Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/066251a1-4125-388c-9196-413c47941e38.roa
File:                     066251a1-4125-388c-9196-413c47941e38.roa (raw, json)
Hash identifier:          dmJyeAEQl5oubF5nn1oH+EzPMuqUq9S1ZHTdVA/IzjM=
Subject key identifier:   B0:CB:6E:C1:F8:E1:BF:96:5A:19:36:4C:AA:D7:21:FF:90:FE:18:CC
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F43285846A97A3439A394733C544EA76D
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/066251a1-4125-388c-9196-413c47941e38.roa
Signing time:             Fri 26 Jul 2024 03:30:51 +0000
ROA not before:           Fri 26 Jul 2024 03:30:51 +0000
ROA not after:            Thu 24 Oct 2024 03:30:51 +0000
asID:                     8100
IP address blocks:        172.99.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a9:7a:34:39:a3:94:73:3c:54:4e:a7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Jul 26 03:30:51 2024 GMT
            Not After : Oct 24 03:30:51 2024 GMT
        Subject: CN=e1a5e55f-33e8-41cb-b894-80136b374b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:94:ba:a3:1f:f6:0d:cf:5b:aa:7b:37:e6:
                    ac:4d:11:8f:12:04:b1:ab:7c:02:65:ff:55:3a:8b:
                    fd:cd:f3:bc:bd:0e:cc:eb:7d:6f:c5:17:9a:92:3e:
                    4c:59:4d:c5:c8:30:f2:fd:92:a9:53:ab:50:2a:e7:
                    27:73:fb:58:01:3f:e1:35:4b:09:31:c4:0d:2a:44:
                    62:d9:f2:fa:b2:2c:0e:e1:d2:a9:61:f7:2f:4f:04:
                    2e:29:19:d1:a4:95:76:7c:a5:67:d2:23:b7:a0:61:
                    c7:cc:45:d1:0c:f2:1e:3f:2c:8b:63:c8:13:bc:5b:
                    5c:02:fd:b8:ac:fe:97:23:5e:11:d7:e9:46:dc:2a:
                    14:ec:10:8b:1e:8b:9d:5f:9f:0a:06:ca:ce:a9:3a:
                    58:43:b5:59:00:35:8e:e9:e0:b4:ba:88:2d:3b:75:
                    06:19:36:6a:3c:8e:84:57:57:00:5c:7a:b1:b5:43:
                    20:b8:34:e4:de:17:78:36:9e:e6:23:bb:1a:8a:df:
                    cb:81:e5:f9:f8:85:84:3d:eb:8c:54:e7:2d:e2:ee:
                    e8:a6:fc:20:45:65:f5:a8:59:88:21:a2:e9:1f:1c:
                    32:74:66:1c:63:c2:b4:29:a2:36:1b:b0:bc:98:43:
                    35:7c:68:0e:a9:68:44:d1:a7:6a:1a:0a:3d:89:2e:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CB:6E:C1:F8:E1:BF:96:5A:19:36:4C:AA:D7:21:FF:90:FE:18:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/066251a1-4125-388c-9196-413c47941e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f2:8d:dd:df:ae:09:b2:64:f7:3a:06:fa:5d:c8:21:99:28:
         63:d8:20:37:78:c6:cd:76:c5:84:8e:94:9e:68:79:99:d6:74:
         12:a6:77:8a:22:df:14:e3:7d:11:a6:7d:57:c6:b2:6b:53:03:
         aa:9c:28:45:81:28:65:03:36:f6:45:86:25:c1:bb:6a:bf:c0:
         d9:aa:ef:57:cc:20:65:af:17:9b:c7:7b:f2:08:12:bd:46:6d:
         73:3e:c8:e5:85:20:af:70:a5:aa:64:0a:6a:42:3b:72:5b:ca:
         ef:23:aa:af:73:06:59:ec:51:9b:41:98:d9:35:2d:a5:5c:c3:
         b6:8f:27:e4:4c:e0:d2:cb:ef:fc:b5:3a:53:7d:3f:cf:e0:07:
         41:6a:a9:e1:52:21:89:84:85:e6:8a:8e:5e:32:51:88:19:b9:
         1a:43:2a:68:e2:9e:2e:8c:34:74:24:0d:02:bb:69:d0:24:28:
         22:14:10:23:89:ed:c2:c6:3b:a6:18:5f:08:f7:7d:65:7a:75:
         5c:a2:07:9e:8f:a4:63:28:4b:75:52:9e:a1:bf:e6:f2:a4:5a:
         12:e0:67:fe:f0:42:2a:d7:8f:43:be:ff:6e:a3:50:c8:33:8f:
         76:81:32:d0:d1:39:fd:63:3f:4d:a3:57:66:2b:63:21:17:52:
         79:e9:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 16:38:04 2024 by rpki-client on console-ams.rpki-client.org