Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df89be0d-0757-3109-b9c3-31260baf8eba.roa
File:                     df89be0d-0757-3109-b9c3-31260baf8eba.roa (raw, json)
Hash identifier:          mnfiX2K3BxTCfWZxbiRTWn+HCN0lFQPZwxIZ4KFEx00=
Subject key identifier:   4A:AF:41:3F:EA:77:3B:42:E1:76:54:27:79:0A:4E:77:79:0C:0D:DC
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285844DE0FE3714EAAF49461D5FF40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df89be0d-0757-3109-b9c3-31260baf8eba.roa
Signing time:             Mon 12 Feb 2024 14:00:30 +0000
ROA not before:           Mon 12 Feb 2024 14:00:30 +0000
ROA not after:            Sun 12 May 2024 13:00:30 +0000
asID:                     45671
IP address blocks:        172.94.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:0f:e3:71:4e:aa:f4:94:61:d5:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 12 14:00:30 2024 GMT
            Not After : May 12 13:00:30 2024 GMT
        Subject: CN=81bf681d-10d5-4abe-931e-55e80a3e8bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:3d:05:cd:36:44:97:a6:30:9b:4c:05:79:
                    e0:6c:b1:00:c8:ac:a4:0e:2c:c8:dc:01:38:c8:ab:
                    09:05:6a:e2:b4:e2:8b:31:1e:30:dc:f6:a1:e5:e4:
                    f0:f8:cf:e5:75:1d:75:bd:04:9e:ce:8a:17:d6:fa:
                    61:3b:ab:a5:22:6e:68:4c:aa:8c:f8:52:1c:15:4b:
                    92:ff:29:c0:ea:93:cb:94:da:7d:25:8a:6f:89:4d:
                    fb:57:fe:2c:95:d7:c6:98:32:c5:86:09:0c:d0:3d:
                    de:46:27:97:16:f7:ff:d8:35:ac:b0:ac:97:e2:7d:
                    22:99:3b:b9:d7:5d:12:4d:71:a7:29:48:70:ac:e0:
                    61:06:d1:07:d8:8a:9c:64:4a:ab:66:29:a5:5a:b0:
                    5e:bc:95:4f:a4:2d:87:d4:dd:9b:9c:72:76:75:e3:
                    9e:35:30:49:66:8e:43:d9:f5:95:90:49:b0:37:3e:
                    5b:e4:87:39:67:de:d2:31:55:34:a1:df:f9:6e:92:
                    b9:2e:42:26:52:d0:cf:64:68:17:b2:63:66:c2:ad:
                    b1:bb:77:b6:d8:fc:d1:38:8d:28:15:93:4d:ae:48:
                    b6:04:52:7d:d1:12:f0:3d:33:b1:80:a2:29:d0:4d:
                    c8:cb:31:b7:12:13:a4:2d:61:a5:70:77:44:c8:15:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AF:41:3F:EA:77:3B:42:E1:76:54:27:79:0A:4E:77:79:0C:0D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df89be0d-0757-3109-b9c3-31260baf8eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:84:ef:29:3d:66:07:37:89:95:46:d3:f0:4c:fc:0f:ea:
         92:89:25:53:2d:38:27:ca:60:89:21:3e:be:da:3a:02:ce:c5:
         1a:ea:47:b9:af:22:84:1c:bb:a1:7a:18:86:8b:e7:c9:cc:ec:
         29:4b:0a:65:61:d4:f1:9b:ab:69:e3:22:36:ef:2b:fc:43:93:
         5f:1d:81:af:44:04:6a:3b:c2:df:73:ff:a6:7e:00:65:d2:bc:
         26:5e:af:a2:06:6e:aa:0e:b8:2b:cc:7e:e4:7d:b3:f4:84:96:
         d3:aa:46:c5:0b:17:dd:ba:bf:ff:ea:8f:90:ac:e1:a5:90:df:
         84:9c:d6:9a:a6:d6:43:be:9b:15:47:71:94:48:11:99:cc:87:
         12:89:2c:77:05:a4:46:ce:d9:9c:64:0f:f1:04:e5:8b:3a:01:
         5c:de:45:27:5e:25:8e:e5:ec:8c:0c:32:15:b2:5d:f5:bc:01:
         d1:60:d9:45:80:2e:65:49:0b:0b:a0:0d:b4:54:4b:b9:fd:37:
         65:1f:4a:e7:49:a1:2f:1b:8b:df:13:10:1e:55:13:f0:8f:ea:
         9f:80:08:b1:da:10:e8:99:45:ba:cb:cb:c7:01:90:29:72:99:
         7f:b2:97:a2:53:60:dd:20:20:f5:d3:55:3e:8b:51:91:1c:2b:
         a1:b2:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:55 2024 by rpki-client on console-ams.rpki-client.org