Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa
File:                     452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa (raw, json)
Hash identifier:          K9ywsY1KtTiMzKcX67cbgy+bA8cuESdy6cfrEiQ87xA=
Subject key identifier:   E4:D4:DA:C3:46:21:F1:8C:B4:EC:1C:79:7B:68:16:D9:7E:5C:DA:3F
Certificate issuer:       /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Certificate serial:       010D0C9F432858454272B9504D3F89FD2BD2D240
Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     395494
IP address blocks:        72.19.28.0/24 maxlen: 24
                          72.19.29.0/24 maxlen: 24
                          72.19.30.0/24 maxlen: 24
                          72.19.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:b9:50:4d:3f:89:fd:2b:d2:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=849cca49-98e2-4895-972b-f7d368f83baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:59:09:d5:c8:fc:47:22:84:b4:c9:51:e0:
                    43:17:3d:22:f9:e2:f8:57:2a:02:82:66:a0:84:c4:
                    ae:9d:a3:33:aa:10:e8:1d:e6:18:4b:00:a3:b3:1e:
                    e1:ff:0a:8a:40:35:a3:7d:17:04:36:53:8d:94:47:
                    46:d3:b9:84:45:da:94:e7:a5:64:93:57:c1:e7:3e:
                    52:50:05:55:12:22:45:76:ef:92:75:09:32:ba:7a:
                    5c:2a:fa:e2:18:19:02:7a:2e:fe:ec:7c:14:40:fe:
                    a4:e7:53:3c:aa:33:1b:77:97:c9:e3:33:6e:88:4b:
                    5f:45:c3:0d:ed:bd:1f:c4:ac:d7:32:af:d6:27:42:
                    32:11:4b:4b:e1:29:84:db:a3:82:66:7f:31:cf:9a:
                    f9:4b:d1:76:af:18:e3:f1:a9:c6:db:f6:f0:cb:06:
                    a0:d6:b5:c9:c1:7a:8c:99:7c:94:1b:88:d4:57:45:
                    6c:88:7e:36:76:99:40:4a:5b:09:65:0e:98:90:91:
                    9c:16:ae:da:75:6d:a1:1d:21:c6:71:49:86:d7:6a:
                    f2:a9:27:40:34:63:1a:05:a8:9c:3a:87:db:02:43:
                    77:62:70:fd:1b:e3:d8:60:ad:fe:91:de:bf:1a:bd:
                    b7:c8:d0:31:69:04:e4:c5:74:f0:18:59:13:2a:3f:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D4:DA:C3:46:21:F1:8C:B4:EC:1C:79:7B:68:16:D9:7E:5C:DA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/452f8dd9-4867-3ee5-b3b0-d43930f15eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl

            X509v3 Authority Key Identifier:
                keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.19.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:88:5f:76:d8:ef:0b:77:82:55:5a:1c:db:19:a6:40:4b:1d:
         93:71:de:3b:b9:30:9d:00:3f:20:5d:25:d7:17:41:1d:a2:26:
         fa:da:51:f2:e0:54:90:14:4d:25:6b:2b:f6:b1:7a:50:d3:a7:
         24:08:80:94:3f:82:78:12:74:0c:58:06:52:51:a2:ec:bc:6a:
         b1:c9:7f:ae:e4:72:9a:32:70:17:2d:cf:bd:0c:16:83:95:c3:
         24:16:1c:3d:3c:db:68:e4:7f:f9:86:43:62:40:d6:6c:82:b2:
         42:d6:48:9f:6a:af:2f:cc:06:4b:39:24:2e:cd:c0:eb:7e:41:
         84:4c:16:49:c9:25:8e:50:fa:dc:65:c9:18:3e:40:3e:0f:8e:
         2a:dd:b8:4b:01:06:54:b7:ec:58:6d:92:29:d7:40:e4:64:33:
         6b:8d:2d:f1:6a:ee:e8:e2:07:2b:bc:5c:75:8d:cf:a4:64:d1:
         df:f3:6c:45:13:a6:db:ce:fa:e4:c4:c6:51:83:4f:8a:f7:e5:
         85:c5:77:7e:cf:af:fb:8e:8e:11:8d:fa:65:e0:c0:d4:47:39:
         7a:a3:9b:30:62:9b:a0:28:1a:ff:e3:ca:d0:0a:10:48:be:7a:
         05:fe:6c:49:c3:0e:70:e6:cc:b9:22:44:71:59:24:e1:79:f7:
         0b:68:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:38:36 2024 by rpki-client on console-ams.rpki-client.org