Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00520805-89b1-347d-ad08-75cd995fbabe.roa
File:                     00520805-89b1-347d-ad08-75cd995fbabe.roa (raw, json)
Hash identifier:          IqxRMWch4SWMZMkm65S6CMQVnydUAG3TYDDbjG8VoiA=
Subject key identifier:   CC:EF:36:A3:4C:E3:B8:71:52:CE:5A:F1:DD:FF:CF:1E:1A:66:B6:FA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858472F308EEA7998EDE9F57320C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00520805-89b1-347d-ad08-75cd995fbabe.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     36183
IP address blocks:        172.226.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:8e:ea:79:98:ed:e9:f5:73:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=f7f67e5d-8ccf-4022-8360-462482109644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:41:8a:e4:af:8e:a3:a5:de:22:0e:a4:30:
                    64:e6:5c:8f:8f:8f:3e:62:e1:18:73:ba:24:7e:3d:
                    cf:fd:95:53:60:b8:e6:79:42:8f:02:87:92:ea:4e:
                    94:94:80:de:55:3f:c6:3a:b6:d1:33:06:6c:e9:72:
                    75:9a:27:4c:f3:b2:36:84:e2:07:2e:e9:40:6a:39:
                    5f:01:08:d2:23:02:5b:5b:3a:87:dc:65:2a:a6:98:
                    4f:83:2d:ec:1b:2d:82:11:3b:25:45:ec:42:86:1a:
                    51:fd:25:b9:1d:46:11:0d:d1:91:d7:6a:f4:8c:28:
                    74:5a:01:c8:01:62:e8:3f:ab:31:20:06:13:f8:16:
                    86:0a:a0:3e:bb:e8:7f:54:74:31:4e:f2:83:9a:d9:
                    af:c2:b5:e6:db:e4:c5:d2:8b:03:64:3d:32:08:0e:
                    3a:1e:82:6b:73:c7:f8:3a:b1:16:96:d8:7a:b1:12:
                    41:88:54:1a:93:ce:85:cd:89:9e:19:19:07:b3:77:
                    09:5e:ed:33:b6:e4:06:b1:05:04:4a:06:9d:83:84:
                    6b:d6:bc:d2:59:ec:09:f4:5d:0d:e9:9e:ad:56:81:
                    7d:27:55:d1:8d:57:9e:1d:90:65:4a:70:96:af:f9:
                    44:34:2b:fb:88:63:bc:50:a6:8f:fd:8e:31:b9:9b:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EF:36:A3:4C:E3:B8:71:52:CE:5A:F1:DD:FF:CF:1E:1A:66:B6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00520805-89b1-347d-ad08-75cd995fbabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:1b:ec:67:26:cb:d8:93:ef:82:c5:d0:48:08:9d:e0:4e:
         29:45:c7:e4:48:99:03:57:22:66:ce:53:43:07:a7:51:2b:d3:
         dd:f2:06:15:b2:6c:ca:78:65:15:dd:62:df:27:4b:58:25:83:
         ca:a5:8c:69:db:4f:0b:88:3b:db:28:ba:c4:e3:4e:94:78:3a:
         71:fc:02:f7:1f:67:b9:40:e1:c2:43:fa:fc:22:11:16:8c:48:
         9b:2a:1c:2b:a2:c5:4a:e3:15:68:1c:b8:3f:da:8c:b0:7a:ba:
         21:16:dc:ea:7b:5b:44:2e:a0:c5:bb:37:a8:66:14:d1:28:c2:
         d3:b8:fb:1b:ee:99:d9:36:b9:93:dc:87:87:3c:93:5f:d9:c4:
         46:67:9d:f7:86:c7:fa:26:04:e5:e0:3d:77:f3:70:97:05:5c:
         93:7d:e0:f7:8c:8c:66:76:43:71:e9:14:df:31:54:6c:b2:8d:
         e8:5f:13:7f:38:99:05:d9:c1:6d:77:6e:22:d1:a6:9c:09:c7:
         ba:00:fa:6c:1d:9d:81:c1:f0:0e:94:c3:74:54:a2:9a:ee:7d:
         30:45:3f:3d:7a:b2:b8:99:d8:76:32:64:d8:96:39:81:92:fb:
         6a:52:e2:f6:83:74:22:58:09:a8:5e:46:6d:59:11:1d:2f:a5:
         1b:a1:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:29:59 2024 by rpki-client on console-ams.rpki-client.org