Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa
File:                     dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa (raw, json)
Hash identifier:          c1AdJGevZ4f0ko6JPeIg9L+Q/Vbrf9ZnlVflXMsCIbY=
Subject key identifier:   C7:DA:72:5B:7A:CB:DE:9F:64:76:82:5F:98:3E:83:7C:04:F2:91:46
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838398CA41783F6C00F6E42C580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa
Signing time:             Thu 10 Dec 2020 05:00:00 +0000
ROA not before:           Thu 10 Dec 2020 05:00:00 +0000
ROA not after:            Thu 03 Dec 2026 05:00:00 +0000
asID:                     20115
IP address blocks:        172.221.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:39:8c:a4:17:83:f6:c0:0f:6e:42:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 10 05:00:00 2020 GMT
            Not After : Dec  3 05:00:00 2026 GMT
        Subject: CN=b373e569-63cd-4cfa-ac14-a04511f0700c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:98:46:74:a8:4c:2c:da:0f:a6:aa:bc:88:
                    98:36:08:a7:95:44:09:db:48:ab:df:c2:57:dd:f8:
                    75:61:26:fd:5c:3a:34:b1:28:92:cc:6b:d7:b5:a4:
                    5d:ff:a2:f8:3b:e1:df:31:b1:a3:bb:58:86:76:fb:
                    77:4d:e9:bd:9d:61:5a:12:fc:40:3e:80:10:70:b6:
                    a9:a3:69:d5:86:45:55:ab:25:bb:16:33:89:56:73:
                    e1:7f:e1:9f:19:d6:b7:50:79:3f:60:be:c0:12:9f:
                    52:4a:10:6e:7a:b2:0d:22:9e:96:a9:b3:59:1d:8a:
                    fd:f4:e5:4b:cf:59:37:fe:60:71:54:4c:46:78:6c:
                    53:d8:15:73:50:2a:b8:80:11:11:61:32:8d:dc:8a:
                    27:18:34:10:70:1d:66:28:67:ee:1f:d4:41:a4:b1:
                    1d:8b:6e:32:56:6d:d4:09:bb:08:49:bb:11:df:8f:
                    90:ec:a6:2e:09:5b:0b:c5:e4:0c:f4:92:1f:93:b2:
                    89:c8:f6:1c:25:d7:6c:08:62:61:eb:61:4b:b9:0e:
                    12:11:8f:19:4a:4a:83:06:05:df:a1:8e:96:dc:53:
                    12:a8:6a:0e:27:ca:4e:07:47:52:30:9b:61:5a:7b:
                    d0:1a:ad:d7:ab:b4:b9:ac:68:40:88:3e:f3:79:35:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DA:72:5B:7A:CB:DE:9F:64:76:82:5F:98:3E:83:7C:04:F2:91:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd5b6d5f-6fd5-32ed-bc55-4c3041f57853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.221.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:44:c0:3b:5d:e2:7f:3e:6b:83:7d:e5:60:92:be:7d:a4:78:
         ab:69:d6:0c:51:36:bb:d2:52:0f:8a:60:b6:3e:4f:b2:7f:d6:
         de:74:74:e9:97:40:61:94:ef:30:c1:a7:fa:38:ed:c3:ad:89:
         b7:1d:35:82:c7:4a:e5:87:f4:f8:14:5d:06:af:66:15:e5:78:
         2a:32:18:4e:31:b5:f2:6f:f8:78:69:e0:71:70:5f:ea:f2:14:
         1e:f8:9b:bb:2c:13:9d:10:92:4f:b3:43:b7:a7:5b:fe:fc:b4:
         1d:d4:1d:b1:bc:6e:90:59:23:9f:fe:a4:1b:eb:d0:aa:5d:29:
         1a:f8:8f:8f:db:a2:67:49:d8:9f:e9:95:14:0c:19:49:44:3f:
         cb:f4:27:55:12:ba:80:e0:1d:ce:9c:ca:e2:0c:a0:2b:79:9d:
         90:f1:9f:7a:bd:e8:35:e4:5a:22:9a:bd:cd:e1:aa:3d:8e:ce:
         5f:67:79:9a:ed:e1:b2:45:af:f8:25:72:89:1d:75:26:0d:97:
         87:f5:49:d1:dd:29:62:aa:b4:3d:b4:79:7f:e7:34:36:a3:89:
         bf:36:9f:0d:50:0a:10:75:b5:1f:80:88:fa:e9:e4:c3:c6:01:
         e8:b9:a8:50:65:ef:ec:38:6e:1c:3d:68:ef:b0:c0:37:8d:37:
         d1:c0:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:10 2024 by rpki-client on console-ams.rpki-client.org