Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acf066cb-da6b-36d8-9170-8a743f32fab6.roa
File:                     acf066cb-da6b-36d8-9170-8a743f32fab6.roa (raw, json)
Hash identifier:          0qbmb2HqZBPFlRKk5vfqYXUZ0i8Altkm6mjO6kjPW1I=
Subject key identifier:   E6:D5:54:38:40:D5:98:E4:15:B1:2B:58:B7:A8:B9:DB:90:05:3C:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858458DBB248010E6378FCAE7EEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acf066cb-da6b-36d8-9170-8a743f32fab6.roa
Signing time:             Mon 15 Apr 2024 12:12:07 +0000
ROA not before:           Mon 15 Apr 2024 12:12:07 +0000
ROA not after:            Sun 14 Jul 2024 12:12:07 +0000
asID:                     16625
IP address blocks:        72.247.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:bb:24:80:10:e6:37:8f:ca:e7:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 15 12:12:07 2024 GMT
            Not After : Jul 14 12:12:07 2024 GMT
        Subject: CN=ac3817ce-42ad-4765-bd20-178ab4bc5c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:eb:dd:26:7f:3f:bf:dd:e3:84:18:ce:3c:
                    52:84:88:a8:c1:63:46:08:38:a5:ae:d9:79:ef:eb:
                    27:23:dc:ac:ad:a4:46:ac:1c:2d:d4:08:e4:64:49:
                    b6:2c:fb:90:95:1d:cc:8d:3f:82:55:fb:38:67:59:
                    1c:84:25:85:4f:12:95:98:cb:36:74:71:80:c1:6d:
                    0a:40:d9:85:0d:70:91:f3:42:19:d1:24:2f:1d:0c:
                    3d:23:fa:77:03:d9:80:d4:17:d4:12:51:05:bf:00:
                    10:ca:f4:a1:63:fa:4f:6f:ed:46:8e:71:3f:1e:20:
                    31:83:8c:31:c9:0a:79:bb:e3:fd:87:78:23:9d:ea:
                    59:9a:87:f8:94:24:b3:88:9e:17:61:33:3c:a1:6c:
                    1c:9e:86:7b:e4:19:e1:94:78:79:25:66:be:2f:13:
                    c8:7c:6e:3a:80:4f:5e:58:dd:7d:24:26:78:80:da:
                    e7:46:f6:14:44:aa:dd:ed:50:d8:ab:b1:ab:a7:70:
                    58:4b:2b:f6:19:3b:11:2f:35:95:e7:0e:f2:34:6c:
                    1f:56:41:57:ca:7b:6b:e7:87:f0:19:4f:20:c6:b1:
                    dd:e0:78:48:36:fc:b4:7d:2a:fd:d4:06:5c:74:71:
                    14:dd:7f:66:42:f5:98:77:36:3f:8a:c9:cb:5d:81:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D5:54:38:40:D5:98:E4:15:B1:2B:58:B7:A8:B9:DB:90:05:3C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acf066cb-da6b-36d8-9170-8a743f32fab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.247.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:90:63:84:e8:d9:65:25:8c:24:e3:98:bd:aa:af:86:13:fc:
         d7:3e:ac:8a:b4:6f:ad:e3:0d:cf:6a:26:ff:60:75:f2:29:ac:
         8e:bd:4b:8b:43:8c:e0:00:52:83:39:77:ec:ae:13:49:2e:05:
         0b:66:0c:cd:db:f4:a7:c0:e2:f5:7d:cd:5e:86:1a:76:c9:f6:
         c1:c8:d9:2f:10:29:b8:7d:fc:82:43:a9:6c:ca:47:a3:31:01:
         da:49:6c:ef:b7:c5:57:3c:dd:7c:e6:f4:c0:e4:da:56:c9:8d:
         d2:c3:11:a1:20:7d:06:46:d1:a0:a2:99:c9:4c:2e:ca:9a:6b:
         df:f9:81:12:13:78:1b:40:9c:f0:5b:de:35:f7:e6:1b:9b:bf:
         c1:cb:4d:8f:a4:c6:39:15:29:de:94:b3:b1:55:b8:3b:39:80:
         38:9e:06:1b:0c:93:f0:cf:ab:e3:d0:b1:a4:74:67:6b:44:d1:
         f7:52:01:7c:d2:5e:c2:d4:a1:dc:9a:37:f3:64:2a:b4:15:f8:
         09:66:95:01:29:d5:43:85:11:ab:3e:35:e9:d5:17:dd:e8:4f:
         29:e2:dc:70:72:3e:07:f1:7d:ad:c6:de:d0:ac:20:99:90:26:
         e0:6e:36:18:ca:ea:1d:9a:db:19:b4:c6:03:ac:49:ee:fb:94:
         90:f2:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:15:37 2024 by rpki-client on console-ams.rpki-client.org