Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa
File:                     27d6ace2-7e42-3857-a6df-5915cab5768a.roa (raw, json)
Hash identifier:          9pEvFIBGVl6A9fAnHiCP/qcrXG32VyoyQY7JzFSN9vs=
Subject key identifier:   0C:D4:1B:5F:53:4C:96:28:21:90:6E:F5:F1:B5:76:A6:94:E8:EB:7C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845C5A8F85A98504E983A645E20
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        172.94.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:f8:5a:98:50:4e:98:3a:64:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=8099c780-5673-46c8-acc2-5561d8f49e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:9b:40:1d:72:6d:11:6e:63:3b:ec:3c:5f:
                    e4:ed:96:41:3a:ce:ba:13:65:7f:44:a1:1c:55:1c:
                    d7:a4:d1:45:0d:87:01:1e:d3:cc:9e:86:d7:85:bb:
                    40:22:7e:39:c4:55:8a:c8:bf:79:e5:08:34:1b:e3:
                    64:0b:97:29:c8:2a:3c:9b:f7:61:c7:3d:84:a2:b1:
                    df:47:8a:b8:2e:4e:ca:a2:36:69:bb:d8:c8:0a:71:
                    80:98:eb:70:26:ac:d1:ca:e0:62:9c:2c:ef:18:e8:
                    23:9a:72:09:48:06:41:77:db:1a:ca:b4:85:d3:59:
                    15:02:50:2b:35:35:14:82:5f:8c:ad:e7:9a:66:67:
                    b4:b8:ff:c1:08:cf:b2:34:36:5f:4e:55:6a:07:a6:
                    09:5f:4b:6b:ec:19:13:22:25:8d:7c:92:ee:5c:b8:
                    ef:07:c5:ce:74:96:ad:50:0a:27:96:0a:94:2b:9f:
                    15:01:34:4d:8d:39:ef:da:84:fa:8f:8a:3f:d7:3d:
                    f3:4f:09:1b:41:0b:62:c9:d2:db:78:8a:c7:c4:c7:
                    1e:65:18:d9:4e:2d:0c:9a:79:be:ba:70:eb:f0:00:
                    36:bc:8e:c2:64:d8:b2:ed:a5:4f:2e:9f:bd:1b:c1:
                    87:03:79:42:27:79:9d:0a:96:af:b2:d5:ff:69:64:
                    8c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D4:1B:5F:53:4C:96:28:21:90:6E:F5:F1:B5:76:A6:94:E8:EB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:11:06:04:0c:49:d8:54:a3:57:db:53:b7:0a:0a:b1:95:2d:
         d6:ae:41:d5:0e:de:de:f5:0c:10:6d:73:82:c7:75:88:2d:c7:
         c2:40:6b:9c:9f:2a:f4:68:e0:11:5d:59:a1:d3:6e:08:65:e8:
         5a:db:ea:1d:eb:62:bf:38:6e:be:a2:03:24:8a:eb:3d:4f:2d:
         b9:f5:61:50:86:28:22:91:d4:b3:fe:b0:19:3d:34:84:35:2d:
         54:38:3c:c5:6d:fa:76:55:bb:8c:8d:f0:c2:55:fd:e7:ba:3d:
         dd:6e:7e:1a:9b:cf:8e:2d:8f:78:94:ba:ea:27:86:78:0b:92:
         b4:d6:a8:b3:ac:39:f9:2c:d3:11:71:0e:22:28:87:c6:22:aa:
         b3:fe:01:09:aa:8e:fb:88:08:09:44:09:cd:4e:d9:5f:58:35:
         5c:1f:e9:91:ca:07:89:0f:46:f2:fb:52:c8:92:23:6f:60:36:
         f6:99:4a:7e:31:e8:dd:0a:e8:48:e9:46:0d:c0:33:3f:95:5b:
         13:a3:15:fa:03:cd:01:48:ca:38:27:0f:7f:8e:7b:64:18:5f:
         5b:b1:01:2b:9a:38:6d:b2:30:52:f5:13:d1:8b:6a:a9:b8:f2:
         4f:d4:fb:5b:56:0b:77:cf:d0:92:07:06:58:e3:ce:44:7a:24:
         37:a3:4f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:14:51 2024 by rpki-client on console-fra.rpki-client.org