Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa
File:                     9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa (raw, json)
Hash identifier:          cV84+ApHjyaMOrFxr63rDKR4tq07ZqiVszaQ7lfhiE4=
Subject key identifier:   B4:CA:62:23:3D:46:EF:40:49:86:7F:2C:C9:F1:BD:05:E1:AB:40:47
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B605E6B3E4DBE7EDB45200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        216.209.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:05:e6:b3:e4:db:e7:ed:b4:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=e4ec45b5-5401-426e-89da-c224701afc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:e6:0f:c5:5f:bd:40:44:db:50:9c:1e:e6:
                    56:79:82:ff:19:58:5b:3e:67:fc:12:5e:96:63:96:
                    c9:6e:24:d8:8e:e4:20:42:d0:08:64:11:ef:d9:7f:
                    8b:af:4c:53:88:fb:68:df:b2:40:9e:c7:fc:31:fd:
                    d4:e3:5a:ae:06:f2:ac:59:e6:3d:88:96:fb:8d:9d:
                    a8:af:94:db:0c:ac:b4:7d:d5:ae:87:a7:71:d5:fe:
                    1e:92:c1:fa:0f:9f:6a:47:e2:6d:de:a3:69:13:3d:
                    cc:75:b6:a3:2d:14:aa:00:d5:4a:cc:14:a0:22:20:
                    a4:0f:c0:d0:b2:77:a1:29:d1:85:cd:39:ef:ee:dc:
                    04:27:3a:02:b1:2d:93:09:af:28:ca:da:89:74:6d:
                    48:90:83:67:81:0e:66:ba:9f:b6:25:f5:6f:74:8f:
                    23:fb:11:43:3c:8d:b2:2e:89:47:36:9f:aa:24:a1:
                    09:37:86:46:cd:b5:75:42:c8:ad:c5:4d:4e:19:4b:
                    2f:63:da:2c:e2:55:85:3d:bf:64:e4:09:b8:74:3c:
                    5b:76:84:b4:93:63:6e:d6:ec:58:ce:b0:a2:8a:67:
                    47:ff:57:ce:75:bd:39:17:c2:3b:c3:42:e4:b7:c2:
                    3d:e0:5e:46:2a:27:7c:a2:6b:6f:0d:ee:73:cb:d2:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:62:23:3D:46:EF:40:49:86:7F:2C:C9:F1:BD:05:E1:AB:40:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b97dcb7-5bba-3f32-83a3-60c13b190e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:95:1b:61:85:7d:bc:26:47:13:86:9a:9e:ff:74:c3:7a:c2:
         4a:5d:d8:11:5c:16:67:de:be:4b:79:4a:b0:dc:96:94:d1:d9:
         ff:44:cc:b7:79:c7:bd:69:b3:bc:c6:6b:82:21:02:ff:22:36:
         ba:9d:b1:e2:c7:75:b9:fa:0c:cf:09:44:a2:57:f2:b8:66:4e:
         d6:2e:e9:fa:46:11:28:e5:55:9a:58:ff:1d:b7:a7:e0:90:ec:
         8d:8b:f2:7f:25:5e:a8:6a:01:2d:5e:22:7e:f6:6b:4d:c7:13:
         77:dc:2b:40:ad:8c:33:c6:d2:c5:3c:68:4f:6a:29:90:d3:a3:
         2f:09:18:43:bb:3b:d9:3f:c0:ef:c3:6c:e6:96:cf:d1:c0:a4:
         55:9b:12:d3:3c:aa:e9:d9:74:c7:24:db:eb:8b:8e:43:cc:2c:
         4a:e3:1e:7f:d4:4f:ae:63:87:8e:6b:fb:de:30:90:c4:79:ce:
         d3:af:cc:2b:28:c5:da:5a:19:39:f3:b9:20:72:89:55:6c:c4:
         66:b6:99:b3:31:f6:58:fe:72:15:32:79:9a:94:e8:b0:0e:68:
         7e:aa:38:c2:73:8e:d7:e6:be:eb:c7:91:a0:92:d1:e0:da:dc:
         25:fb:d2:da:dc:da:20:f6:63:82:2e:48:7c:6d:18:76:d6:51:
         37:27:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:37 2024 by rpki-client on console-fra.rpki-client.org