Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ce8515-42f9-3b16-8b59-10a6b37df2c7.roa
File:                     99ce8515-42f9-3b16-8b59-10a6b37df2c7.roa (raw, json)
Hash identifier:          0B4UHi5B29gMqgbtYMnsCgjlDCLVpNfWK1k57wym3l4=
Subject key identifier:   8D:F8:A1:34:9E:57:6B:52:CE:F6:0C:B0:EE:34:E2:E5:53:97:0B:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858455E5D9985954C523D6CBE2DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ce8515-42f9-3b16-8b59-10a6b37df2c7.roa
Signing time:             Fri 29 Mar 2024 13:00:37 +0000
ROA not before:           Fri 29 Mar 2024 13:00:37 +0000
ROA not after:            Thu 27 Jun 2024 13:00:37 +0000
asID:                     36183
IP address blocks:        172.225.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:5d:99:85:95:4c:52:3d:6c:be:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 29 13:00:37 2024 GMT
            Not After : Jun 27 13:00:37 2024 GMT
        Subject: CN=724520e7-c06e-49be-b8c1-3545926fdd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:b8:6b:cb:99:1c:9b:e1:0b:80:9f:14:62:
                    98:20:33:3a:6f:96:85:3f:77:eb:3b:3b:1d:2e:70:
                    8f:81:55:41:93:20:06:4f:a1:6b:23:4f:89:a3:15:
                    ea:eb:aa:dd:7e:fd:85:ac:4e:f5:a7:56:f6:2f:9a:
                    fc:15:5b:05:5e:19:1a:3c:42:b6:22:c6:41:8d:25:
                    85:b6:ff:53:47:d9:9a:d0:89:9b:e8:e7:3e:8e:f7:
                    25:3f:59:79:34:0b:05:ac:9b:df:04:22:81:53:1c:
                    11:05:5c:5d:05:dc:f5:40:3d:2c:c2:94:fc:17:85:
                    ad:ef:ea:85:a7:57:d1:ea:83:a3:22:44:cb:80:9f:
                    ac:b9:a2:99:d3:3d:18:86:d1:43:93:19:00:b4:b1:
                    5d:56:41:fe:a5:7f:00:41:0b:43:3d:92:f6:7b:b6:
                    97:23:17:61:d5:26:9a:d4:1b:34:30:67:66:d4:da:
                    ab:5d:a0:68:25:28:14:7e:54:c2:40:3d:d5:7c:db:
                    a8:d3:0d:a6:f2:f3:95:db:d9:08:c9:c8:23:f7:7b:
                    00:03:2b:06:d9:fd:cc:27:93:ac:50:2f:40:ba:6c:
                    67:98:13:c3:4a:4b:14:71:f9:e2:4d:33:1b:75:bf:
                    7c:fc:a0:29:0a:a8:c5:b3:93:94:7c:8d:83:5e:9c:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:A1:34:9E:57:6B:52:CE:F6:0C:B0:EE:34:E2:E5:53:97:0B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ce8515-42f9-3b16-8b59-10a6b37df2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ad:6f:a0:c6:e7:bc:23:2e:c2:51:a0:73:55:a0:2f:7f:19:
         88:a4:40:76:6d:1d:74:49:7d:a0:61:4c:07:d7:d5:b8:f6:5d:
         5c:d6:cc:7e:70:1f:cd:84:03:f7:9a:65:bb:8e:e7:56:cb:6c:
         68:eb:70:fd:ee:ee:fc:56:cd:58:b2:ae:9a:1a:52:0d:da:52:
         1f:89:24:f9:22:5d:7e:aa:19:c6:41:30:c3:05:89:3f:4d:ac:
         14:9d:17:45:08:69:db:db:ca:16:20:b1:dd:2f:eb:f7:cb:14:
         90:f8:c0:38:0a:f0:af:27:3f:12:5b:9b:1b:c6:6f:a9:85:db:
         9f:cd:ed:89:f0:bd:9c:d7:74:86:a7:0f:0a:e5:15:a6:51:bf:
         a8:b3:f8:c4:e9:7c:8e:35:40:1c:f6:6f:94:9a:94:bf:ec:60:
         f3:54:2a:f9:d0:7c:60:3a:ee:86:53:5f:45:e4:2b:7b:e3:5e:
         7f:54:99:ad:37:22:45:bd:ef:cd:b0:bb:b9:ac:a6:d6:3a:79:
         a1:64:cf:76:31:c7:f3:27:b9:68:f2:89:02:b7:d3:17:94:86:
         b7:d8:80:ec:53:5f:86:48:ee:6b:a7:6c:a0:d1:a4:9e:1b:bf:
         23:7e:e1:30:7d:cf:b3:5c:6c:2a:34:21:79:83:5d:c6:2b:e0:
         1b:17:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:35 2024 by rpki-client on console-ams.rpki-client.org