Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a23defcf-eeb2-34a5-9ca6-a6bba7a4e7f2.roa
File:                     a23defcf-eeb2-34a5-9ca6-a6bba7a4e7f2.roa (raw, json)
Hash identifier:          kHc9ZXkAVqJcbRnmzFr636ja2UNCfmfvL5XTbfyg/Dg=
Subject key identifier:   98:02:33:F9:C6:13:4C:97:9D:69:8E:80:61:FA:33:02:82:13:D5:D3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845859FEC30D80A21F85A727000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a23defcf-eeb2-34a5-9ca6-a6bba7a4e7f2.roa
Signing time:             Fri 12 Apr 2024 14:30:49 +0000
ROA not before:           Fri 12 Apr 2024 14:30:49 +0000
ROA not after:            Thu 11 Jul 2024 14:30:49 +0000
asID:                     20940
IP address blocks:        72.246.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:9f:ec:30:d8:0a:21:f8:5a:72:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 14:30:49 2024 GMT
            Not After : Jul 11 14:30:49 2024 GMT
        Subject: CN=2f192817-5d16-4a6e-bd7a-188828e9c4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:20:3e:59:40:c1:f9:64:92:c1:40:a9:03:
                    26:f0:1f:0c:2c:07:5f:af:06:41:ef:e4:66:31:2d:
                    9b:48:3e:ea:68:b8:5e:37:98:1d:02:13:05:28:9a:
                    a5:c8:2f:b9:32:24:13:6c:d6:c5:83:b7:48:c5:93:
                    bc:72:f0:a7:90:3c:08:2a:43:97:50:fe:53:23:93:
                    e7:46:45:c3:1b:2a:9b:e3:4f:51:06:47:df:4f:a6:
                    b0:d2:be:ba:90:c7:0c:7f:5f:2d:c8:6e:e0:93:8d:
                    27:b7:09:41:19:6c:27:68:81:b3:a2:8d:06:69:94:
                    60:47:f6:79:47:35:66:11:d9:11:22:3a:64:ad:87:
                    bf:1f:3d:d3:06:6f:b3:b5:a5:93:23:8d:c2:d7:66:
                    85:43:9b:00:dc:1d:00:fc:e6:95:21:fd:7b:73:06:
                    b7:68:b0:99:3c:4b:04:14:35:91:af:50:14:57:8e:
                    45:69:6f:32:6f:7f:15:bc:fa:54:90:1c:b7:f2:aa:
                    9a:11:07:76:69:6e:c5:e8:36:87:92:e0:ee:8e:cb:
                    75:6c:fb:65:4d:23:dc:33:0f:b4:ef:24:5b:be:23:
                    b3:51:34:c2:f9:e7:1d:47:c9:8f:a1:a1:33:e1:53:
                    bd:53:b6:95:77:4f:9a:8e:2b:b8:74:17:68:c9:f4:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:02:33:F9:C6:13:4C:97:9D:69:8E:80:61:FA:33:02:82:13:D5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a23defcf-eeb2-34a5-9ca6-a6bba7a4e7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:95:07:8c:99:40:33:06:c3:fa:87:1d:b4:5c:ff:bf:c3:
         0a:36:78:ca:90:cc:29:1c:b8:ac:18:4f:49:52:36:ec:4d:1f:
         bb:86:5d:39:46:1c:9c:e9:58:2e:7c:d0:d5:9d:3c:88:2b:dd:
         90:2e:52:dd:22:78:24:44:6b:90:dc:63:64:a3:35:4c:3e:c5:
         7a:59:f2:c5:1c:fc:d5:02:d5:c4:f1:d6:72:50:18:74:eb:c4:
         b6:51:ab:e8:6d:02:cd:98:10:c0:c3:b1:1b:d2:ae:d8:ec:4d:
         a4:15:a1:70:ea:3b:94:a7:46:cc:5d:c2:e8:e7:1b:f5:cf:29:
         65:59:f0:e0:6e:e1:e1:08:26:2a:b4:b6:f8:c0:89:dd:fd:82:
         a5:83:ad:e6:9b:d7:6d:36:3f:28:02:3e:14:a1:58:03:eb:2e:
         50:e2:fe:9d:dc:c2:86:2b:7b:2b:05:b8:15:2c:3e:a0:06:a3:
         0c:63:8b:77:31:05:0a:07:cf:39:c6:16:52:a7:59:bf:3d:bb:
         9f:10:72:84:d4:82:0f:01:83:f1:ef:8e:e8:92:23:88:e5:27:
         ff:86:46:28:92:c5:3a:89:d6:db:1d:a9:bc:ba:1d:5b:f6:02:
         12:20:4f:0e:4f:41:2e:9d:4f:ae:4f:bb:3f:f3:e5:cc:81:19:
         1a:3c:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:57:58 2024 by rpki-client on console-fra.rpki-client.org