Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de8f48f8-46e6-384a-b7b4-6476fd6053f9.roa
File:                     de8f48f8-46e6-384a-b7b4-6476fd6053f9.roa (raw, json)
Hash identifier:          7g5gMPCT3NhyUqewDOQIwnb8LDxqj8NeppOhnlfa+I4=
Subject key identifier:   86:E2:87:D1:7A:21:29:75:BE:C2:54:15:9C:50:5F:E2:AD:3C:BE:61
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B452E842DF58F7DF112900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de8f48f8-46e6-384a-b7b4-6476fd6053f9.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:52:e8:42:df:58:f7:df:11:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=3346314b-82c2-47dd-ba47-7f083348f43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:21:43:27:b5:93:2a:a5:57:62:4a:9a:0b:
                    d5:7d:d2:68:46:e9:53:33:ec:15:ee:17:99:6c:51:
                    eb:ac:fa:15:42:f2:82:51:8e:08:1b:e5:ad:f3:07:
                    2c:67:b7:79:ad:a2:06:f3:fc:b1:a8:cf:41:85:30:
                    a5:4b:77:e2:b8:22:51:b6:74:a5:89:02:85:2f:a8:
                    74:2e:9d:1d:bc:05:4c:23:a2:b0:bc:c1:55:11:72:
                    4a:3d:12:3d:b6:46:85:81:ae:b0:c9:b3:5d:24:07:
                    5a:3e:d4:bc:7b:cd:d5:af:ab:88:41:1a:87:af:64:
                    15:63:d5:3c:d8:63:2c:08:b3:f3:64:65:16:e9:eb:
                    b2:07:96:6a:65:8a:d4:e5:60:4a:fd:7c:b6:b0:05:
                    2d:0f:e3:52:51:54:ac:b3:76:af:8d:60:f2:a6:73:
                    a9:48:41:d2:4d:9e:36:62:80:66:c0:f9:fc:78:34:
                    61:9e:32:44:ee:c5:5e:96:b3:17:9f:db:1a:a1:88:
                    74:57:1f:23:da:c1:a9:7f:1d:23:31:7f:ff:5d:20:
                    8e:d8:9c:68:bd:60:5f:b2:7e:ac:15:a2:32:6d:1b:
                    9e:75:a8:9f:9c:c0:c6:7c:e1:eb:3e:4f:2c:7e:4b:
                    6b:92:63:79:96:15:aa:92:c3:02:72:ac:e3:26:ef:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E2:87:D1:7A:21:29:75:BE:C2:54:15:9C:50:5F:E2:AD:3C:BE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de8f48f8-46e6-384a-b7b4-6476fd6053f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:dc:7c:da:30:ea:7e:60:b2:7e:f9:ea:47:8e:09:c1:f0:
         0c:4a:fc:75:d1:87:ef:2e:d6:11:29:f3:02:d3:c0:32:4b:84:
         43:4a:75:4a:91:92:22:f4:06:ea:95:b3:ab:b1:86:a8:0f:84:
         10:5c:e5:9a:1a:8e:3f:36:5a:58:8c:de:4e:8f:96:8d:f6:75:
         c6:a2:9f:0a:51:57:b9:b1:b7:94:f3:b6:86:a0:a6:ec:9a:ed:
         cc:13:5c:bb:18:9b:64:9e:c7:ad:9a:93:16:27:5f:51:45:5c:
         cf:43:e9:09:7a:4e:a6:ee:cd:04:ac:c1:0f:69:fb:f1:f7:29:
         ea:4e:22:7f:18:fd:04:23:ad:84:82:c7:76:ad:47:8c:f8:0e:
         10:c9:a7:8a:d4:f2:e0:61:43:07:f1:03:9d:e6:0d:b7:fe:c5:
         31:2d:7b:10:2b:03:d0:90:89:b0:2e:35:ba:e0:44:c6:4c:83:
         99:50:6b:4d:b3:7b:d0:18:69:04:57:57:84:09:cc:be:a5:32:
         36:8e:21:e7:07:f3:b3:ce:ea:75:bb:89:f7:8d:0b:82:92:7f:
         f6:e2:8b:54:6f:2b:68:04:1f:04:62:72:57:d2:03:93:75:26:
         de:b4:c0:73:c5:65:b6:e4:1f:16:28:cb:77:30:43:77:74:ad:
         b3:0e:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:51 2024 by rpki-client on console-ams.rpki-client.org