Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa
File:                     11d14097-e30f-38c3-8223-9ffc2a986371.roa (raw, json)
Hash identifier:          ZbUouYQqQeiVXUgG8IaJQk+F7J5BK6fkAmBa5rnUUyA=
Subject key identifier:   EE:75:06:04:4B:70:05:22:48:0E:87:21:F0:DA:D1:11:78:87:C5:02
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F43285845BA7E2BA88AFE5B098BAA2880
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     33436
IP address blocks:        172.82.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2b:a8:8a:fe:5b:09:8b:aa:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=64f5244e-0b16-4894-a3d9-bc31f575bea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:14:f8:0a:74:6b:85:09:20:e8:f0:93:8f:
                    a9:94:3b:83:c2:f0:ca:5b:01:50:cc:5c:f2:a3:4f:
                    b1:34:50:c1:64:53:44:d7:db:37:c9:23:11:8e:2c:
                    98:69:36:b9:c0:59:35:56:80:d1:ec:e0:08:1c:64:
                    dc:ef:1f:48:5a:c2:84:bf:ff:66:c0:c6:2d:42:c5:
                    26:2c:57:b6:d4:6a:29:27:fc:0a:83:83:46:38:91:
                    e5:67:8b:2a:d5:41:de:f5:00:26:6a:1b:b5:cb:a9:
                    c3:83:fd:55:65:4f:67:2c:96:e1:ea:c7:c3:0b:6d:
                    9a:63:cc:ba:24:e0:86:41:87:69:f1:91:79:ff:db:
                    6f:d2:be:51:7d:3f:e7:e4:ca:05:11:13:56:2d:a9:
                    15:4e:36:1f:8f:2a:cc:ef:89:12:b5:ba:7e:b2:ab:
                    f8:a7:28:da:1d:73:df:ff:08:b8:1f:f1:f8:4b:ca:
                    6f:40:f5:52:66:df:aa:b8:6a:c9:fe:13:0b:80:4f:
                    03:06:4d:55:ac:f6:e4:16:96:82:ff:a5:75:73:c1:
                    6a:a5:5e:c5:6a:65:c1:e6:ea:75:eb:00:5e:07:6c:
                    df:db:17:8e:2a:10:38:ef:b5:af:fe:7f:9d:a6:10:
                    f4:d0:39:fa:3f:29:e2:0d:99:90:40:23:62:de:fe:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:06:04:4B:70:05:22:48:0E:87:21:F0:DA:D1:11:78:87:C5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/11d14097-e30f-38c3-8223-9ffc2a986371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:25:f3:e1:ac:9d:3d:27:67:95:ae:13:90:59:55:63:c5:53:
         bb:55:da:ab:0a:d2:f5:0d:4b:9f:cf:9e:ee:eb:d1:ab:6f:a3:
         bd:99:43:ed:36:c6:2d:bc:67:2a:2a:e0:07:91:2e:fa:52:4a:
         76:a3:18:4c:94:ea:b1:fc:c4:43:e3:e1:c0:40:52:34:28:18:
         f2:c5:62:2d:c5:eb:77:aa:0a:45:c7:09:96:b1:be:69:ae:8a:
         45:45:1b:a9:08:b7:5d:05:4f:7b:a5:94:cd:b7:3e:ab:69:d2:
         34:93:8a:38:88:bb:6f:d0:5c:86:7e:ef:c6:b1:5e:b0:e4:9c:
         5e:b5:07:d8:4b:4a:c1:9d:0a:cc:f5:9f:53:fa:98:1e:7b:55:
         2a:f3:e3:ec:16:af:d5:38:26:25:98:a7:64:55:ab:b9:3b:a4:
         71:33:79:4f:13:a3:6a:4c:2c:f7:cc:42:15:de:82:a4:16:8c:
         5a:e4:28:5c:b0:ea:b4:10:6d:71:52:c2:d6:38:67:73:15:6a:
         33:69:ce:76:a1:ce:7c:24:83:27:3a:83:b6:e6:22:2c:ec:8f:
         12:fb:2d:45:65:40:9b:f1:96:b3:47:6c:f8:5c:4b:99:3c:96:
         8c:b8:ba:ac:22:36:b2:53:a8:a6:ea:71:f9:ed:d0:c7:d1:3c:
         de:55:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:02:37 2024 by rpki-client on console-fra.rpki-client.org