Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
File:                     5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa (raw, json)
Hash identifier:          yHoRpcFY1qMj0BG/Baxc4DOr0dCtEF2nwh0bYKKfLFg=
Subject key identifier:   C1:27:E9:12:23:70:15:3A:A5:57:79:38:10:26:20:36:A2:15:42:C5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285844E7D53FA87B83AE9D46945D80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa
Signing time:             Fri 16 Feb 2024 02:00:26 +0000
ROA not before:           Fri 16 Feb 2024 02:00:26 +0000
ROA not after:            Thu 16 May 2024 01:00:26 +0000
asID:                     212238
IP address blocks:        172.94.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:d5:3f:a8:7b:83:ae:9d:46:94:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 16 02:00:26 2024 GMT
            Not After : May 16 01:00:26 2024 GMT
        Subject: CN=9a03acfe-faed-4b09-8ce2-3c970fedd474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:5b:44:35:04:cd:e8:a8:ea:7e:97:25:e8:
                    3a:6e:e6:bc:a2:e9:0f:88:10:8d:d3:74:9d:52:64:
                    9d:74:bd:24:e5:5b:a5:48:a1:42:eb:b2:9d:4a:ae:
                    ff:fd:4b:ba:5a:57:ca:c6:9d:11:1e:46:63:31:55:
                    69:4c:86:7c:77:6b:f4:cf:c4:6c:3a:f3:ae:83:b2:
                    f3:e6:4c:6e:59:b2:26:63:73:ce:1f:1e:97:5d:6f:
                    a4:f2:bb:e1:59:9e:45:10:0a:4b:2e:fc:66:5b:48:
                    13:90:59:f2:bf:ba:c3:40:13:0a:30:77:db:a0:af:
                    e7:75:38:71:52:27:48:cb:e7:29:fb:79:9d:a3:cd:
                    fc:35:29:60:77:1e:f4:0f:41:89:9a:8c:7f:e7:02:
                    ed:f8:cd:a7:33:cd:a1:9b:1c:12:de:bb:f2:e0:8c:
                    5e:3d:41:a8:78:c5:ca:4d:66:c1:3e:5e:ae:92:5b:
                    0f:ef:a5:14:74:fa:45:79:9f:6f:a8:44:7f:a4:4b:
                    c5:5b:b9:32:80:6a:20:c1:b5:d1:de:b6:73:6a:c5:
                    6a:a2:e7:75:85:91:e8:31:ad:37:83:1f:cb:e9:f3:
                    6b:24:f7:f4:d5:31:ca:3f:7d:da:c2:b2:6d:a8:6f:
                    a7:e3:2f:4a:e5:d2:52:46:04:12:87:28:8b:64:d5:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:E9:12:23:70:15:3A:A5:57:79:38:10:26:20:36:A2:15:42:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:77:d3:c9:48:ee:ac:d6:6c:93:82:7e:1d:fd:a4:df:66:c8:
         a3:15:6c:3f:66:c8:48:09:8c:ed:56:8f:14:7d:55:b9:b0:7b:
         da:cc:c0:bf:b1:94:03:e4:4c:43:14:46:30:6d:fe:51:b5:f0:
         92:38:2b:8f:6c:db:bc:04:bf:bc:fc:a9:7a:b7:9f:30:7f:0b:
         df:fd:37:07:fd:12:15:26:93:f2:97:4e:cb:33:5a:98:15:06:
         08:38:0a:b4:b8:ae:96:27:20:7f:8b:8d:9e:b9:27:f7:7a:c5:
         26:a1:cb:14:ac:3a:07:e2:ec:19:fc:e6:ad:1e:ab:19:f4:e9:
         a1:05:b4:12:8b:33:ab:7f:da:b6:ab:e8:fc:43:52:73:0a:96:
         24:74:43:90:67:58:c0:33:42:07:f1:4c:7a:99:ba:ff:55:8b:
         ec:0b:7e:13:05:4d:4c:1f:d0:be:ae:ff:b4:76:49:f3:72:cf:
         9f:4e:6e:02:13:96:50:76:a5:99:c0:63:2a:28:2d:33:4e:04:
         83:2c:b7:85:0c:16:5d:6a:fa:bf:d2:2c:fe:f4:40:27:20:21:
         7c:54:67:e6:43:1c:77:68:93:d7:81:0c:af:c4:35:81:fd:3a:
         da:4c:c9:c3:e2:1f:05:9a:20:87:36:96:c8:c4:02:f4:b5:35:
         29:08:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:02 2024 by rpki-client on console-ams.rpki-client.org