Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
File:                     59a8d12c-2901-3f55-9792-58f7dfe71557.roa (raw, json)
Hash identifier:          ljkgrNm/YkiaEPW97vOS2PpxYbenafBI53Eh/g8VRhI=
Subject key identifier:   E1:8A:7F:1C:CC:85:95:EE:D0:DF:3C:33:D5:A9:A0:F5:63:68:54:06
Certificate issuer:       /CN=6b0ae85a-8757-4947-940f-aa533d9ca479
Certificate serial:       010D0C9F432858456A437DA7BDD3AAFA6E14B200
Authority key identifier: 22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa
Signing time:             Tue 02 Apr 2024 19:17:45 +0000
ROA not before:           Tue 02 Apr 2024 19:17:45 +0000
ROA not after:            Mon 01 Jul 2024 19:17:45 +0000
asID:                     14618
IP address blocks:        155.72.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:43:7d:a7:bd:d3:aa:fa:6e:14:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0ae85a-8757-4947-940f-aa533d9ca479
        Validity
            Not Before: Apr  2 19:17:45 2024 GMT
            Not After : Jul  1 19:17:45 2024 GMT
        Subject: CN=c13e9381-8c1f-4d7f-90b0-3360ebb5d62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:e8:f5:9e:06:74:8f:a7:f3:2f:fb:98:2a:
                    ef:5e:da:cd:85:97:15:e5:1c:e9:f2:99:a9:04:5f:
                    78:3d:04:58:c9:15:69:70:1d:43:fa:e7:96:d1:58:
                    5e:d5:78:35:c6:ff:5f:b6:1a:69:03:3d:7a:fc:b6:
                    dd:ff:15:a1:12:72:1f:dd:cb:e6:83:c2:e5:bb:97:
                    05:0a:7c:bb:c0:83:db:a6:33:6d:de:05:81:af:38:
                    fd:4c:cf:df:8b:7e:e3:42:56:3d:e5:c9:a4:63:46:
                    3b:c7:f0:14:49:4f:82:57:5e:3f:22:99:6b:a5:64:
                    f7:3d:8c:57:6d:2a:d3:ad:fe:9d:bc:db:c3:a7:5d:
                    ec:a6:34:95:90:3c:8b:85:f7:33:f9:1d:03:81:0d:
                    e7:25:88:29:cc:85:5a:2f:aa:e6:a1:b7:50:3d:eb:
                    ad:bb:44:51:9e:cd:68:75:56:77:5b:38:b7:4e:be:
                    0a:b0:5b:6e:38:09:37:70:7e:41:91:7f:72:9d:ef:
                    c8:7f:29:de:46:01:85:a1:3a:6c:ea:55:3f:43:6b:
                    b8:29:f2:5b:88:d2:2f:48:99:b1:70:c9:6d:5b:6c:
                    9c:b9:57:4f:37:6b:c6:93:98:7b:b1:17:6c:0a:f0:
                    16:b5:bf:16:b3:eb:92:21:b0:a8:7c:9b:53:bf:f6:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:7F:1C:CC:85:95:EE:D0:DF:3C:33:D5:A9:A0:F5:63:68:54:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/59a8d12c-2901-3f55-9792-58f7dfe71557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479/6b0ae85a-8757-4947-940f-aa533d9ca479.crl

            X509v3 Authority Key Identifier:
                keyid:22:CD:8F:E8:89:5A:3D:75:95:61:F8:C2:D0:D4:6A:F1:BB:D8:8D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6b0ae85a-8757-4947-940f-aa533d9ca479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.72.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c2:70:61:18:8b:ae:0b:60:a0:d3:db:bd:85:4b:87:98:f7:
         22:94:a4:37:6f:5a:e4:ae:dd:45:b3:8c:0d:4f:97:f8:88:4e:
         9d:32:58:45:01:69:be:ae:e3:c5:9a:32:b7:24:cc:1c:81:b4:
         23:f3:7d:2d:df:c2:9c:f8:66:46:d6:45:8d:bb:13:1a:68:fb:
         cc:f8:ff:99:e1:82:12:32:6c:2e:f1:4b:a1:47:59:b9:3f:8b:
         69:f4:ce:5b:43:74:d6:97:17:42:8f:e5:1b:51:74:bc:fc:9e:
         52:95:b2:f8:84:62:36:36:f0:cd:66:34:7f:e8:69:a2:81:df:
         d1:11:f6:0c:c4:e4:19:e8:dd:2f:48:56:02:34:f4:92:b8:e2:
         d6:3f:d3:f8:f3:0a:2d:31:7a:bc:cc:fe:c2:c6:a9:4c:c3:9f:
         9f:55:8a:b8:ce:c4:9d:ad:99:7d:87:d2:7b:c0:2b:d5:39:d7:
         cd:13:bc:ca:8d:28:91:cf:f9:b0:d1:60:fc:11:64:62:55:76:
         06:0a:8b:64:c2:7c:66:92:19:7c:84:18:db:60:4f:68:f8:62:
         a4:c0:96:83:d3:ac:53:c8:60:ad:78:0d:b5:c6:a0:bc:1a:81:
         c9:ea:75:33:47:a1:34:55:cf:0e:b3:c9:a3:64:38:30:b0:36:
         6b:19:72:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:31:24 2024 by rpki-client on console-fra.rpki-client.org