Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
File:                     e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json)
Hash identifier:          jJqQhZH1uoJOOpQfxnMIUrxuQ4dZEM65IMJ54F7UGfM=
Subject key identifier:   D5:E4:77:DF:4E:22:31:FD:60:4D:87:29:47:95:27:F1:AA:33:50:E0
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F43285845B4E8CC7E56DC01774E0EBE00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     9009
IP address blocks:        172.85.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:cc:7e:56:dc:01:77:4e:0e:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=c851a80f-ff6c-4527-9b8e-b46f75ae4bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:5b:39:ec:88:d4:d4:b5:89:c5:81:07:25:
                    95:d7:92:74:3d:d8:b2:25:94:39:92:a8:b9:b1:59:
                    89:59:dc:81:f3:4d:74:b3:95:5a:ce:33:7d:d6:97:
                    e1:9a:a9:f4:d5:a2:f3:67:a5:60:a7:38:75:cf:d3:
                    e9:bb:7a:67:43:52:a2:56:47:ac:8e:20:ec:ec:bc:
                    a5:bb:6f:56:d1:84:41:f8:5d:e9:4c:8f:e5:11:af:
                    62:5a:4b:3b:af:29:51:2e:53:fb:02:1d:4d:b5:99:
                    ef:15:0e:41:06:76:38:54:53:08:ae:3a:c9:17:a0:
                    64:95:c9:a9:c5:8f:03:f8:5a:10:9f:1c:20:68:57:
                    5a:3f:75:f9:20:36:69:63:1c:3d:63:ae:76:fb:3c:
                    41:4f:97:9f:c5:4b:1f:6d:78:46:aa:c4:c0:ea:fa:
                    2b:ca:e5:89:2d:3a:64:0a:1a:3d:9e:8e:5b:b4:8e:
                    5a:97:05:80:d8:cf:ef:8b:f1:6f:11:3e:8e:8d:7c:
                    a0:4b:8b:d5:ce:2c:7f:ae:50:11:48:e3:46:d0:4d:
                    91:71:1d:e5:85:d6:db:7f:3a:57:77:b2:9d:2b:c4:
                    6c:be:27:c0:f0:13:2c:ac:28:26:f4:4f:81:00:8c:
                    6c:c3:94:ff:07:61:a8:8f:93:7f:6b:70:27:01:a6:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:77:DF:4E:22:31:FD:60:4D:87:29:47:95:27:F1:AA:33:50:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:e9:45:cc:4d:67:43:5d:7f:a7:bb:ad:b2:03:8e:50:49:8b:
         34:29:b7:58:96:d7:bb:94:9e:f8:78:ab:2e:ac:7d:7d:fc:17:
         d4:07:27:1d:5f:6b:24:45:18:dd:49:0f:fc:6b:66:d7:83:28:
         af:98:8e:26:58:7c:0b:96:f8:07:4f:27:2e:64:2c:22:1a:96:
         b8:61:1f:f5:1c:e4:6a:10:0d:df:a4:38:5d:6f:7d:57:c6:52:
         c2:ee:eb:37:aa:54:0e:65:c3:c1:3c:f1:a4:51:31:6e:d2:71:
         03:4b:b0:52:1e:78:71:d5:f0:a8:5a:87:79:6e:e3:ce:29:40:
         3b:c0:e5:3d:5d:98:34:7d:db:68:38:5a:bd:25:81:ee:02:0b:
         fd:20:1d:8d:b0:8d:9f:20:44:7e:6e:7e:db:c0:95:fa:af:a3:
         46:04:db:a0:dd:d3:f4:f7:92:bd:af:fe:36:4e:8f:6a:b3:97:
         3f:40:06:55:a1:90:8a:32:88:d0:dd:79:70:55:e7:ac:92:46:
         ac:22:0b:05:6e:db:56:21:89:e7:3e:f1:2a:4a:a3:9b:20:70:
         00:b2:33:4c:7d:ef:8b:a5:53:fb:af:cd:c0:1b:80:aa:49:06:
         3f:96:0c:14:c6:24:d7:ab:ad:1e:25:e8:d5:78:2f:53:27:4b:
         59:c5:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:29:29 2024 by rpki-client on console-ams.rpki-client.org