Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16778dbb-2237-35e8-b53e-658adf1225ba.roa
File:                     16778dbb-2237-35e8-b53e-658adf1225ba.roa (raw, json)
Hash identifier:          WEZ6XPQNoStVXpQ/coow0DGxcc8wme2xLrYLdvexNdM=
Subject key identifier:   83:06:A9:AB:30:F9:D9:8C:6A:43:0C:0B:6F:BA:B7:3E:41:C2:34:D3
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858458B088DD9AD2B9AD3CF343F80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16778dbb-2237-35e8-b53e-658adf1225ba.roa
Signing time:             Sun 14 Apr 2024 13:00:34 +0000
ROA not before:           Sun 14 Apr 2024 13:00:34 +0000
ROA not after:            Sat 13 Jul 2024 13:00:34 +0000
asID:                     3223
IP address blocks:        172.94.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8b:08:8d:d9:ad:2b:9a:d3:cf:34:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 14 13:00:34 2024 GMT
            Not After : Jul 13 13:00:34 2024 GMT
        Subject: CN=70f000d1-6408-4d66-bc15-133e2c2a8aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:6f:29:d6:aa:21:05:c2:02:c3:b8:6d:63:
                    2d:9a:9a:df:79:69:8d:14:bb:38:06:4b:e7:60:a4:
                    dc:bf:92:ee:53:e5:52:f5:f1:c7:f1:75:08:f2:db:
                    af:44:64:4d:a2:e7:31:69:c3:6e:f6:36:52:a1:15:
                    92:6a:a4:26:1e:f7:d8:39:11:38:23:41:ec:90:9d:
                    2d:15:f5:8b:96:9b:ef:40:8d:a9:a8:0b:80:77:47:
                    f8:b5:57:65:4c:92:16:cb:ba:ce:9c:5a:bf:62:84:
                    c8:c0:29:14:36:fa:59:93:00:90:22:ca:d4:47:b7:
                    d8:06:b5:d2:70:cf:5a:fd:5d:73:b2:96:8d:f5:a9:
                    b7:66:ee:59:ca:0d:69:90:ff:52:66:78:d6:29:da:
                    7e:12:cd:ae:e3:ec:9f:3b:f5:8c:77:3d:e4:99:49:
                    9f:e0:70:67:f7:11:51:3f:bc:b7:ea:d4:cd:70:5d:
                    99:d5:0f:07:4a:69:01:73:c9:74:10:a0:3d:a5:af:
                    d3:2f:19:38:54:7e:9e:a4:c7:a1:93:b5:22:49:af:
                    b1:6e:93:2b:fd:7b:11:bf:16:0d:60:bd:a0:fa:23:
                    73:03:86:eb:0c:8f:ee:46:73:f5:27:58:01:d2:72:
                    1b:3f:04:35:3a:e4:dd:7a:f5:de:5e:37:6f:7d:dd:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:06:A9:AB:30:F9:D9:8C:6A:43:0C:0B:6F:BA:B7:3E:41:C2:34:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/16778dbb-2237-35e8-b53e-658adf1225ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:b5:b6:01:81:ee:1b:e4:ab:36:c5:e5:be:09:74:f8:a4:
         f4:29:03:d3:ef:56:f5:8f:01:59:66:4c:da:e8:17:43:42:fb:
         84:c3:69:a7:cb:d6:24:1e:16:d9:c5:43:68:a2:e3:cd:8f:78:
         d0:a9:16:79:fa:8e:e9:9e:28:89:b8:ef:2c:d3:28:3a:e9:f0:
         08:72:5d:7f:c7:49:b3:ae:45:e5:8f:0c:5c:5e:80:66:3b:a7:
         32:4f:8e:4f:17:c1:89:24:97:d6:55:01:3d:7c:52:7f:13:a8:
         56:b8:1e:36:f1:0e:c5:3b:fe:a4:e3:e1:64:1f:0d:fd:7a:96:
         75:21:02:dd:1a:b1:5f:67:fc:94:ae:51:39:3e:68:61:fb:87:
         ed:ca:3b:c4:c4:10:e5:3a:ca:45:7b:77:f8:7f:3a:2f:c7:ce:
         ac:11:a1:d5:02:f0:81:41:e6:c2:2f:91:f9:aa:69:53:56:1e:
         4a:32:20:3e:e6:8b:99:4c:83:cc:63:c8:43:6a:e2:66:74:20:
         05:f1:6b:b6:24:7e:31:ff:b9:8f:a6:e9:2b:bf:21:87:43:bf:
         84:2d:6c:a0:9c:6b:02:f9:45:32:b6:f5:82:ce:cf:9c:57:2d:
         11:b8:f3:3b:8b:03:c5:89:25:e4:53:c8:43:28:a3:ea:ae:fa:
         51:3e:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:40:22 2024 by rpki-client on console-ams.rpki-client.org