Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
File:                     5dff6933-d238-3c65-b75c-6e090cc092e5.roa (raw, json)
Hash identifier:          E6JIL6nJJ6CUNKa6x1CVmXNvVCBKPubskJmmk5J9c/U=
Subject key identifier:   69:8B:4C:DF:50:38:C5:CA:C2:59:23:43:EB:15:52:7C:83:9D:43:77
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FF8F6E112446E87F0680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        172.222.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:ff:8f:6e:11:24:46:e8:7f:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=a9b8d543-ed7c-48b6-89b2-7ae7eb4b7464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:11:2a:9b:6a:c0:2d:1f:c7:2c:94:ec:3b:
                    94:e1:3f:4e:ce:37:bf:d0:55:72:45:ec:0d:15:22:
                    ba:47:e4:c3:33:e1:83:f1:79:7c:c9:ca:d3:a5:27:
                    c4:b3:ca:9a:94:1d:f0:3a:e5:d6:69:dd:c7:64:1d:
                    77:b6:fc:83:44:63:aa:47:c5:3b:95:54:e7:6f:a7:
                    aa:53:c5:49:2a:bd:eb:a6:bb:7b:ee:18:8f:f6:a8:
                    28:7e:2c:4b:b0:27:77:ed:cf:9b:1a:64:f7:79:17:
                    c1:12:b5:3a:80:9b:6f:a0:eb:06:8c:ba:74:ef:be:
                    59:6a:0f:ba:ec:48:ab:9a:d3:2e:6a:bb:2c:f8:4a:
                    3d:82:78:18:cf:96:ce:31:d0:b1:20:64:44:dc:ac:
                    86:10:8b:e5:68:8d:84:78:13:2d:dc:b2:23:98:a4:
                    73:09:f4:b0:05:4f:00:27:89:10:e5:ce:27:a2:b3:
                    7d:9b:eb:25:89:61:53:a7:6d:63:f0:15:96:bb:3d:
                    5c:2b:ed:00:66:e8:01:96:a6:df:5e:37:e4:76:7f:
                    47:66:cb:25:d4:3a:e9:59:ac:69:56:67:9b:c1:02:
                    c7:2d:a3:e8:02:80:af:b9:0f:ce:61:ed:93:49:7e:
                    6e:2d:fb:42:d2:83:b1:27:32:84:55:e8:3f:13:24:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:4C:DF:50:38:C5:CA:C2:59:23:43:EB:15:52:7C:83:9D:43:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.222.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bd:06:55:13:ed:b1:d0:28:0b:56:0a:52:d7:98:58:2a:06:
         9c:28:89:36:2e:02:08:34:0b:90:a6:d1:62:79:f3:8a:f6:f5:
         ab:20:0a:ca:c5:91:5b:30:88:1c:11:ca:ef:76:fc:2c:9b:6e:
         26:51:7a:5c:cf:cc:e5:d2:b7:33:14:73:38:aa:71:4c:8f:0f:
         9d:03:73:7a:29:56:a3:c0:2c:69:56:7c:64:43:ee:d7:67:db:
         dd:67:f4:29:f6:2a:01:ab:14:d6:1f:44:53:76:fb:a1:39:95:
         0b:48:d9:93:09:51:f6:16:9a:1b:74:56:ea:ee:1e:17:57:bf:
         89:82:9b:0e:6f:76:cb:46:42:e5:78:77:e4:c4:1c:4d:7e:65:
         2d:b3:7e:0f:df:36:08:29:a5:fa:ae:5f:09:97:bb:06:fe:0f:
         73:7f:29:33:4e:db:01:fc:ea:48:94:fc:76:ac:82:86:51:f7:
         95:8d:ff:05:15:e8:a5:ab:d7:d3:12:ed:04:03:b8:e3:d2:ae:
         61:c6:84:94:85:8c:30:b0:ec:e6:ac:89:ea:d7:f9:47:78:0b:
         69:77:35:00:46:0c:10:1c:0a:df:8d:1e:92:ad:54:dd:0d:10:
         2a:b5:92:aa:15:25:9b:f6:22:3a:fb:ec:e7:8f:34:03:c5:af:
         b9:83:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:34:11 2024 by rpki-client on console-fra.rpki-client.org