Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa
File:                     ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa (raw, json)
Hash identifier:          FGJUQqOZGan5XHT0ZWRamD0LTgQe/ZV2EqeyWeov2Xo=
Subject key identifier:   3E:03:CB:EE:EF:08:98:EE:94:FE:BD:89:91:B4:2A:56:09:DD:52:C8
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858453A12ADE8F78185705E28C780
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa
Signing time:             Sat 16 Mar 2024 13:00:31 +0000
ROA not before:           Sat 16 Mar 2024 13:00:31 +0000
ROA not after:            Fri 14 Jun 2024 13:00:31 +0000
asID:                     8987
IP address blocks:        170.72.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3a:12:ad:e8:f7:81:85:70:5e:28:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 16 13:00:31 2024 GMT
            Not After : Jun 14 13:00:31 2024 GMT
        Subject: CN=0d941b56-0113-42e2-9690-b006da87fa09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:dd:c0:88:38:ce:39:7b:bd:9f:74:ad:fb:
                    49:02:f2:4a:05:a9:c1:f3:25:bc:a2:e0:13:2d:d9:
                    4f:ed:80:01:f7:dc:86:15:16:1a:b1:5a:1a:49:aa:
                    36:b6:d7:24:a4:31:de:41:21:88:ea:f1:f2:73:2f:
                    bb:c3:35:17:51:9c:1f:62:b3:e3:f5:7f:9f:aa:19:
                    93:49:23:1e:13:7a:df:ba:dd:9d:0b:79:0a:80:90:
                    e8:4b:c2:6f:e3:fc:e7:19:4d:68:46:dd:de:4d:0c:
                    85:f3:79:cc:5a:27:89:5d:b3:03:f8:81:7a:dd:57:
                    d3:72:46:31:87:c6:47:97:df:05:86:b1:8d:e3:6b:
                    64:d9:ce:63:2e:15:7f:63:32:38:30:c5:82:b1:18:
                    e4:c1:06:5f:47:27:74:24:61:73:f7:f9:f0:4c:68:
                    9a:bd:d0:7b:eb:ce:f4:af:05:89:97:96:98:83:8c:
                    dd:f4:8b:af:3d:4d:08:b8:c4:96:1c:40:b8:59:8d:
                    b9:d2:ae:9b:e4:e0:cb:ab:4f:f6:e7:69:34:79:3e:
                    80:40:a1:22:0c:d1:ed:ff:f3:9c:75:30:8f:82:47:
                    50:40:eb:5f:71:ef:81:c0:de:6a:96:10:1e:c7:75:
                    78:4a:5c:dc:bb:57:ab:70:bf:63:c2:9f:39:63:a5:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:03:CB:EE:EF:08:98:EE:94:FE:BD:89:91:B4:2A:56:09:DD:52:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ccc755e0-649d-3a9e-a5f7-30645007ba5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:93:c3:bf:60:9e:86:11:34:b0:9e:bf:03:10:25:70:9d:41:
         1a:fa:d6:f0:ed:42:59:7d:e2:05:34:98:dc:08:2c:1c:28:3b:
         77:2e:58:06:e4:bb:af:3e:88:7e:12:27:16:50:20:8a:6e:cd:
         3f:6e:40:7f:1b:30:f4:72:69:63:d9:32:91:a9:48:8c:2b:97:
         e0:6a:0f:76:0d:03:28:d1:e9:e1:12:9c:f7:4e:fa:73:d9:84:
         f2:88:dc:98:55:2f:91:37:d8:2e:d9:d4:42:8b:18:1e:be:eb:
         65:de:46:ba:b6:dc:3a:1e:f7:84:17:4a:43:4a:bd:13:34:76:
         a8:c9:68:e5:5b:4b:6c:28:f0:f4:2a:83:1a:96:1f:d7:94:48:
         9a:5f:ae:54:01:4a:26:81:da:b0:32:7d:33:2d:5e:c7:91:b4:
         62:1c:ce:32:b2:7b:dc:45:aa:3b:54:13:30:4a:40:d1:76:0a:
         16:19:f8:1f:85:03:03:14:fc:16:bf:f8:a2:9a:21:0b:3d:34:
         4e:78:20:a1:02:9a:ed:24:53:5c:50:e2:32:b5:42:ae:2f:c5:
         f3:ec:61:55:8a:7e:bf:1b:1e:2e:2c:75:d5:3f:dc:a1:00:f5:
         0b:a2:b5:96:52:51:4d:d0:36:37:d6:ad:cd:20:85:8d:48:bf:
         19:c7:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:34:01 2024 by rpki-client on console-fra.rpki-client.org