Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa
File:                     ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa (raw, json)
Hash identifier:          rfzzRJ9Wo7Kid7FXHGaW5MlV3hhmuGuZuyhtMjpykKI=
Subject key identifier:   9F:CC:D2:91:30:1F:F7:28:B0:C9:38:15:1A:61:11:C2:F3:61:CA:CA
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285844F5CA9EE54307AB3D693EA0A0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        173.199.8.0/23 maxlen: 24
                          173.199.56.0/23 maxlen: 24
                          173.199.29.0/24 maxlen: 24
                          173.199.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:9e:e5:43:07:ab:3d:69:3e:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=317abb08-2acd-4c61-83f3-cd21783bf985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:eb:a5:d8:bd:9a:73:fd:9e:0a:f6:5e:5e:
                    a8:1d:78:db:f1:67:3e:7e:60:95:9e:cf:c6:de:04:
                    da:77:c4:4a:41:cb:4a:58:2e:0a:f5:47:e0:a0:c9:
                    ca:47:2e:6b:03:95:6a:39:4a:e7:e1:ba:70:f6:ae:
                    74:27:86:a8:03:12:20:11:68:17:f9:8e:71:8f:60:
                    45:24:81:4a:25:5a:12:d4:51:d2:8e:5a:77:fc:cf:
                    ed:54:16:fd:fa:f9:6a:6c:ca:f3:50:c7:76:04:3e:
                    41:de:4f:b6:86:6a:21:2f:d5:40:43:f6:8b:66:67:
                    60:a8:e4:3a:6a:42:38:37:be:33:4b:36:44:68:9e:
                    05:f8:a9:76:40:d6:77:c0:20:fe:79:d9:11:0a:80:
                    66:71:d4:da:6d:d5:c3:aa:28:50:5f:3e:8d:9e:a8:
                    18:b0:98:d0:8a:2f:c1:a8:af:83:50:5b:c7:03:4b:
                    9b:52:99:c9:23:0d:4d:be:5b:ab:ea:42:c3:6e:b6:
                    cb:d5:c4:02:ca:f4:7e:d1:66:5d:43:e5:bc:5c:ae:
                    28:c4:c3:ed:d4:ea:b5:03:52:85:89:2b:80:53:a9:
                    cd:ba:1f:6b:d8:bb:c1:a0:55:fb:20:bd:12:14:1d:
                    5a:7b:dd:ea:9d:f1:f7:58:b3:6c:2e:38:6f:e3:d7:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CC:D2:91:30:1F:F7:28:B0:C9:38:15:1A:61:11:C2:F3:61:CA:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.8.0/23
                  173.199.29.0/24
                  173.199.38.0/24
                  173.199.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:b9:94:79:c2:af:80:44:94:e8:93:13:26:c1:63:c2:ab:
         f0:96:85:c3:64:88:b1:e8:62:23:ab:1b:1d:b3:f6:98:a2:c7:
         56:1d:2d:2c:41:83:30:ca:35:85:1a:c0:19:1b:c9:f3:da:12:
         a9:e5:d3:80:b8:12:9e:fa:89:62:f7:c9:77:d2:1c:f9:4d:e4:
         68:b8:e6:74:8b:b1:11:c6:cf:a1:a8:5c:9f:92:ac:f6:2a:2f:
         b2:ab:2d:15:76:0c:0f:59:34:9f:dd:6b:82:1c:f8:50:18:13:
         75:36:e1:cb:23:e7:3d:f9:4a:01:73:85:15:34:c4:f0:87:ab:
         d5:46:a3:56:cc:bd:f0:40:84:3f:8d:56:53:46:b9:86:41:d0:
         6b:46:6f:9e:16:26:b5:98:09:11:58:49:84:c1:66:42:e2:7e:
         8b:b1:fc:1b:c8:0b:7c:1b:f1:32:4a:72:a2:e4:dc:3f:64:08:
         43:55:56:66:7f:fb:30:72:83:8f:5b:22:ea:ab:28:e7:8b:26:
         ae:4d:1b:be:b5:bd:a2:4d:3f:8f:d8:ed:53:bb:46:f9:58:6f:
         be:46:8c:be:a8:71:9d:5e:43:e1:27:19:a3:03:3f:09:d1:f6:
         5a:0a:b5:ed:df:09:49:71:43:c8:61:76:ae:69:43:93:09:52:
         f4:59:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:08:01 2024 by rpki-client on console-ams.rpki-client.org