Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/56a0c15f-df84-39d1-82d9-c555859100bf.roa
File:                     56a0c15f-df84-39d1-82d9-c555859100bf.roa (raw, json)
Hash identifier:          eOwGERa7jQkLzf/vvSqKlZWmc2UkPu+gJsTi58mYBm8=
Subject key identifier:   1D:09:F4:20:CE:91:93:29:2C:6C:51:D4:4B:36:57:A7:D0:9E:A6:F7
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F432858455498240992BD774039E47080
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/56a0c15f-df84-39d1-82d9-c555859100bf.roa
Signing time:             Tue 26 Mar 2024 01:00:25 +0000
ROA not before:           Tue 26 Mar 2024 01:00:25 +0000
ROA not after:            Mon 24 Jun 2024 01:00:25 +0000
asID:                     62651
IP address blocks:        216.151.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:98:24:09:92:bd:77:40:39:e4:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: Mar 26 01:00:25 2024 GMT
            Not After : Jun 24 01:00:25 2024 GMT
        Subject: CN=1cff87d3-f032-4316-bb9d-e2d3d79f6580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:c8:4f:fd:3b:90:83:3d:56:24:b2:31:35:
                    a8:f8:1a:a9:eb:4e:02:48:79:3a:fa:2f:2a:d7:5e:
                    49:89:db:c7:ae:f0:6d:7a:01:35:d6:c1:b8:28:0f:
                    58:37:e6:64:c6:40:c3:2b:80:5b:17:41:43:54:1a:
                    2f:20:ad:da:72:28:e2:fa:4b:43:18:05:f9:5d:79:
                    6d:8a:b3:08:e3:52:34:ad:87:2d:61:14:72:f7:68:
                    2f:ff:1b:ce:4d:7b:6b:92:85:69:ff:bb:03:bc:08:
                    81:e7:37:39:11:86:de:76:16:cc:d0:3e:ea:b7:8f:
                    eb:ed:bf:8f:30:e4:8c:33:a9:e3:31:e6:55:9c:60:
                    e7:83:f4:11:13:66:5f:14:3f:b0:d8:a2:a7:e1:d5:
                    cd:2c:0e:e4:fd:dc:6a:dd:46:f6:2a:e4:cd:d9:3f:
                    db:92:70:87:76:5f:b9:d5:3a:44:d0:f6:1e:c9:e8:
                    a1:47:ac:fe:4b:e7:0a:8b:24:c2:9b:f1:78:7d:c0:
                    ec:40:d3:26:7e:05:a7:45:12:75:8f:27:0f:f8:ee:
                    04:69:cf:44:71:f5:78:a1:0c:60:6c:a5:d5:db:05:
                    15:60:67:e6:50:91:f2:f0:57:e6:86:0e:73:84:9f:
                    cd:3a:17:bb:a1:51:d4:25:f3:07:cd:de:11:e5:54:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:F4:20:CE:91:93:29:2C:6C:51:D4:4B:36:57:A7:D0:9E:A6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/56a0c15f-df84-39d1-82d9-c555859100bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:69:5d:32:ee:58:9f:aa:c3:c8:5f:cc:d3:a5:78:dc:0a:
         c5:12:d4:cc:40:6f:21:0b:79:55:42:09:2e:c7:84:49:33:d0:
         8b:d7:b0:67:f0:15:4e:00:34:da:0b:a0:49:eb:e3:3b:50:e1:
         0b:be:9c:0f:18:6f:10:19:e1:58:d9:20:47:9f:c0:9c:4f:1c:
         97:a9:e8:a7:0a:74:51:0a:2c:c6:ea:7b:3f:8a:10:4d:6c:ee:
         9e:61:3d:99:bb:dc:cc:42:88:8a:ed:8f:ad:2f:cd:ff:be:3b:
         9b:43:b0:f2:e7:15:36:ba:6a:04:21:ca:f8:5d:7d:e0:d4:84:
         e9:7e:46:c5:c8:bd:28:52:20:70:f1:db:55:76:f1:f9:b7:34:
         29:5f:ae:73:2b:48:b0:03:a5:bd:16:a3:f4:ad:62:c8:e2:33:
         2b:33:12:96:8c:01:06:70:39:f8:94:74:d9:87:d8:73:35:28:
         5e:02:b2:a0:4a:99:39:7a:aa:62:8d:b4:95:ff:39:b5:db:fc:
         6f:30:04:5a:b8:c6:21:4a:4e:fc:c3:d9:d8:08:4f:51:9e:e6:
         da:49:f4:5b:17:82:4e:13:56:0a:b2:52:8f:8c:6a:9e:80:ab:
         0f:36:80:89:31:78:1a:1e:cc:d8:32:f6:96:4c:b7:11:9a:a8:
         4d:87:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:01:29 2024 by rpki-client on console-ams.rpki-client.org