Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2134272-681c-37c7-88f0-4456879821f6.roa
File:                     b2134272-681c-37c7-88f0-4456879821f6.roa (raw, json)
Hash identifier:          a9P9dSflK7T8v2XOHVFPT0SzHtZzSybQK3+Mj/tVQeM=
Subject key identifier:   8F:A7:D9:E0:0D:F8:3D:1D:54:4E:AE:61:BC:0B:04:62:DE:C6:E5:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456F1DB8298C8BD35AEF8DDEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2134272-681c-37c7-88f0-4456879821f6.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.225.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:b8:29:8c:8b:d3:5a:ef:8d:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=22ea98f0-1c92-42a7-aa1a-fd447ec6538b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:f0:ef:1c:68:c6:17:67:6f:f7:ef:c2:3b:
                    47:42:d6:28:8e:83:71:56:3e:80:ac:bd:f2:8a:8b:
                    0d:55:53:f4:d6:83:5a:a9:e8:19:52:23:3a:5b:bc:
                    b0:5f:67:2c:73:80:67:77:3b:58:f1:56:d8:e3:ab:
                    94:15:86:28:66:bc:8c:64:f8:8b:79:c4:94:50:68:
                    ac:0f:5e:41:1c:ad:03:87:0e:3a:46:80:3c:12:95:
                    fd:35:7d:b1:02:99:8f:02:85:72:6d:c2:1f:56:9a:
                    ea:8e:1d:2f:94:ad:a9:e7:84:7f:ec:22:81:6a:06:
                    b4:f9:a3:d7:92:38:4c:2a:d1:ae:d0:da:b9:65:71:
                    b7:09:c7:95:37:5b:6f:f7:18:17:cf:ba:4f:b2:5b:
                    ac:c9:b7:3e:f0:b8:55:3c:c5:55:e1:41:da:0b:ca:
                    1c:ca:1c:bf:41:2d:39:78:ff:19:0c:b2:7a:ac:45:
                    8e:36:77:cc:46:c7:43:dc:bc:da:56:0e:95:da:70:
                    f4:d7:26:e2:66:40:76:0d:6a:63:c9:3b:23:cb:31:
                    3e:85:93:69:22:ea:de:a7:32:ef:05:15:8f:88:b9:
                    18:d9:3e:d2:21:d1:35:1c:a6:1c:4c:4b:b3:89:af:
                    97:7f:08:af:b2:4e:a6:b2:1b:5f:5c:98:f5:41:78:
                    a9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:D9:E0:0D:F8:3D:1D:54:4E:AE:61:BC:0B:04:62:DE:C6:E5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2134272-681c-37c7-88f0-4456879821f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:17:af:a5:89:05:fb:bf:08:98:38:64:67:28:01:b0:cf:
         ec:44:bc:db:4e:76:63:5a:ab:37:da:0f:d7:25:89:90:81:a4:
         10:ea:e5:05:7c:a4:2a:23:36:80:25:67:b4:78:e9:3c:ce:da:
         04:f8:67:21:f8:11:b0:82:80:a4:1b:26:7a:2e:8a:c4:cf:29:
         20:95:26:1a:50:aa:a5:06:0f:7b:d1:66:05:9c:5b:d4:15:18:
         d2:8c:68:2d:7c:97:6c:7e:50:d0:9d:b3:b2:91:ba:31:b9:52:
         4d:a3:64:48:84:70:97:23:92:c1:26:c6:e1:19:8f:7d:59:f4:
         be:d4:09:21:be:5e:1b:fe:4a:22:ac:4f:9f:dc:92:70:fd:02:
         5b:2f:46:37:87:05:d6:b3:7e:1b:fb:a3:38:fd:0a:75:96:94:
         88:26:d7:6f:18:b4:cf:13:28:3d:3c:1e:cd:c2:67:76:f7:b9:
         51:da:f1:00:8d:75:55:29:c2:6a:08:7a:28:dc:91:21:65:9f:
         05:c6:5b:51:1b:f3:3b:3c:84:05:44:8b:f3:1f:0b:3d:c2:bb:
         91:ce:c3:ff:1d:ce:d5:eb:b8:57:e7:70:eb:73:35:d9:a4:c9:
         35:e7:e4:ed:b5:42:c7:5b:19:d8:f9:b7:ca:2b:f4:c6:74:46:
         d4:93:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:52 2024 by rpki-client on console-fra.rpki-client.org