Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/32d86251-aa9d-304e-834f-eaa29f578995.roa
File:                     32d86251-aa9d-304e-834f-eaa29f578995.roa (raw, json)
Hash identifier:          5p4MSwVnry90BAKUqDbFQUzcs50EnT2Rvw/zUV6rht0=
Subject key identifier:   04:68:CD:E2:0E:A1:DC:5F:79:3D:56:1D:3B:91:2C:92:35:49:81:7A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838398CA59638FDDB8942FFE300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/32d86251-aa9d-304e-834f-eaa29f578995.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        172.222.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:8c:a5:96:38:fd:db:89:42:ff:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=d7e4357f-74ff-4042-8f7e-bebf7da473e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:53:7c:3f:c8:e5:48:77:1d:67:56:ff:a8:
                    d2:a2:30:a1:73:4e:12:e9:d0:4d:01:ed:f5:1a:d9:
                    e6:34:54:79:eb:c8:41:72:05:05:9e:0f:52:90:10:
                    ae:15:3d:dd:96:d0:39:26:ec:11:d6:b8:58:83:41:
                    30:64:f1:51:e9:43:38:3a:f0:de:e6:31:69:df:c8:
                    cc:93:37:9a:7f:5e:7d:c6:42:1d:cf:2d:99:0a:b7:
                    06:1e:0b:f7:6a:89:10:58:50:4d:ad:40:16:75:9a:
                    d8:b7:63:5b:ac:be:e2:fa:ae:ff:5d:2f:2c:66:3d:
                    be:3d:43:fe:8b:2a:e6:9e:02:c7:cb:94:9a:d0:f9:
                    9a:09:cc:f0:91:30:c0:0e:46:12:f4:8a:4a:10:ba:
                    e0:85:41:99:4b:f4:f8:18:c2:c8:aa:5c:24:64:dc:
                    33:57:24:27:e0:df:1f:4e:02:9a:83:27:44:76:8a:
                    7e:32:1d:55:3a:c0:d8:63:99:34:b4:e9:78:9f:11:
                    85:02:7f:b4:d5:af:2e:3f:95:6c:b3:c6:62:55:b6:
                    9d:fc:d0:ef:83:ed:07:7a:ab:f2:0f:35:8b:64:04:
                    cf:46:8c:40:b6:e3:39:02:59:f0:ee:58:7b:ed:c6:
                    7f:ca:60:fe:5f:f4:09:0d:ab:1e:7c:7a:36:9f:7d:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:68:CD:E2:0E:A1:DC:5F:79:3D:56:1D:3B:91:2C:92:35:49:81:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/32d86251-aa9d-304e-834f-eaa29f578995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.222.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:69:53:4b:50:b6:58:fe:25:1c:95:5b:27:14:70:e8:64:
         c3:48:a5:1c:47:3a:21:bd:4f:e9:df:2e:3a:3a:97:3c:ce:79:
         c7:78:4a:5f:e2:04:cc:c0:cc:2f:23:9e:59:5a:65:f9:1f:5d:
         a6:d0:d1:a0:26:c2:ef:38:4b:d0:94:1a:af:5e:9f:f3:91:65:
         4a:c1:1b:f7:de:fd:05:d5:99:f0:1a:58:a0:13:f8:3d:cb:e7:
         a5:35:b9:21:e7:2d:3f:cf:94:ab:93:ed:7b:e4:c5:35:85:db:
         60:2a:0b:f1:4b:f1:ac:7f:bd:14:0a:b0:7f:8d:91:89:1d:ed:
         9a:e0:a3:aa:ad:93:b8:ea:bf:8c:aa:32:9b:2b:3a:c5:72:33:
         84:d9:25:38:20:0a:85:39:82:68:ce:d4:6a:51:39:57:99:f3:
         c0:0a:21:ea:98:da:aa:37:44:df:24:bd:cb:39:2b:2e:f0:49:
         85:0b:18:9d:f0:a2:39:29:6e:59:50:d8:21:95:ea:e0:64:a1:
         49:68:73:bf:52:2e:5c:0d:92:56:85:a7:93:66:b4:ce:90:68:
         84:ba:8b:bc:5a:04:77:9f:37:f7:9c:67:08:84:6b:a6:61:5b:
         2e:e5:e0:3b:7b:d6:bb:76:a4:38:99:1e:43:ec:1b:0e:12:af:
         d6:b8:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:05:49 2024 by rpki-client on console-ams.rpki-client.org