Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa
File:                     5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa (raw, json)
Hash identifier:          n+we9KNrNOLKz1obhPmyL+tJdKNm6bWJOrmTgEYC2Oc=
Subject key identifier:   74:58:56:F1:68:2B:DC:9F:F7:9F:49:C9:72:77:60:81:E0:4E:19:72
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2DF6C80968EB412E44700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        172.223.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:df:6c:80:96:8e:b4:12:e4:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=c9a3977c-e5c4-4aaf-9fbf-a04ea4200b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:0c:70:e7:f2:ae:c3:2c:c8:62:ad:ca:97:
                    e8:63:1c:60:06:f2:a0:a1:3c:59:a1:a4:56:61:af:
                    f1:62:8b:86:ae:23:84:91:e8:75:af:44:26:0a:a5:
                    de:6a:13:07:58:a4:e6:ed:33:60:6c:27:0b:bc:8b:
                    ba:a5:91:92:31:d7:04:ac:0d:d2:56:f6:96:46:8e:
                    05:73:7f:9c:2c:c7:77:1c:45:68:61:b8:b8:7c:79:
                    cb:dc:72:92:e9:d1:87:7d:7b:fc:3e:86:e4:b6:c3:
                    c9:09:43:a8:1b:ae:22:36:80:89:aa:92:d0:83:f3:
                    a8:e6:d6:df:92:6b:be:2c:56:ae:3e:76:7a:57:fb:
                    83:0a:f3:59:54:f6:b2:90:69:1d:b2:64:70:1d:58:
                    12:6a:40:25:58:57:62:a8:f1:29:cc:79:f6:72:49:
                    1d:b2:f9:09:c5:3c:bc:65:05:7d:29:86:3c:4d:c0:
                    8a:39:23:1e:7b:78:8b:d7:50:bf:cf:6d:a1:a1:dc:
                    0f:9f:ac:f7:ff:46:e3:e4:bd:c7:4f:fc:04:8d:a0:
                    43:3e:fa:89:91:8d:94:f1:a2:86:6f:ce:67:33:5e:
                    e4:84:8c:32:27:5d:b7:27:84:53:04:bf:7c:73:f9:
                    37:dc:82:ed:67:d4:4b:0d:3f:ba:4e:5b:ca:25:28:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:56:F1:68:2B:DC:9F:F7:9F:49:C9:72:77:60:81:E0:4E:19:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5ac4bd12-71ae-3569-8e8c-8f844d65b09e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.223.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:55:1f:9c:c5:59:ea:3b:cc:20:26:8f:ed:1a:09:44:3a:a7:
         c3:06:3e:6a:05:f2:81:bf:5d:04:24:81:1b:3c:23:d4:63:49:
         ca:68:ac:82:e1:a2:63:24:d3:a6:a3:8b:39:7c:75:9a:3f:07:
         15:a9:6d:60:7b:f2:26:76:cd:2b:d6:ea:10:71:be:51:c9:8e:
         95:b1:90:a6:73:ad:a0:9b:0f:28:24:8a:65:07:74:d9:9b:ee:
         aa:fd:ab:2d:82:72:78:a4:75:34:70:44:5f:9b:a1:01:03:ce:
         86:5b:a8:e5:21:d0:e3:6b:03:0a:20:c3:e3:2b:c1:c5:90:09:
         13:e8:ed:10:a2:47:9a:e6:d9:ce:b4:c4:a3:cb:e8:5a:9a:27:
         d1:08:24:ee:11:7f:a3:ba:27:22:f9:af:21:b3:96:fa:aa:0a:
         c3:07:90:19:21:6e:28:d6:e2:a5:59:df:4b:73:8d:d1:83:09:
         fd:e5:9d:5e:24:76:59:46:c3:3d:69:02:ff:9a:19:0e:25:d8:
         e0:82:bb:a0:4d:83:ba:a3:ba:72:3c:fb:46:a5:fc:3e:e9:bd:
         12:9f:82:41:6e:37:44:43:4e:ac:da:eb:20:40:1e:ba:8a:a3:
         f7:67:33:b4:cf:74:01:b2:55:4e:cd:03:9e:87:29:63:d0:fb:
         8d:36:05:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:11 2024 by rpki-client on console-fra.rpki-client.org