Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa
File:                     b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa (raw, json)
Hash identifier:          OVWX+YI5ELKJZQ5pL20NmQmPVO7IxVcFAnJKPh73jAg=
Subject key identifier:   5F:4C:84:85:CC:D5:65:DE:96:78:77:DC:76:E5:42:75:7B:2D:06:D6
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F432858458DD34E9F95C9881661039280
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     26677
IP address blocks:        172.99.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4e:9f:95:c9:88:16:61:03:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=322c4e68-7189-4b4b-851d-1463d03bcb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:60:a4:64:ae:10:37:6b:e8:6f:e3:29:91:
                    e3:6e:12:9b:f0:1b:43:02:01:65:72:5b:d0:76:16:
                    95:48:ca:31:90:dd:12:f6:25:db:43:d2:2b:53:5d:
                    3f:6d:94:ff:a3:76:c4:6b:c5:af:78:95:ed:e2:82:
                    d4:12:d0:09:84:1f:57:1d:ab:87:6b:fc:0f:9d:ac:
                    df:fb:0c:91:25:00:aa:a1:82:a7:05:b9:e8:ae:56:
                    df:88:7b:89:e2:90:4b:95:16:90:30:24:74:d9:51:
                    ec:01:5f:7b:4b:d6:04:4d:96:d2:e2:7a:98:23:cb:
                    f8:da:31:3d:59:7e:b6:fa:ea:8a:6b:53:dc:3f:33:
                    b3:b8:d7:76:bf:b2:2f:da:d2:37:2f:98:9f:42:7d:
                    73:30:43:96:8c:8b:f2:5d:cd:7f:89:1e:bb:96:dc:
                    ff:86:71:57:75:22:e9:08:6c:a3:67:18:95:38:9c:
                    53:7d:b0:be:67:78:5e:4a:3d:13:cd:94:ac:25:ac:
                    e4:79:e5:84:52:93:ac:e3:a3:5f:01:ae:d6:b7:22:
                    2d:b1:2e:31:32:a8:32:4f:8f:49:db:d7:ae:fb:31:
                    91:d6:fa:2c:fd:ba:b6:58:e4:da:b3:91:d0:a7:41:
                    7d:29:ba:59:20:d1:ef:b8:0b:7f:3d:bb:e6:21:e0:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4C:84:85:CC:D5:65:DE:96:78:77:DC:76:E5:42:75:7B:2D:06:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/b2b76aa8-cd4d-34f8-9b4a-9cf2165948ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:8b:85:78:ae:4c:46:7d:5c:94:af:f9:9f:fd:d9:ab:1f:
         38:80:13:a4:58:1f:03:71:39:b4:91:b7:45:ab:a0:89:40:f4:
         6b:4f:bf:35:f5:be:5f:05:54:17:30:83:ae:23:38:89:e9:a9:
         29:33:ec:e8:da:fc:51:f5:6f:79:e9:cb:2b:7f:dd:57:b8:02:
         34:90:8f:eb:c6:06:9d:dd:ca:39:dd:6b:8a:fc:a8:e0:1c:07:
         4b:e5:7c:7f:f0:c8:78:15:0a:8a:28:26:f8:2c:2f:d2:6a:7c:
         15:d4:75:e6:6e:69:63:68:e9:de:aa:0b:ce:f9:86:5a:0d:a6:
         98:b9:4a:79:95:4b:bc:78:f8:3b:b8:8a:76:7c:57:70:3a:63:
         cd:2a:1c:05:c4:c3:7d:09:1d:b6:5e:d0:13:23:b1:4c:77:69:
         47:a7:e6:65:1a:a6:a7:d9:74:9d:36:3c:f8:3c:27:8e:81:f9:
         3c:3c:f6:50:88:d6:98:2b:75:f8:36:d1:c9:c4:86:16:a3:23:
         97:7a:58:f1:c1:33:9b:59:62:0c:4c:b3:9b:e1:a9:8e:32:83:
         a0:1f:57:26:eb:f5:7e:ff:c1:bc:0c:6e:33:b3:7c:78:35:9b:
         91:b6:b1:14:7f:ec:93:f6:e6:7a:e4:da:0d:39:6d:ff:8a:b8:
         5e:49:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:55:49 2024 by rpki-client on console-ams.rpki-client.org