Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa
File:                     576102ce-aaa4-376a-8685-00b6e6cb9e91.roa (raw, json)
Hash identifier:          dx5JO0avFB7geV/yDmVxy0M9bABHT0Np+N5BEmdaI24=
Subject key identifier:   1A:A8:38:CF:4A:64:D5:3D:CC:51:2F:17:6D:5D:8E:A5:EF:4F:10:82
Certificate issuer:       /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial:       010D0C9F432858455CF82E5227D0683CA2B52800
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa
Signing time:             Fri 29 Mar 2024 01:00:26 +0000
ROA not before:           Fri 29 Mar 2024 01:00:26 +0000
ROA not after:            Thu 27 Jun 2024 01:00:26 +0000
asID:                     393950
IP address blocks:        172.98.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:f8:2e:52:27:d0:68:3c:a2:b5:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
        Validity
            Not Before: Mar 29 01:00:26 2024 GMT
            Not After : Jun 27 01:00:26 2024 GMT
        Subject: CN=79ad1608-b1d4-427f-92c9-d241516f1655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:75:b7:1f:30:d3:ca:7a:f1:00:b1:08:bf:
                    be:ef:b9:02:33:f5:1d:04:8c:a8:18:38:71:5e:23:
                    22:4f:d8:72:ac:91:91:bb:eb:4f:a6:c3:f3:79:ed:
                    75:6d:3c:b3:92:2a:8e:cb:3a:ba:15:50:d2:90:d6:
                    76:e4:ac:20:7b:13:2e:7d:20:38:1c:20:92:51:31:
                    cd:9f:1d:cd:c8:85:c2:39:b5:da:3b:bc:6f:de:0e:
                    9a:76:66:5c:70:97:b4:32:c0:db:0e:44:d5:93:86:
                    55:e3:0d:b4:ed:21:e9:a1:d4:ab:3d:cf:22:c3:41:
                    27:e3:c1:47:c3:58:eb:2f:33:49:cf:fb:8e:c9:46:
                    b6:a7:09:97:c7:c7:32:bf:ea:90:f1:00:ae:e5:41:
                    1a:22:63:98:fe:b6:56:82:0b:60:1d:58:71:30:0e:
                    90:44:a3:40:4a:68:1a:d6:9f:4c:76:53:83:ef:9c:
                    16:da:93:7e:fa:07:5c:7b:38:bf:03:52:c4:bb:29:
                    41:e0:e3:6f:fc:90:2a:3a:18:6a:ac:57:eb:fb:71:
                    ba:0b:04:55:28:b4:35:dc:48:2c:f8:85:79:73:f7:
                    26:f1:5e:13:24:dd:ac:43:3e:f9:28:5d:98:83:bc:
                    59:5e:bb:e9:9a:d1:6a:25:06:9c:b2:db:96:eb:6f:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A8:38:CF:4A:64:D5:3D:CC:51:2F:17:6D:5D:8E:A5:EF:4F:10:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl

            X509v3 Authority Key Identifier:
                keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:bd:b0:3c:a7:12:62:c0:3f:2d:db:1b:0f:a2:e5:21:a1:
         42:ee:f3:f4:8d:84:1b:c4:0a:07:11:c3:19:43:d4:00:5d:0a:
         d4:0f:75:f0:b2:8f:13:ae:b4:e4:b1:d3:43:5e:5e:ec:50:e2:
         6a:27:38:70:11:8f:f5:a0:8b:df:27:28:2b:ef:86:56:a7:8b:
         c1:a5:09:d8:43:8b:45:eb:39:1d:88:99:dd:6e:62:18:ea:80:
         d3:9f:6f:71:99:ba:f6:fe:8a:c4:a7:53:fb:e5:5b:f1:3d:68:
         f3:f9:31:79:f8:f7:32:fc:fd:3c:c6:ea:d5:83:aa:6c:b8:e1:
         6a:d8:ab:ca:67:eb:e5:91:2d:85:86:cd:b5:e0:8e:d8:a3:67:
         97:8d:55:59:ea:13:71:56:60:5d:f1:db:12:05:38:0b:a8:9a:
         a0:4c:5a:da:0a:84:6f:41:6c:6d:36:68:08:dd:84:6f:4e:b5:
         0c:4e:f4:f7:4f:4b:ee:d8:35:65:88:62:8c:ab:c9:22:74:37:
         10:7f:9f:6e:92:48:5d:9d:2d:cd:9f:5e:87:61:5a:34:c1:5e:
         33:b1:a5:37:fe:04:6c:7b:07:2d:1d:31:09:bd:f5:77:90:98:
         51:2c:76:b2:bb:cb:d6:59:6f:08:36:f4:a9:d6:44:74:cb:b4:
         9c:26:69:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:50:11 2024 by rpki-client on console-fra.rpki-client.org