Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25fe07a6-19a0-30d1-9059-f4b3cbd7439e.roa
File:                     25fe07a6-19a0-30d1-9059-f4b3cbd7439e.roa (raw, json)
Hash identifier:          uG1Mavb6mK/6px68Q4ohc+PQi2oqfFWw6bW48Joj1+I=
Subject key identifier:   CC:2C:75:F1:9F:85:B3:14:DD:C3:33:E9:83:BF:EC:4A:06:2E:32:A9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3DE5B92028145B3A55400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25fe07a6-19a0-30d1-9059-f4b3cbd7439e.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:de:5b:92:02:81:45:b3:a5:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=e4800ee2-1e41-4f95-830b-9e05f11d095e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:7d:0d:20:c6:bf:86:a6:c2:f4:59:c5:aa:
                    8a:b4:8a:f6:5b:57:67:e7:a3:45:5e:3f:45:ba:73:
                    48:55:56:a2:9f:84:b7:11:47:d4:12:00:65:dd:32:
                    89:62:85:92:4b:5c:8f:12:02:ab:17:84:16:32:fc:
                    e7:3c:18:82:eb:99:be:c9:16:0a:1f:89:4e:30:c3:
                    10:e5:1e:df:70:ef:2b:83:79:de:f3:a2:f0:58:f8:
                    d6:94:fd:56:e0:22:87:61:fe:43:4d:93:96:00:cf:
                    96:04:0d:5a:68:88:a2:f3:cd:51:1f:74:2f:19:01:
                    44:1b:74:01:98:97:26:72:e4:0f:cf:5d:a3:62:56:
                    2e:19:fc:1d:a7:7a:21:54:6b:92:f7:ab:82:22:ef:
                    10:ca:1b:aa:65:7c:f0:d2:ce:59:9f:85:96:7e:6d:
                    a4:8a:10:42:c1:fa:dc:c0:3a:83:e4:51:24:17:76:
                    02:82:3b:37:78:b4:45:56:77:b8:56:e2:2d:11:14:
                    11:8c:0f:e7:c3:ac:1b:dc:dd:57:04:da:34:65:a0:
                    f3:48:77:8c:a9:37:4f:d3:7a:ff:34:72:e6:3b:94:
                    a8:f1:1f:fb:08:2f:52:6e:08:ba:45:20:d5:33:d8:
                    1f:b8:de:de:12:37:53:bd:b5:23:a8:58:e9:68:0a:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2C:75:F1:9F:85:B3:14:DD:C3:33:E9:83:BF:EC:4A:06:2E:32:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25fe07a6-19a0-30d1-9059-f4b3cbd7439e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:89:d0:1a:99:61:05:57:24:13:62:d3:bf:3a:f6:01:ea:ba:
         a9:49:5e:20:83:6c:07:4c:49:56:53:9e:dc:1d:e6:a4:a0:13:
         e7:20:ef:74:45:ee:8e:b2:ce:e8:a8:b2:41:59:ff:17:0e:dd:
         81:d9:49:90:11:76:aa:66:04:ed:1b:7a:0c:6e:7e:9e:46:fc:
         8b:01:43:87:1c:de:2b:d2:6a:f3:d8:4c:e4:81:97:5a:33:cb:
         5e:36:f6:9b:76:62:b4:bf:aa:3c:29:0b:49:c5:5a:77:09:e6:
         54:fb:8c:cc:0e:00:8f:7b:23:58:c4:7c:a3:d4:34:1c:42:ac:
         f7:cf:e8:76:e1:60:f4:11:4c:90:07:ea:6a:50:9f:f8:9d:7d:
         ba:2c:3b:40:dc:82:e6:ab:23:cf:2e:97:7f:cf:0c:c2:b4:dc:
         80:17:d1:c5:c1:3c:a6:43:15:55:2f:bb:37:e9:78:49:52:0a:
         26:71:93:4a:86:93:2b:fa:d5:54:c5:e1:fa:a3:68:89:21:03:
         56:ec:4e:22:80:fe:60:21:47:b7:42:4e:a3:53:8c:1d:ad:75:
         da:b8:46:c3:ca:8f:19:1c:c4:6d:f2:65:25:20:60:58:35:c4:
         9b:2e:92:d2:62:c3:5f:18:90:f4:ce:d0:49:78:88:2d:b0:f9:
         51:34:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:36 2024 by rpki-client on console-fra.rpki-client.org