Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2c31a8c-9a5a-3f94-8afa-a9f4e53182dc.roa
File:                     c2c31a8c-9a5a-3f94-8afa-a9f4e53182dc.roa (raw, json)
Hash identifier:          0I6nCJGSkZDf46vVYnTfe/+M/UBeWwZH5+oaTgffVR4=
Subject key identifier:   9D:C2:47:92:4D:B4:A9:C5:57:79:35:73:EA:FA:D4:2B:2A:5D:0F:A4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D29F9A1637655451EC72380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2c31a8c-9a5a-3f94-8afa-a9f4e53182dc.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:f9:a1:63:76:55:45:1e:c7:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=c34fe1b2-f7c9-4f1b-b063-3c802c553927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:8b:07:15:b7:59:a9:4e:42:4c:ea:67:ce:
                    c2:9d:ea:99:30:f0:3d:e0:3e:dd:47:d1:0a:5e:ae:
                    70:7c:f1:d9:d4:c7:30:18:0b:04:cf:c2:1d:d3:88:
                    8a:fe:23:70:6c:7b:36:92:43:97:f5:10:84:ff:dd:
                    91:21:7c:b7:e3:7e:9e:23:26:4d:87:23:b2:7e:96:
                    f5:43:9a:fc:de:bf:fa:7f:56:7b:67:02:c0:e1:c3:
                    c3:48:08:3e:3d:43:48:d0:44:f5:9a:02:8f:bb:bb:
                    61:77:be:fb:cc:76:96:a1:44:83:a7:ff:5b:b4:92:
                    25:45:09:b1:cc:d0:3c:36:fc:93:ec:12:e9:1a:89:
                    53:ce:18:33:91:94:12:bb:41:39:f6:97:d1:a2:71:
                    bd:0a:16:22:91:bf:4e:d0:8e:c6:31:2f:ca:36:af:
                    19:a9:51:4b:d5:27:e5:98:b0:57:9b:ca:c7:35:d2:
                    30:26:50:54:62:e5:9c:71:f0:93:4c:aa:ee:ba:64:
                    30:3f:76:ea:95:2d:13:62:9d:eb:80:15:18:e3:64:
                    db:06:8b:68:1c:f0:76:ca:e9:7b:44:13:44:3e:74:
                    9a:13:ee:f2:e8:f5:1d:bd:1f:e4:a7:11:da:28:cc:
                    86:2f:1b:67:03:96:0a:6b:72:5e:c1:e8:cb:ad:59:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C2:47:92:4D:B4:A9:C5:57:79:35:73:EA:FA:D4:2B:2A:5D:0F:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c2c31a8c-9a5a-3f94-8afa-a9f4e53182dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:7a:ec:30:99:b5:87:8d:af:db:bc:f6:34:ed:23:ae:90:
         d2:8b:da:8b:a9:3b:46:83:e5:3e:4a:db:0d:09:94:53:a6:56:
         99:29:8a:74:2b:ab:7f:fa:9b:ce:cc:e1:0b:17:19:5a:4e:c3:
         25:be:32:ea:38:fc:ff:1a:60:9f:0c:3b:d9:aa:ea:9b:98:df:
         aa:47:b7:14:38:5a:d9:06:2d:10:0c:0e:85:89:d9:39:cb:55:
         19:4c:a6:50:af:15:78:e3:eb:d9:d1:b5:20:ad:e5:50:47:5b:
         32:1a:2e:28:88:4e:e7:37:a6:d7:75:af:8c:df:73:3e:4c:b2:
         e3:de:c4:09:42:23:e8:75:0b:b1:1b:02:ae:36:7b:34:92:ee:
         6b:b2:93:af:18:5e:05:99:e1:05:8e:16:02:59:02:24:ab:8c:
         cc:6a:43:4a:d0:6b:d0:62:6a:3d:e7:2f:85:5e:a2:8a:de:93:
         13:47:e1:4f:77:3b:af:45:d7:db:af:17:6d:21:3e:f0:1d:30:
         5d:5e:6f:04:31:7e:cd:75:35:a5:c6:17:c6:37:32:bc:51:1e:
         ee:7e:0e:80:71:94:3b:6f:0b:2e:17:51:3e:f7:b6:98:f7:3e:
         de:63:5b:54:6c:91:82:58:8a:25:53:40:58:d9:e7:2e:74:97:
         e2:3a:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:49 2024 by rpki-client on console-fra.rpki-client.org