d:ec:1d:1c:75:2c:
                    62:02:38:1b:64:ec:5d:99:2b:5a:f2:4b:4b:57:ca:
                    49:a3:ee:d2:d8:24:72:45:ac:76:77:ce:2a:ad:0f:
                    17:1a:46:39:a2:b3:c6:fc:bd:fe:9b:06:23:ce:03:
                    4b:2e:7a:3e:64:5b:44:5f:5d:42:c0:f7:50:65:dc:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A0:F5:9A:EA:55:57:01:34:D9:CD:DF:E2:8C:B1:C5:D4:71:6F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e53c3f72-0a72-36d6-bf78-c67e94b81f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:37:4b:92:9a:8e:03:25:fd:f5:f6:b7:9c:d2:f0:ad:7d:df:
         4b:c6:fa:6c:55:1e:5b:af:4c:64:5e:70:44:dd:29:89:50:36:
         35:a3:e5:dd:87:ed:32:0a:31:7e:0b:92:7d:ba:64:f9:56:ec:
         b4:24:b7:6f:9b:6c:26:14:15:96:b1:a2:32:bf:d8:e6:be:89:
         45:81:64:9f:84:20:bd:e8:2f:3e:b1:58:90:14:5b:21:5f:8d:
         70:79:03:27:8c:19:9b:bb:6d:c1:92:2e:55:82:86:07:27:33:
         41:65:3f:c7:58:f7:64:02:f0:ce:d4:1d:b4:99:88:18:06:e8:
         4f:fb:f3:d0:65:f3:f6:9c:af:27:6b:8b:9b:f1:dd:03:43:9f:
         e9:f0:10:ca:e0:b0:d4:16:f2:d2:3f:e9:b2:49:e6:0a:e5:4a:
         17:6f:77:9a:d6:b8:a6:45:b3:03:78:f9:18:92:b8:e4:62:dc:
         a1:13:98:ed:45:68:ab:ab:23:01:62:0e:ad:d0:24:4f:f3:2b:
         1b:1d:3f:81:e1:e1:ee:7c:b0:03:3c:34:0d:47:ca:f9:8d:ef:
         fe:c4:d2:79:f9:c5:33:43:1e:19:ef:5b:3f:01:7c:c1:a3:71:
         d1:4b:40:9b:ed:12:00:7e:fa:ef:39:b4:d0:14:d2:8a:72:73:
         ac:5b:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:52:24 2024 by rpki-client on console-ams.rpki-client.org