Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa
File:                     265a24b5-20be-36e6-9fdb-248da6ec6b22.roa (raw, json)
Hash identifier:          VMHKfB2DU7zTodOlBcuDI4tw2TJb7dQQBCOYHloStsI=
Subject key identifier:   E8:FC:A4:62:68:95:E4:09:C1:12:D8:16:70:AA:5E:8E:02:05:D5:B0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456F1DB8ABA9B780281B0F8680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.225.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b8:ab:a9:b7:80:28:1b:0f:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=a19d875d-fcf6-4f62-88c7-eb37d0d724af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:5a:60:f3:87:6a:82:21:2d:61:29:42:3e:
                    27:c4:24:1b:a2:c3:e3:65:78:73:a9:80:75:af:3d:
                    bb:70:49:c4:b6:0d:34:b1:4e:22:a0:fc:7a:a7:8d:
                    3b:48:bc:e2:f1:27:6a:b4:5b:11:c9:55:2f:b8:0a:
                    4c:22:ca:7a:49:b3:e8:45:37:cb:e0:b4:4a:d7:08:
                    dd:5a:94:69:63:17:2e:12:0e:6e:85:78:ad:d7:dd:
                    b7:6f:b2:14:ad:82:b4:16:3f:74:a8:59:fd:b5:59:
                    24:7e:40:6b:41:35:55:6f:49:85:67:0d:e4:70:08:
                    b6:a4:e1:c9:eb:82:d4:06:56:44:c1:c0:4c:2b:f1:
                    bf:76:10:aa:58:cd:6d:be:42:d6:fb:88:97:e3:7b:
                    1b:f4:90:c3:a0:8f:3d:6c:9c:d6:ef:e7:13:2f:66:
                    ef:3d:55:5a:b3:54:0a:61:bf:1d:cd:be:5d:f9:75:
                    a5:ca:be:01:5f:38:bd:ee:cf:90:e1:35:46:49:0b:
                    e3:92:09:f7:cf:0f:df:9f:e2:2d:aa:a4:03:25:cf:
                    0a:3e:8a:6b:e7:80:cb:17:a8:af:eb:4b:1a:00:80:
                    cd:b8:f2:90:c9:4a:48:b2:fe:db:2d:67:74:fa:f7:
                    58:29:69:bc:fd:11:26:d9:d9:45:05:8a:06:1a:33:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:A4:62:68:95:E4:09:C1:12:D8:16:70:AA:5E:8E:02:05:D5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7b:35:94:e8:5f:da:29:ac:aa:5f:2f:a6:12:52:46:50:2f:
         34:fd:97:4e:ee:68:cf:5b:05:ac:54:59:28:9a:57:ca:b7:12:
         6a:2c:a9:43:e8:6f:27:9b:08:d1:18:ca:92:01:83:36:7e:b7:
         94:81:bc:2c:cf:e5:0b:13:75:c4:fd:45:98:4d:72:3a:49:64:
         66:4c:2c:04:51:4e:77:92:b6:c2:75:2b:cc:1b:e0:f2:a3:08:
         9e:1f:ac:1a:08:e9:e3:17:fc:e6:3e:51:e0:7b:42:23:80:cc:
         9c:d8:65:94:8b:30:6d:89:b8:e8:d2:19:20:4c:b2:98:b9:83:
         d2:b9:e3:d8:3d:5c:d1:40:52:c4:d4:35:64:2e:5a:5c:7f:dd:
         ed:57:1b:15:ec:f3:f7:9e:3a:95:6d:88:5f:6b:db:6d:13:46:
         9c:63:f3:59:27:16:27:1e:47:fc:c4:a3:e4:41:67:93:c8:cc:
         08:6a:86:0d:da:7d:83:2f:9a:cc:9f:54:7d:4f:95:aa:98:a5:
         ff:eb:c3:6a:d6:23:7a:e7:7f:c0:3a:d0:5c:e6:fa:73:b9:7c:
         ab:98:77:97:ad:85:87:4e:84:81:57:c7:f2:97:78:1a:8d:72:
         e7:1a:93:54:ac:e2:0c:27:e3:22:ef:09:72:d8:35:8c:4e:0b:
         d6:6d:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:41 2024 by rpki-client on console-fra.rpki-client.org