Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6170a315-6c14-3a5f-ba23-22329f5f20b5.roa
File:                     6170a315-6c14-3a5f-ba23-22329f5f20b5.roa (raw, json)
Hash identifier:          lBEphG1vu5PGEU3P0gypkmLMO4jDfAH6d6WCtoNbnAQ=
Subject key identifier:   B3:96:39:C0:E7:AA:91:1F:0D:B5:C9:A2:1F:C8:67:0A:45:25:C0:9E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B9A478F0FA4F2B5B049C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6170a315-6c14-3a5f-ba23-22329f5f20b5.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        216.208.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:9a:47:8f:0f:a4:f2:b5:b0:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=957fe213-8dd3-4c28-b11f-98e4943c7827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:65:5f:40:0e:3b:bb:b6:eb:2e:73:ec:db:
                    7d:4e:c8:8c:db:29:ed:ac:00:e8:11:30:a4:ac:90:
                    ed:aa:6d:1d:aa:e9:96:c0:4d:61:5e:ab:2c:d5:84:
                    aa:db:65:59:79:cc:b1:ff:65:69:64:f5:f9:77:b7:
                    fe:31:38:67:21:c6:04:a3:79:a6:b6:3f:02:3b:2c:
                    bb:a5:bd:f7:61:a6:6f:48:25:4b:73:81:f0:d7:c1:
                    2e:df:d1:84:d8:ed:ed:57:e2:7f:c9:de:07:8d:51:
                    07:08:b3:38:81:7d:e2:de:b8:f8:45:4d:5f:f1:48:
                    09:5a:51:2c:1d:96:21:be:89:f6:cf:1d:20:69:dd:
                    cc:cd:01:e3:f6:53:07:e7:1f:bd:4d:67:70:8d:f7:
                    b9:c4:bd:97:70:a5:cb:1f:6e:46:f2:a7:2d:3e:bd:
                    81:92:be:aa:b0:5b:f7:f5:d8:0d:a7:21:ca:14:95:
                    51:8c:af:7f:21:49:ad:cd:06:e8:05:9d:b2:d5:77:
                    7a:43:4e:a0:2a:9d:0c:c3:84:82:9a:72:0b:9f:a8:
                    e4:7b:85:ff:3b:21:74:92:52:53:a7:d7:09:d1:43:
                    b7:2a:53:25:ce:9f:1a:2e:b0:a1:f0:63:d0:e2:c8:
                    b4:84:ff:64:b2:71:69:d2:b0:e3:d6:35:cb:b8:fe:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:39:C0:E7:AA:91:1F:0D:B5:C9:A2:1F:C8:67:0A:45:25:C0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6170a315-6c14-3a5f-ba23-22329f5f20b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:44:61:66:6e:ad:8e:0c:e5:e4:3c:58:f2:85:1f:bf:5b:
         14:7f:be:fa:52:d2:1a:4a:43:84:b3:87:19:08:3d:4e:4a:ab:
         09:f0:d3:df:cf:00:61:23:96:d7:81:22:97:ff:88:3d:8d:1e:
         23:82:3b:03:bd:eb:50:b9:61:7e:95:3a:6d:bd:33:88:15:14:
         db:f7:9c:7d:b3:e2:ae:71:a2:d3:1d:5b:59:2e:f3:41:ff:e7:
         ba:da:10:20:d6:7c:46:0a:23:ae:43:7f:dc:c1:bf:2e:3e:5b:
         8e:a4:dd:7c:95:bd:83:d4:18:d3:4d:5f:01:d7:89:ae:b1:38:
         5a:78:d2:61:4b:60:4b:eb:2a:f1:31:01:cc:2f:f1:58:a3:e3:
         16:13:e4:c0:ba:89:cb:87:8f:dd:83:a3:e0:f3:7c:1f:35:57:
         1a:35:18:ab:e4:df:69:d9:54:29:af:09:32:a0:3e:82:33:55:
         43:5e:01:98:c8:df:6e:9a:69:57:d1:c3:35:7a:cd:fb:26:60:
         4e:13:16:7c:f3:2e:01:03:6f:00:f8:cb:7f:e7:3e:ca:f7:43:
         5e:f9:3b:f9:30:d5:13:12:86:fc:fd:f0:40:f8:92:9f:86:21:
         fc:1f:56:f0:ad:db:c9:2a:9b:ea:ab:cb:4f:ad:26:68:0f:55:
         a1:f8:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:48 2024 by rpki-client on console-fra.rpki-client.org