Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea8960ee-7436-3d50-8c8c-71d6cfacf06e.roa
File:                     ea8960ee-7436-3d50-8c8c-71d6cfacf06e.roa (raw, json)
Hash identifier:          gUeft2meuV2MhKRGWV5pN+sKe94QUYXR+KBhxKnS/+c=
Subject key identifier:   BE:8B:C0:C5:B8:AB:4B:EB:08:E4:33:8F:86:31:D5:36:8F:AB:A4:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285845174ADD245E790FD23EEC0638
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea8960ee-7436-3d50-8c8c-71d6cfacf06e.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     63949
IP address blocks:        172.232.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:dd:24:5e:79:0f:d2:3e:ec:06:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=10597a1b-56c5-491f-8b7f-c89b57bbd18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:ed:9b:12:3e:3a:c5:44:38:57:ad:83:1b:
                    86:fa:8a:03:50:6f:66:e5:52:a3:10:74:7d:82:09:
                    33:b0:9d:04:f1:cd:5b:75:1b:67:45:02:69:f7:32:
                    f9:75:14:fe:50:52:5a:b9:5e:07:fd:48:0f:d1:e5:
                    c0:ca:4a:cc:8c:35:c0:01:c9:40:5f:a7:59:12:20:
                    ff:94:0f:12:14:0b:0f:fe:49:92:c3:af:e3:d1:02:
                    49:a5:b5:41:28:0a:1a:8c:fa:63:f1:e0:2b:69:6f:
                    5a:c2:8d:e6:5a:ca:63:d6:b4:4b:2a:16:14:70:7e:
                    29:8d:bf:63:15:2a:c4:b7:2d:9b:f7:6c:81:e9:8c:
                    5f:92:d4:e2:09:40:60:2a:6f:02:c6:8b:8c:c3:a3:
                    a9:58:55:30:8d:14:2d:0c:4b:51:f9:46:11:0d:a1:
                    59:dc:9a:0d:f2:13:76:b1:66:b2:3a:b8:7e:ef:c4:
                    ef:3d:d8:ed:9d:7e:f4:02:39:85:4b:2c:8f:ad:52:
                    25:0f:1f:4d:bd:d7:bd:fe:9d:89:04:5e:40:8f:f3:
                    26:f0:66:3f:03:db:2f:32:07:5d:f7:fd:fb:bc:5e:
                    37:8a:b7:18:ca:49:69:aa:0f:41:a8:50:03:16:5c:
                    c2:39:a4:a1:87:ca:4f:78:fa:cd:1d:32:db:e2:e9:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8B:C0:C5:B8:AB:4B:EB:08:E4:33:8F:86:31:D5:36:8F:AB:A4:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea8960ee-7436-3d50-8c8c-71d6cfacf06e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.232.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6c:82:0e:20:5f:ec:fe:a7:d2:cb:82:ca:6b:e0:c9:84:5b:
         3c:6f:f9:54:81:aa:b3:f0:bf:a5:dd:27:d5:e9:a8:e2:00:0b:
         74:21:ed:85:50:bc:33:06:c2:c1:a4:02:00:c6:a2:bd:26:51:
         cc:86:61:49:f2:c3:f6:23:6a:a8:d9:cb:bf:96:e1:bb:b2:3d:
         e2:87:c6:70:4f:b6:8f:b0:64:48:a4:17:e4:12:4f:a9:36:66:
         11:13:b9:96:22:0b:7b:93:78:07:78:d7:04:d6:6e:20:73:ce:
         cc:0a:ae:97:29:5e:30:d0:ff:7e:4a:b6:bb:4c:3b:67:22:9b:
         bc:6f:a0:91:3c:34:a3:19:8d:8f:bc:1e:fa:dc:0b:58:be:98:
         4b:4f:a4:9f:f9:84:59:b5:87:b6:2f:6e:a1:d6:47:bc:f6:b8:
         36:12:4a:a0:2b:bc:59:9a:fc:fd:5f:b4:c8:02:b2:88:a2:54:
         9b:f6:24:e9:f9:81:89:a4:1f:38:af:01:ee:5f:a1:07:e6:c7:
         de:02:a4:33:ae:a3:37:b1:f3:b9:55:00:fa:97:d6:0f:2a:73:
         8a:6a:79:ec:18:f4:a5:e0:0e:8b:10:8d:bf:21:2d:bc:a4:83:
         2b:d3:fe:b3:61:25:c7:fa:bd:f8:13:f3:d6:cd:b5:14:29:55:
         ef:48:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:03:20 2024 by rpki-client on console-ams.rpki-client.org