Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c46a1007-fa51-3ac9-a6e1-7bba81bc8c72.roa
File:                     c46a1007-fa51-3ac9-a6e1-7bba81bc8c72.roa (raw, json)
Hash identifier:          +giUNC15RPaPvfM3Ce/LMmMo1rOszf1AJczpVK8eQJc=
Subject key identifier:   23:2B:DC:73:95:31:E1:24:4A:63:9E:24:41:DA:D0:75:41:DF:AD:99
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B436C78B6C97A77EC11B40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c46a1007-fa51-3ac9-a6e1-7bba81bc8c72.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     21723
IP address blocks:        204.101.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:36:c7:8b:6c:97:a7:7e:c1:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=d73d77fd-aa57-4617-b2af-fa021cf7eb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:23:bb:8e:b9:9b:1e:70:2f:2c:f6:0e:92:
                    d1:f3:50:ea:32:fa:80:f8:24:7a:79:02:3b:2e:77:
                    35:6d:60:c1:25:bd:ad:a9:78:9d:a7:ea:ed:8d:17:
                    85:26:ca:7a:fc:d9:2f:31:12:da:78:62:fb:ce:42:
                    02:87:24:eb:34:f0:6d:d0:30:ac:f6:73:68:82:eb:
                    ca:52:3f:83:cb:ac:ce:54:60:b8:fe:b5:5e:3d:09:
                    8c:e7:75:ad:92:cf:1d:79:f2:6a:26:3c:98:7c:c3:
                    ab:89:17:c3:72:77:d3:a8:07:73:62:6f:3e:f8:c9:
                    32:a7:1d:22:ec:c2:71:42:a4:ff:ea:14:e3:5d:13:
                    1f:e0:38:86:c9:72:76:c0:72:ff:4b:14:21:99:3a:
                    ae:a0:e3:b6:5a:71:2f:53:90:71:e3:f6:9c:f3:aa:
                    cb:8a:4e:7d:16:df:1c:eb:ba:d7:96:62:7e:65:02:
                    02:9a:ab:cd:c5:fa:91:ad:d4:18:69:b7:f4:24:e3:
                    8c:60:a2:2b:d4:f2:04:86:bc:75:e5:b2:75:9b:f1:
                    cf:5d:47:f4:cd:16:2d:91:f3:55:16:1c:5b:82:17:
                    50:3a:47:08:9d:66:99:ca:a7:30:b5:a3:9f:c6:e6:
                    60:1c:71:72:bb:37:51:6c:a5:51:11:0f:50:0f:63:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2B:DC:73:95:31:E1:24:4A:63:9E:24:41:DA:D0:75:41:DF:AD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c46a1007-fa51-3ac9-a6e1-7bba81bc8c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:97:1b:82:71:bb:4d:d3:da:6a:b8:6e:a2:e0:6a:5f:11:
         36:a6:8a:75:64:a2:6c:87:24:40:94:26:82:da:4c:f6:27:e8:
         b8:24:39:2f:af:d4:b0:d9:a7:54:03:31:cd:e1:a3:60:c4:1c:
         f8:f1:7b:31:ad:36:e8:1e:b4:bc:e2:d1:09:2d:ed:cb:01:9e:
         c2:57:53:f1:fd:49:68:44:ad:3a:cb:f9:04:51:26:01:f2:3e:
         6b:ac:b1:24:09:1f:df:0e:01:ed:2a:8a:8f:78:ce:54:cc:6c:
         dc:3a:58:16:05:77:a0:ee:3b:5f:28:15:8c:8a:61:3c:91:f7:
         ec:e4:67:f6:ec:c5:ba:f0:95:94:24:ba:f1:49:a1:2d:25:3c:
         6f:1a:28:c6:42:f7:b8:d0:72:aa:85:76:e7:8c:0e:f5:00:67:
         45:3a:f9:7d:db:21:f6:4f:c4:65:5a:16:56:6a:9e:1d:54:76:
         0b:13:98:bc:a4:de:08:58:9b:ea:ba:f9:fa:d2:4a:0f:71:e5:
         69:59:31:ae:13:e6:97:ac:07:c6:4e:39:c8:52:7e:96:41:06:
         f2:40:05:cf:aa:e0:1e:1e:a8:b8:6b:b5:ed:68:12:70:80:dc:
         37:fe:7f:83:89:a6:13:e9:79:dd:3e:f3:a9:cf:76:d5:e5:29:
         de:09:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:37 2024 by rpki-client on console-fra.rpki-client.org