Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa
File:                     0185b0e0-6696-3609-972e-b79ff80a6c20.roa (raw, json)
Hash identifier:          fN+83N54rNF8kK2O5GMMGAiBhO+SKFxNE8UkWoX2QL8=
Subject key identifier:   DA:CE:29:D9:2E:53:2F:56:AC:1C:82:4E:F4:EC:5D:21:48:0C:97:0A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858455F016A7B253D33A2EE7DF980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa
Signing time:             Fri 29 Mar 2024 18:30:43 +0000
ROA not before:           Fri 29 Mar 2024 18:30:43 +0000
ROA not after:            Thu 27 Jun 2024 18:30:43 +0000
asID:                     15169
IP address blocks:        172.217.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:01:6a:7b:25:3d:33:a2:ee:7d:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 29 18:30:43 2024 GMT
            Not After : Jun 27 18:30:43 2024 GMT
        Subject: CN=963ab705-4a9a-4994-b1e1-725ef92efeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:18:25:64:5e:31:55:2d:7b:7c:8f:9c:cb:9e:
                    c4:4b:69:e6:63:ea:90:77:bc:8e:88:71:90:87:a4:
                    11:f5:4d:c6:b3:e1:42:db:7e:1e:07:02:8b:0b:72:
                    73:c3:cc:67:d9:33:dd:08:2c:e5:90:de:95:f5:50:
                    9a:1c:2e:ea:c5:b8:68:3f:18:72:69:48:89:3d:fc:
                    8e:72:50:17:b9:9c:e4:ec:99:18:1e:07:16:fc:8b:
                    0d:4d:b1:41:19:b9:84:a9:26:87:4f:91:66:6d:be:
                    fd:32:bf:6b:a7:01:4d:71:20:98:8f:eb:af:94:61:
                    a9:4c:03:6a:26:7b:74:5a:cd:79:7c:33:57:a6:79:
                    85:49:06:4e:20:50:76:76:c3:ba:24:12:78:08:7c:
                    87:3f:63:61:30:76:d6:54:33:9d:fe:89:46:76:c2:
                    dc:7d:41:49:2c:37:80:ca:0e:a9:ec:af:0e:2f:41:
                    6e:d8:55:0b:41:3b:b2:58:c2:42:0f:89:8b:9e:1b:
                    61:37:79:12:35:31:94:0a:21:34:6a:31:71:00:bf:
                    f9:70:06:e1:af:fc:43:ac:ec:29:33:c4:0f:72:3b:
                    c9:94:b0:85:0f:c0:b1:f6:58:85:bf:57:b7:56:73:
                    e4:8f:b3:bb:54:3c:e5:80:1e:7d:8b:01:8d:47:0c:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CE:29:D9:2E:53:2F:56:AC:1C:82:4E:F4:EC:5D:21:48:0C:97:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:5c:01:df:c9:e2:ba:db:24:18:75:d3:85:29:cd:cf:b0:b4:
         6b:21:0c:a6:66:53:e3:17:42:f2:8c:ec:2e:e2:d3:3c:f5:53:
         19:c2:f1:70:54:44:60:27:b9:82:98:1c:4b:1e:a3:c2:b6:fc:
         4f:1b:6e:08:63:8c:35:74:a0:72:5a:d9:82:ce:bc:01:e5:28:
         73:0f:ea:7f:18:c4:4a:69:db:ca:15:20:c4:05:2c:14:df:20:
         35:f7:7f:49:59:41:53:47:0f:bf:02:c2:4c:e4:8a:ec:d2:8b:
         98:90:e3:72:f6:98:f8:f7:51:9b:aa:23:42:bd:a1:10:ef:9a:
         a2:82:b9:da:af:ac:99:2e:ac:31:f3:03:e3:3f:e6:6c:b3:9a:
         b8:08:d1:8b:5c:3b:55:88:07:25:09:fc:ef:a4:fd:28:81:e4:
         77:0c:d6:d5:fd:c8:34:60:0a:e7:61:34:33:e4:cf:a6:9f:ab:
         c6:70:70:07:bc:22:68:ed:49:4e:31:d7:07:ca:65:e2:a6:10:
         7c:e7:be:7e:46:41:df:d0:39:59:1e:38:9c:71:6b:4f:c1:f0:
         6c:36:1c:1c:57:9c:e9:21:01:23:c4:17:7a:09:b5:df:ee:c0:
         09:90:b3:15:7e:80:4f:21:be:94:b9:78:5a:d2:dc:b3:33:2a:
         30:2a:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:54:37 2024 by rpki-client on console-fra.rpki-client.org