Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
File:                     c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa (raw, json)
Hash identifier:          xkAq3iyouUJXDeBLFuskWjuXXGGxh/MxRkVikw7Igzk=
Subject key identifier:   24:1B:7C:B0:CD:FE:1E:B0:62:BF:F0:64:AC:09:D3:09:B4:8B:69:CB
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858447F249B749F791BD8EB228FC0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
Signing time:             Tue 09 Jan 2024 14:00:29 +0000
ROA not before:           Tue 09 Jan 2024 14:00:29 +0000
ROA not after:            Mon 08 Apr 2024 13:00:29 +0000
asID:                     61317
IP address blocks:        94.72.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7f:24:9b:74:9f:79:1b:d8:eb:22:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jan  9 14:00:29 2024 GMT
            Not After : Apr  8 13:00:29 2024 GMT
        Subject: CN=d41b18c7-772b-4fab-8e5f-39cb20fcb950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:26:73:44:2c:be:c7:30:69:f0:4f:42:5e:
                    f4:57:28:27:21:98:26:3f:c3:87:41:ec:0b:7c:69:
                    15:3f:02:46:cd:d1:f9:38:bc:28:82:32:ec:c3:f7:
                    eb:1d:45:9e:69:fb:95:5f:10:66:d2:af:e8:8c:38:
                    4e:5c:fe:b4:ef:b2:1f:fb:d3:fb:70:75:e4:c6:e7:
                    89:cf:8e:30:71:b8:8a:4f:17:19:b3:1d:eb:ec:03:
                    78:91:a4:37:84:6a:58:9e:5d:38:6f:81:e7:7a:e7:
                    45:db:c9:40:f8:4d:80:b6:20:7c:61:11:22:0f:43:
                    2b:12:69:a4:f5:eb:8a:e2:21:25:00:55:63:fe:4c:
                    76:4e:0d:3b:e6:5a:4e:68:a8:a3:f3:8b:ca:96:7d:
                    8e:36:c7:75:bd:cf:6d:ea:60:7b:40:c3:fc:1c:f9:
                    d5:39:89:32:3f:e3:56:65:aa:c8:0b:ab:c5:28:eb:
                    3b:ef:69:c7:bf:cb:c4:b1:28:19:53:ab:89:1d:fd:
                    ae:e1:c7:86:47:e5:b8:a4:d8:b1:10:73:01:65:e9:
                    ec:5b:fd:8c:7f:7d:4b:91:74:8e:b2:6a:e0:23:56:
                    76:07:b4:a1:94:c2:14:01:28:a7:35:3c:87:5c:65:
                    73:8c:20:11:d6:67:37:b9:63:6b:30:ff:0e:7c:6d:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1B:7C:B0:CD:FE:1E:B0:62:BF:F0:64:AC:09:D3:09:B4:8B:69:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:6b:32:a8:d8:80:76:37:b3:d2:5f:44:b0:25:5a:d6:81:
         28:2a:0c:63:78:cc:1a:70:d9:7e:01:11:5f:81:57:6a:df:62:
         b7:67:99:df:6a:b4:f1:87:45:d3:f9:10:2f:1c:ff:5a:ba:08:
         98:42:70:8e:10:20:4d:a9:38:2d:56:bf:4c:c9:5e:54:ec:cf:
         eb:b1:cd:1e:da:51:e3:a4:25:d0:1e:6c:5e:67:82:40:82:c9:
         7c:da:33:6e:d4:27:f2:83:ae:e1:98:24:5b:ab:b3:ef:f7:9b:
         9c:00:73:51:7a:f7:9e:e0:b0:3e:3c:3c:03:8e:f1:e1:a7:76:
         79:e5:b9:41:d8:0e:00:85:f8:e9:ac:9f:33:26:03:74:c5:ce:
         b6:c4:66:ae:bf:b0:86:f4:53:95:3c:89:d6:72:77:12:a0:4a:
         d7:2c:17:19:97:9a:c4:32:8e:22:03:8a:6f:be:a1:b7:05:50:
         29:13:c8:c3:30:3d:d2:5a:21:56:60:34:a8:2f:42:19:7a:f6:
         00:86:e1:64:b1:01:cc:26:18:d8:f6:03:44:4c:90:ed:bd:a2:
         b0:1d:5b:35:b0:fe:e8:83:cf:62:31:00:54:ae:7a:7e:12:57:
         5b:50:fc:91:e8:12:f0:f2:16:8f:cf:21:88:4b:f9:e9:98:68:
         60:cc:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:51:22 2024 by rpki-client on console-fra.rpki-client.org