Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
File:                     127335ac-7835-339e-98cf-19520d8ce2e9.roa (raw, json)
Hash identifier:          92ih9N5GOcmuGhoeK30MjwZVrd09YDam0bv+hkqWAIQ=
Subject key identifier:   9F:1D:D9:9E:0F:54:D8:68:19:78:2E:AD:2C:14:2D:E7:FF:46:47:04
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584582A89011AB07E147B95DFB80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     3223
IP address blocks:        172.94.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:90:11:ab:07:e1:47:b9:5d:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=bc370584-4d86-4be7-8a65-af9e373f4502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:b6:2b:55:4e:fe:0d:49:87:fe:01:7b:a8:
                    60:44:9b:66:95:80:86:c4:42:ff:aa:c4:dc:a9:f2:
                    4a:8b:09:ca:9b:bc:44:08:a4:8f:73:1b:3b:a5:63:
                    4f:25:eb:52:59:2b:2e:11:f1:3b:55:39:1c:48:a1:
                    b5:34:68:44:7d:7b:89:bc:36:30:dd:d3:c9:37:fa:
                    c1:ba:ca:f9:5b:57:81:d3:0a:f2:b9:20:09:f0:e2:
                    74:bf:20:f0:3b:d0:40:25:41:aa:b7:17:6d:71:7c:
                    e3:fa:0f:13:64:da:97:5c:cc:ab:f7:0d:16:7b:99:
                    31:8d:b7:10:bc:d0:b0:6e:5c:17:c7:e1:4e:93:01:
                    33:f1:a8:fb:25:f6:1a:b8:59:5c:9d:e5:a2:b1:d5:
                    ea:3b:03:9b:0c:fe:d9:c9:dc:35:43:63:6a:a5:9b:
                    80:08:ae:2b:05:57:47:bf:79:9a:5f:7b:1c:0e:13:
                    da:b5:d5:c3:59:3b:5f:2a:0f:95:37:73:dc:97:25:
                    d0:a9:d3:62:5c:e5:e6:35:b9:39:4c:4b:73:bc:6c:
                    50:e6:00:11:db:1d:82:b4:e8:a5:5c:a7:0c:3a:5c:
                    37:78:8b:82:da:a5:40:e0:a6:66:fe:57:3a:70:25:
                    44:f3:12:88:2d:e3:2e:45:65:cc:52:7b:ca:c6:11:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:D9:9E:0F:54:D8:68:19:78:2E:AD:2C:14:2D:E7:FF:46:47:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:31:95:c6:7d:18:43:fc:a8:68:41:5c:1e:fb:32:08:d7:67:
         07:cb:d9:bc:7d:f7:f5:7e:f3:c0:1d:ec:57:d1:97:45:b1:a6:
         a7:c4:bb:85:24:ef:f4:5e:ac:79:93:fc:13:51:86:40:95:2f:
         58:0c:52:6b:7d:40:8e:d6:d8:11:15:d5:bb:ad:13:4b:c3:25:
         84:1e:c4:92:e9:fe:df:0c:6c:ad:8d:7e:0c:53:2f:bc:c4:6a:
         fe:fe:27:7c:bf:62:58:84:04:b9:9d:11:26:7e:b1:e3:04:cd:
         35:b3:35:58:bc:e7:28:61:96:92:27:23:46:f5:48:91:4d:51:
         01:7c:53:e1:f9:e7:37:23:0f:7b:52:7a:2c:97:66:85:b9:70:
         38:58:ab:fe:ea:7a:d2:a8:85:1d:79:bd:67:34:84:12:53:33:
         ce:a1:12:75:f8:6a:e8:3f:56:78:f7:cc:0d:75:de:61:13:c1:
         96:87:cd:08:eb:6f:39:00:4e:5f:2e:a0:04:2b:84:63:16:17:
         c7:4a:bc:90:ed:74:a8:84:38:7a:66:7b:1d:a8:82:e2:e9:5f:
         b6:a1:73:e0:3a:f9:15:68:bc:81:3b:e9:12:3a:b3:03:0c:3f:
         c2:b9:cc:dc:de:da:d2:80:75:b3:5d:72:63:d2:4c:d3:b9:ca:
         bb:db:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:50 2024 by rpki-client on console-ams.rpki-client.org