Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2d813ee-e641-319c-9081-c72ee2b639e0.roa
File:                     d2d813ee-e641-319c-9081-c72ee2b639e0.roa (raw, json)
Hash identifier:          bAZ7pqNsZamkTYCaDevJXxItNPFmuRhTNjmOPfesbWE=
Subject key identifier:   84:2C:97:17:FB:E7:A1:98:2D:5A:D9:5B:71:3A:0E:B6:1E:48:66:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858456F1DBDA0B5ECA2320B99D000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2d813ee-e641-319c-9081-c72ee2b639e0.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     36183
IP address blocks:        172.226.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:bd:a0:b5:ec:a2:32:0b:99:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=0c7f52e7-a304-4796-bec0-abec9076a7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:16:2b:98:50:b7:31:c2:b0:58:26:9b:93:
                    32:fd:e2:52:10:58:ed:8c:d2:74:ae:45:d1:9f:f6:
                    d6:38:73:1a:c4:44:46:c0:fd:9e:bd:3b:93:2e:6a:
                    86:78:6a:35:0d:37:d7:2e:6e:21:fb:b7:fd:47:ff:
                    6b:b1:11:5a:68:81:65:55:27:da:0e:13:9c:36:4e:
                    5b:5b:26:88:80:7f:47:07:dd:2e:6b:b0:e7:d1:4d:
                    31:01:3f:df:c2:1f:cb:3f:9d:9c:79:39:0b:84:ce:
                    0f:a4:24:d7:47:f1:c4:ab:4d:87:fe:a5:7f:2b:02:
                    7c:a5:15:de:7a:06:da:ca:42:34:f6:1f:15:f1:c9:
                    21:e9:77:eb:67:14:7b:8d:c8:69:3c:17:35:99:1b:
                    92:f4:83:f2:4b:c3:c1:20:d6:5f:03:db:52:42:15:
                    7c:ce:14:1d:3b:b3:1c:e9:fb:91:54:1e:86:63:9e:
                    52:98:37:56:90:3d:17:7f:4b:af:74:2a:f4:d6:05:
                    5c:f7:a8:23:da:22:84:f4:18:68:20:b8:c6:19:2c:
                    70:17:2b:8b:25:f8:1f:96:42:0b:d7:7f:8b:1f:28:
                    d2:22:f1:f3:e0:e4:9a:98:da:00:92:75:96:77:8a:
                    33:80:86:15:ff:a9:14:a3:f6:c4:00:84:0c:16:21:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2C:97:17:FB:E7:A1:98:2D:5A:D9:5B:71:3A:0E:B6:1E:48:66:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2d813ee-e641-319c-9081-c72ee2b639e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:41:fe:ec:c9:52:50:40:18:5e:7c:4b:cb:d1:29:28:84:f0:
         4c:91:d4:c2:eb:6b:04:c9:df:92:b6:bd:c7:f2:f8:83:79:d4:
         2b:24:1e:4e:f6:c1:35:d9:a2:ac:f1:03:ee:31:bd:40:c3:98:
         88:4a:25:92:0e:84:3c:d2:51:58:53:c7:d9:d5:e7:be:80:3f:
         ec:61:12:ea:86:fa:87:90:bc:db:bd:93:b1:af:99:37:1d:ae:
         0d:5a:4e:7d:eb:e4:42:c2:dc:f6:27:39:2a:9b:48:ed:a5:0f:
         80:1a:a4:39:a8:36:ec:b4:a0:29:96:ec:21:08:70:fd:24:8b:
         f9:bd:22:28:88:e9:e9:2b:47:37:cf:7f:3b:9b:92:6d:b6:c4:
         4a:7f:c2:7a:74:4e:6c:55:d8:e5:01:5c:0e:11:b4:2e:19:1f:
         c8:d3:73:04:9a:a3:fe:e6:a0:ac:73:a8:f3:54:38:2f:d6:3e:
         e6:c3:66:aa:05:fc:af:73:fe:28:70:f9:68:66:ec:bf:ed:74:
         93:6a:a1:39:11:72:7e:4a:85:98:ca:e7:94:34:d2:54:86:6f:
         63:fa:5e:e4:f2:cb:3d:c6:cb:4c:d5:9b:21:da:f7:5b:1a:4a:
         d7:9b:95:c8:63:f3:c0:40:3a:8e:b4:68:8f:b1:2a:40:af:19:
         f4:bc:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:16:55 2024 by rpki-client on console-fra.rpki-client.org