Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa
File:                     728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa (raw, json)
Hash identifier:          jicAByuZbjBrRutkKIjMnn3iVcfU2/AzK2KjKiOSFMk=
Subject key identifier:   73:BC:55:BF:3E:77:96:B3:C6:5E:D7:B9:1C:00:41:1B:79:7D:0A:E6
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858481488F1C807F716CFEE8C2F40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa
Signing time:             Tue 03 Dec 2024 04:38:59 +0000
ROA not before:           Tue 03 Dec 2024 04:38:59 +0000
ROA not after:            Mon 03 Mar 2025 04:38:59 +0000
asID:                     9009
IP address blocks:        172.94.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:88:f1:c8:07:f7:16:cf:ee:8c:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Dec  3 04:38:59 2024 GMT
            Not After : Mar  3 04:38:59 2025 GMT
        Subject: CN=6252e843-54d6-4f73-a09f-25a3c5a2efc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:a7:d3:b3:b3:f0:a3:d4:bd:0d:93:9b:3e:
                    a0:44:00:16:70:b3:ed:e1:4a:93:37:0b:ff:08:9e:
                    79:e7:31:04:51:a0:6a:f7:e8:11:5f:09:d8:bb:91:
                    c4:bd:b0:35:a2:e1:7a:6a:3a:e2:61:ac:03:a9:39:
                    eb:d3:05:2a:ce:98:36:36:f2:46:3d:5a:71:3c:dd:
                    55:a5:d1:5d:ab:7b:46:5b:68:16:d0:03:27:2a:23:
                    7b:17:8f:4f:40:4e:62:f7:f6:af:b0:79:67:53:77:
                    53:7a:ea:b2:da:e3:7b:71:7f:b0:81:2c:6a:30:88:
                    2e:89:7a:f8:64:79:c1:8c:d3:68:28:39:35:33:73:
                    2b:40:10:2b:f4:e3:06:3c:c9:7e:09:cf:77:8c:2a:
                    74:47:f5:e1:47:fc:8b:18:df:60:d0:44:8b:3d:f2:
                    2c:e6:5f:9e:6e:8e:39:b0:bf:39:81:5f:00:ad:c8:
                    38:94:a8:c4:c2:6b:0c:22:7f:57:55:7a:f3:d8:a3:
                    27:1f:d1:08:d1:4f:5a:6d:8d:46:73:62:ec:2e:40:
                    c8:34:dc:86:06:77:77:d5:a2:ba:04:e5:8c:09:dd:
                    92:64:aa:bd:05:c4:bf:82:1a:1e:de:d0:91:f5:b4:
                    ca:2a:57:81:10:21:57:01:c6:55:f2:56:ec:f3:f4:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BC:55:BF:3E:77:96:B3:C6:5E:D7:B9:1C:00:41:1B:79:7D:0A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:c2:a8:f6:fa:9d:48:40:63:1f:4d:8e:50:2e:f4:b4:86:
         f7:cf:46:95:32:4b:0c:29:bc:de:c8:73:78:c1:e7:ac:16:e6:
         aa:bc:bd:4d:c1:71:b4:ee:e2:0b:59:28:3a:a7:59:3f:9c:5b:
         24:db:13:6f:c6:b5:1e:03:1b:6d:5e:8e:30:38:a2:84:11:62:
         3d:28:be:27:c4:d4:2a:80:9f:9c:11:82:07:bd:a2:d0:fe:d6:
         6d:93:96:f4:35:87:b0:b9:bb:41:4b:8e:49:fe:db:ba:9d:d5:
         5f:ac:32:55:89:66:2f:60:a6:3b:f1:20:c1:18:4d:85:17:de:
         09:b2:c1:a8:fd:bc:1a:c9:23:54:66:a6:d4:b2:61:c6:54:3b:
         79:d7:a2:4e:de:31:fb:34:b4:90:27:03:16:2b:45:ff:b4:f1:
         aa:14:7b:db:f1:0b:28:73:cc:96:6a:d8:cb:46:25:6f:0e:5f:
         8d:1e:61:41:91:92:e2:6d:9f:e1:c3:b6:3b:41:11:a0:5b:26:
         12:8d:0f:d4:3f:9f:20:7f:d5:41:0e:be:30:7f:37:8c:24:b6:
         3d:5a:e8:9c:24:f0:6b:7d:38:3f:63:ba:00:f5:cd:64:91:11:
         ff:34:e2:7c:94:53:f6:8e:5f:07:68:5a:43:e1:12:3c:9c:d9:
         a2:93:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 09:00:18 2024 by rpki-client on console-ams.rpki-client.org