Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa
File:                     36c93e39-14b8-3624-91c9-ad64c899269f.roa (raw, json)
Hash identifier:          aejCWl7yJV9CkaNVAU5ebWvK8PBBEuBPrsnETv/aXUw=
Subject key identifier:   14:44:9E:AE:CF:7E:47:88:1B:3D:C4:47:E1:85:0A:50:7D:8B:5F:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858455B92E5DA33A10D564931F220
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.225.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:e5:da:33:a1:0d:56:49:31:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=a03624df-cece-4c70-a10f-0f8f3f3249b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:2b:11:8e:b1:e7:d1:48:27:8e:12:eb:fc:
                    54:1e:42:e9:77:b0:ad:24:27:c3:73:88:ff:31:bc:
                    6b:32:5b:c1:2e:07:59:c7:24:f9:80:18:d9:c9:55:
                    83:da:00:76:8b:94:ad:0c:49:0a:99:c4:8d:f3:54:
                    8a:15:5c:e6:4c:8a:24:93:ba:0c:fd:59:17:89:a6:
                    01:9a:0f:d5:9f:33:90:2a:60:7e:59:86:08:0d:e0:
                    2d:62:76:e8:b3:e9:7e:74:ef:a8:8b:8c:c5:ae:7d:
                    d0:eb:5d:99:7e:e0:1c:13:f4:a4:8a:ab:4f:20:31:
                    2f:c0:4c:6a:ac:89:e5:e4:33:ed:dc:b9:95:ac:00:
                    8e:19:47:da:8c:95:83:fd:3f:78:96:de:1e:41:12:
                    71:48:f3:e9:c6:f6:48:f6:bb:02:74:9f:9e:5a:76:
                    09:2e:0c:c2:82:b7:50:c0:68:5e:67:81:0b:d4:10:
                    3d:e4:79:79:c8:9f:a9:fd:08:23:f9:e6:85:ec:07:
                    bb:74:31:aa:da:ae:98:8f:60:8e:fb:45:42:89:00:
                    42:68:14:d3:ea:f0:0d:62:f8:8c:11:df:21:3b:69:
                    ec:85:d1:2b:b2:d2:6e:a7:32:6a:60:cf:2d:a3:84:
                    ba:47:d0:fd:1e:d8:a7:93:e3:4e:9f:3c:19:3d:fa:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:44:9E:AE:CF:7E:47:88:1B:3D:C4:47:E1:85:0A:50:7D:8B:5F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:bc:1a:35:54:19:8d:c8:d4:50:fb:f4:d3:2d:4c:70:f8:
         0c:eb:1a:07:ae:8c:fe:db:e8:09:f1:b2:f1:a1:1e:66:ff:07:
         78:83:c7:27:d7:bc:ea:bc:17:01:ea:13:ca:1f:49:e5:56:08:
         4d:be:a7:c4:2d:b0:7c:6c:5f:fd:0e:aa:39:cb:58:ea:1d:c9:
         02:88:52:5f:ab:70:6f:ea:22:96:86:ca:1e:05:59:9a:17:8e:
         e1:25:dc:ee:b2:41:03:a2:05:81:4d:d7:56:34:27:2d:98:12:
         74:4b:d8:b1:df:66:26:f0:93:81:b2:04:54:40:19:83:11:02:
         fd:b2:88:fb:77:57:9e:a4:57:57:88:be:47:27:67:24:d3:e0:
         36:24:a8:07:83:8f:24:7e:90:14:a7:f6:db:62:10:47:84:7d:
         b7:f9:4e:6b:cc:64:ce:75:26:15:4f:cf:15:2b:f4:20:dd:d9:
         ad:2c:fe:f3:9c:0c:b5:20:b1:d7:4f:ea:d7:fc:46:ea:82:af:
         15:7c:27:e9:08:e0:b6:71:1a:a9:de:0d:82:b1:fd:90:7c:3e:
         a3:6a:df:bd:70:7d:0e:c7:d8:74:47:51:10:6e:e3:8e:ad:4b:
         98:1e:23:07:4a:9e:87:94:1f:e9:57:9d:19:51:a4:d2:47:25:
         70:12:ca:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:43 2024 by rpki-client on console-fra.rpki-client.org