Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/384a5eb8-f46a-32a0-9813-9b7f521e1e42.roa
File:                     384a5eb8-f46a-32a0-9813-9b7f521e1e42.roa (raw, json)
Hash identifier:          XV00VIuBxT4tbXxuTxlT00nqL1h1m47AEBZaEGcnSzA=
Subject key identifier:   E1:94:63:3C:13:F8:40:9F:14:20:C1:8F:33:3B:2D:60:EC:23:71:6C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838398CAA489BDAEC7237CD3480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/384a5eb8-f46a-32a0-9813-9b7f521e1e42.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        172.222.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:8c:aa:48:9b:da:ec:72:37:cd:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=924d054a-c8f8-4510-9553-efe5927db5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:b6:22:73:bc:86:70:e2:ba:96:e5:8c:0a:
                    65:b5:f1:ac:b6:a7:2c:40:8c:2c:98:db:11:81:1b:
                    23:3a:9d:0e:6f:20:04:9d:a6:27:f4:7a:8a:76:6a:
                    7b:c7:a3:92:e2:86:b6:20:11:c5:10:33:41:f5:1e:
                    9b:9e:1c:40:1b:ec:5e:09:74:84:b2:4f:08:07:54:
                    d4:15:6e:00:74:b4:9e:d7:ee:e7:82:b1:98:c8:59:
                    35:5c:12:d7:cd:d6:79:a3:21:a1:cc:32:6f:df:40:
                    3d:0f:b8:a4:cb:ef:7f:c4:aa:f1:1d:e2:bb:8c:eb:
                    a1:ee:b7:ff:68:0f:af:29:aa:70:3d:47:ba:18:d6:
                    ce:f8:99:c8:43:9a:a8:40:f9:9a:38:e6:ce:59:e3:
                    d7:26:7d:b2:1c:01:a4:9a:32:d9:3b:95:1c:6c:b5:
                    41:ad:ed:a2:49:49:eb:80:cc:de:d1:fe:c5:14:fa:
                    55:a1:c5:76:bf:03:bb:7d:32:75:e5:16:13:ca:98:
                    23:72:e4:94:96:21:d1:01:c5:fb:02:78:f4:ee:32:
                    e1:f0:ab:5d:3c:9e:90:8a:85:0b:ed:9f:c0:23:ff:
                    78:c8:8b:e5:7e:8d:46:8c:60:30:e6:ad:ce:20:a6:
                    fb:5b:61:c0:f3:a3:a8:37:05:5b:92:a8:28:9d:38:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:94:63:3C:13:F8:40:9F:14:20:C1:8F:33:3B:2D:60:EC:23:71:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/384a5eb8-f46a-32a0-9813-9b7f521e1e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.222.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:20:17:43:f5:b4:c6:38:d5:45:5a:e9:19:09:a0:3f:2c:
         de:30:aa:ab:70:46:c3:5c:a4:57:ad:49:ee:77:5f:00:89:be:
         a7:a0:8b:b8:14:d4:77:3a:99:30:04:8c:d9:77:8a:ad:22:9f:
         61:f2:e1:7a:6b:ff:5f:26:2a:ca:cd:47:d6:79:bc:a9:ae:2e:
         05:ed:e4:24:2e:e2:51:d1:15:33:63:0c:1d:ec:48:97:b7:e6:
         40:27:09:7d:d2:34:e5:e6:a8:f1:a3:fc:e3:c8:4c:59:6c:2a:
         3b:f7:01:8a:7a:7b:83:fb:dd:25:e4:81:cc:66:29:d1:29:a1:
         84:f2:aa:6d:74:fa:35:c3:11:54:7d:55:6b:11:ab:d0:b2:06:
         33:69:e5:8f:2b:ec:dc:44:30:78:f1:e1:55:1d:e0:56:62:3b:
         f1:6e:4b:47:a5:01:39:fe:8a:95:5e:5e:30:34:bd:de:b2:12:
         77:80:00:54:49:1d:87:e7:a6:5b:b6:dd:5e:35:44:c6:75:b4:
         8d:40:b2:58:eb:76:2a:d5:51:08:5c:b0:7b:56:50:6a:58:50:
         8f:16:bb:08:e6:d5:bf:3d:52:ef:1c:2f:e7:8d:7a:80:1f:3c:
         4e:c0:92:0d:36:08:ec:60:c8:3c:26:19:92:6b:94:ca:12:6d:
         c6:80:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:10 2024 by rpki-client on console-fra.rpki-client.org