Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5ec8be50-1735-3bd6-8906-678adf6516e7.roa
File:                     5ec8be50-1735-3bd6-8906-678adf6516e7.roa (raw, json)
Hash identifier:          WVmZTWbP7EpHHwivn7uy+EyUsvMbtLqxvwP+kGW9gLs=
Subject key identifier:   26:D9:8A:E1:FC:D2:ED:FF:1B:CD:23:83:BA:6E:60:CB:BD:EE:01:B1
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F43285844ED6A92BE068166FC2C29A900
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5ec8be50-1735-3bd6-8906-678adf6516e7.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     14956
IP address blocks:        172.86.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:92:be:06:81:66:fc:2c:29:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=57a305e7-2d35-4b7d-a084-c931afc8a810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:45:4a:16:fe:9f:b0:a8:76:91:f8:d2:3f:
                    d0:12:4d:50:b4:1f:66:be:a6:d7:dc:9a:d9:c1:19:
                    03:0f:af:b8:04:da:7f:a3:15:37:2b:a4:85:0b:f1:
                    ac:92:a6:bf:c9:e4:a3:94:93:fd:46:fa:bf:fa:f9:
                    0a:18:56:e6:76:da:db:7a:76:91:2f:35:13:68:dc:
                    26:9c:9f:40:ab:b4:81:c3:3a:60:45:ad:9f:1f:f0:
                    38:ea:10:50:36:07:e6:51:96:99:4d:28:b9:8c:49:
                    26:45:18:24:2a:e2:30:de:2e:37:77:44:f9:99:26:
                    8f:0b:fd:30:f5:6b:70:de:43:ef:0c:27:48:25:4d:
                    e1:e4:66:47:7e:a9:45:5f:b6:b9:62:fb:8d:ee:5e:
                    aa:0d:84:36:78:ef:53:05:1e:5b:1c:b1:4f:78:7d:
                    b6:67:ed:7d:79:48:a0:98:e2:77:c0:5b:0b:a6:18:
                    bf:cc:a5:99:25:e0:07:a4:23:38:bc:ac:97:e5:8f:
                    5f:c5:27:70:3e:c0:14:95:87:f6:0f:01:47:1c:68:
                    14:70:aa:80:ca:4e:31:ee:ff:95:94:bf:42:9d:4e:
                    d1:10:49:98:fe:2b:ad:45:a7:ed:24:78:ba:e5:1f:
                    a7:d3:26:fe:ff:67:aa:e5:06:8e:87:bf:88:e5:d4:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D9:8A:E1:FC:D2:ED:FF:1B:CD:23:83:BA:6E:60:CB:BD:EE:01:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5ec8be50-1735-3bd6-8906-678adf6516e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:cc:26:fc:ed:e9:f4:6a:e6:89:c6:86:ef:ad:6c:ba:99:
         9d:ad:63:38:0a:24:ab:29:54:30:a9:70:20:5c:6d:e4:2a:38:
         f2:58:4a:37:ff:53:0d:d9:7c:39:c4:13:59:b0:53:ba:c9:10:
         9d:a2:ab:45:93:61:4f:e9:be:0e:1a:fd:c6:53:f4:f5:18:1d:
         52:cc:d2:20:f0:28:ef:52:0c:6d:47:b0:c4:73:fe:1d:be:f8:
         37:15:d1:99:bd:6b:90:85:ac:5b:5c:08:8e:a6:79:00:d7:9a:
         16:6f:ef:f1:c2:56:f2:57:27:ed:fb:af:9d:ac:76:ea:e1:fb:
         e8:e1:cd:27:0d:90:64:52:f5:03:61:8b:6b:a6:a2:31:81:91:
         3e:08:11:53:e4:90:64:42:dd:42:13:b5:8b:ae:62:6d:06:bd:
         0e:db:e3:e8:5a:01:f0:72:ac:bf:87:79:b8:06:29:11:7f:ee:
         18:df:7b:d5:21:80:ef:b2:78:a7:c8:c5:c5:5f:cb:f0:60:d7:
         80:77:33:4e:da:1e:8b:bc:cc:92:b8:0b:ac:f7:2d:af:11:b8:
         43:8f:8d:ce:be:db:18:ee:56:ed:5a:5a:76:2f:8a:ba:db:a2:
         97:ec:77:19:83:36:7b:5d:7b:42:4d:ca:5f:cd:ce:80:50:40:
         87:9b:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:09:25 2024 by rpki-client on console-fra.rpki-client.org