Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7fc3166-f860-3b9c-ae38-7955f57bfa2c.roa
File:                     d7fc3166-f860-3b9c-ae38-7955f57bfa2c.roa (raw, json)
Hash identifier:          5vSMYs1rTFPLDCGBoLbtSuSbw78nLHFZqGmdUnudXlA=
Subject key identifier:   79:EE:0D:BE:20:D9:03:DE:BD:75:54:61:E2:C9:42:CF:87:9D:47:E2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3CE39510CDBD8E8319B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7fc3166-f860-3b9c-ae38-7955f57bfa2c.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:ce:39:51:0c:db:d8:e8:31:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=79e07c6b-537d-434d-af08-4efa0cd36219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:c3:8c:6e:a6:23:49:c5:f6:bf:c9:13:2c:
                    21:b4:92:15:89:ab:45:2e:06:ce:c8:e9:a2:96:65:
                    c5:85:01:5e:54:a5:99:b9:8b:bd:cb:bd:c0:47:79:
                    a3:62:c8:14:fc:67:f3:17:d2:87:ad:fb:c2:15:b5:
                    16:47:50:16:c3:d6:5f:9f:69:43:9e:2f:46:19:eb:
                    75:94:0c:14:31:bd:74:ef:5c:20:85:61:f9:3a:33:
                    76:91:2d:45:c2:88:e4:2d:80:48:97:66:23:4a:1b:
                    0c:fd:23:db:6d:2a:4c:82:ca:e3:55:11:76:c2:1b:
                    84:f3:d4:af:2e:a1:2f:79:70:09:6f:6c:ea:9a:32:
                    a5:98:93:24:59:09:a0:2b:2e:92:7e:3e:f8:e5:83:
                    54:36:62:92:5a:02:78:b5:9a:b1:3f:c3:9a:44:fe:
                    55:24:0f:01:c7:cb:72:a0:ac:d0:85:39:cf:14:a2:
                    69:55:64:0c:26:6e:65:95:e8:a9:19:3d:51:3c:fd:
                    50:bc:12:c3:4f:b3:36:a8:2e:c4:32:00:fa:df:10:
                    db:a4:a2:29:f0:31:6c:7e:b8:91:27:c1:23:52:2f:
                    0f:40:4d:0f:7f:b5:40:03:58:ac:d9:c5:fe:60:10:
                    28:3d:fd:2b:ff:7a:0b:cb:60:10:ff:c4:8d:5c:1a:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EE:0D:BE:20:D9:03:DE:BD:75:54:61:E2:C9:42:CF:87:9D:47:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d7fc3166-f860-3b9c-ae38-7955f57bfa2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:13:ad:ce:68:e3:63:4b:f6:ea:ee:ef:08:93:b2:8b:13:ad:
         aa:92:1f:31:be:cd:e1:e6:22:6e:f1:79:dc:c8:77:33:ef:7f:
         b8:72:a9:1c:b1:6e:be:88:e2:f6:6e:0c:b9:a8:a0:c4:9c:b0:
         c0:94:5d:7f:44:6d:f3:bd:04:82:94:79:f1:e2:3f:cb:a0:46:
         20:e6:15:9d:b5:76:7c:3d:3f:29:ae:a1:e6:5b:31:53:53:b3:
         35:35:0c:1f:52:60:87:b8:1a:f7:3b:87:80:6d:fc:49:b5:95:
         d0:f4:3b:8f:12:ee:b9:c4:35:fb:89:ab:ec:de:ee:48:a2:1a:
         9e:3f:53:10:3e:48:6f:52:33:95:9d:aa:38:de:76:96:d0:fd:
         d9:00:f7:78:ca:26:d1:72:f8:02:b6:c2:4c:a3:89:60:18:e6:
         0c:98:c6:87:47:b4:b3:81:f5:05:47:78:8a:08:68:35:c5:74:
         ba:1d:b6:a6:df:04:54:51:f9:a9:90:5e:20:93:19:80:9b:25:
         06:f3:e1:8f:6d:e3:7a:6d:ee:1d:dd:b0:a7:a6:34:26:52:58:
         fd:b4:e8:f8:fa:0f:39:06:13:16:0a:fd:4f:d7:ba:6f:b9:28:
         16:7f:02:0b:68:cb:38:83:e3:44:39:a0:a2:9b:d4:b3:8c:39:
         de:2f:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:37 2024 by rpki-client on console-fra.rpki-client.org