Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa
File:                     a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa (raw, json)
Hash identifier:          MO9dz87JG68weyJgCCoXiH/rPs59inSgUVuVNFEm2Bg=
Subject key identifier:   5C:27:BE:18:67:7F:9F:71:8D:1F:E3:41:F3:32:6E:CD:9E:00:AD:47
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285844E35152CB52D17977CD023800
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa
Signing time:             Wed 14 Feb 2024 11:11:29 +0000
ROA not before:           Wed 14 Feb 2024 11:11:29 +0000
ROA not after:            Tue 14 May 2024 10:11:29 +0000
asID:                     134450
IP address blocks:        172.84.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:51:52:cb:52:d1:79:77:cd:02:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Feb 14 11:11:29 2024 GMT
            Not After : May 14 10:11:29 2024 GMT
        Subject: CN=6b70ba0e-d09c-4e94-bdf8-7c3ee4d38e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:14:e7:25:12:f1:01:83:90:eb:e7:09:82:
                    98:0b:f0:9f:53:fe:b1:c5:c3:72:f3:9e:3e:0a:4f:
                    b4:7c:85:b0:bc:71:1a:42:5a:7d:59:b2:2f:da:f1:
                    aa:06:3a:9e:a1:40:da:73:3d:db:7e:d1:c4:ff:80:
                    5b:be:95:33:13:ec:91:5e:62:62:5a:b2:02:4a:5b:
                    73:06:86:b6:80:32:f5:67:ab:3a:c2:5b:e0:ec:fb:
                    33:9a:77:ea:4b:b6:5e:b0:87:77:79:b4:0a:00:30:
                    9a:50:d0:ee:c2:c6:2a:e7:1b:68:26:7f:e2:33:c1:
                    57:29:d3:29:8c:f1:ca:3a:aa:05:18:86:99:f9:7f:
                    2b:20:38:d7:f5:d0:a6:c1:a7:a9:c5:aa:b6:bc:dc:
                    ab:44:de:c1:38:3c:b8:4f:ff:a5:20:48:ea:e9:78:
                    0d:f5:3c:3d:02:94:3e:5a:22:08:7c:d8:61:57:20:
                    c5:93:bc:33:ba:da:5e:d1:61:af:9b:eb:e6:a7:a4:
                    61:2f:45:ce:17:76:8d:d2:fd:53:50:c8:c3:e1:76:
                    1d:17:1a:28:b1:88:4e:b6:87:24:ea:b1:38:53:db:
                    79:c5:d9:24:81:38:e3:d4:42:74:22:5e:7d:22:a0:
                    90:d6:4f:a0:ee:8b:c6:74:95:1d:92:b9:6b:89:90:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:27:BE:18:67:7F:9F:71:8D:1F:E3:41:F3:32:6E:CD:9E:00:AD:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2b:39:22:7c:43:d9:c1:d4:50:82:be:e1:57:42:b6:7b:9f:
         f3:57:ac:d3:94:7a:f8:e9:1d:86:b0:ca:ea:a6:a0:52:8a:d7:
         ea:30:33:1e:d5:d0:f9:c0:ed:9c:b0:bf:42:63:ef:33:e1:ba:
         15:65:de:25:f3:ab:17:cb:9f:10:ed:b8:18:b8:d9:87:81:55:
         9d:03:48:de:ca:d3:6c:3c:4b:b3:ea:00:49:66:3f:ee:2b:2c:
         b4:16:df:61:a3:18:6e:ff:36:52:9a:87:cb:db:88:71:6e:9d:
         f2:79:f2:8b:c1:02:c0:63:bf:e0:6e:1d:41:c4:0b:79:c7:c2:
         fb:59:65:7f:35:d5:42:23:42:5a:94:09:dd:09:74:f8:d5:26:
         95:ef:8d:db:b4:56:f9:41:c6:5f:6f:2c:f9:35:93:26:04:f0:
         82:f9:8e:81:89:6b:4c:d3:11:71:00:14:17:2b:10:3b:24:fd:
         ef:f3:44:1e:a9:62:02:79:a1:59:c0:28:37:ee:0f:b5:52:04:
         f1:9b:ec:c7:2c:7b:84:2f:de:02:6a:91:e3:28:6c:75:96:77:
         98:84:73:5b:63:74:e0:e4:81:dc:a2:af:0e:cb:29:7e:73:c6:
         3b:5b:d5:9e:44:47:8e:69:55:ed:98:f7:3e:f9:d3:90:d1:da:
         5b:b5:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:43:10 2024 by rpki-client on console-ams.rpki-client.org