Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/1ba36009-9e40-3cc3-b6b7-8fc822b83b72.roa
File:                     1ba36009-9e40-3cc3-b6b7-8fc822b83b72.roa (raw, json)
Hash identifier:          O4G/+FGjuJJtEF1SFh/RLIRoEgaIPRfyPbLkXEJmPLk=
Subject key identifier:   7A:6A:3A:0D:07:58:B3:C5:D2:E3:5D:2C:33:E4:C2:10:3E:FD:59:56
Certificate issuer:       /CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
Certificate serial:       010D0C9F432858454272C195308B57FC94775258
Authority key identifier: 7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/1ba36009-9e40-3cc3-b6b7-8fc822b83b72.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     3477
IP address blocks:        140.90.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c1:95:30:8b:57:fc:94:77:52:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4304a9ea-ddad-4442-bdab-8d8916ff78f9
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=3a91bf70-1a88-490d-8c53-7d110e98b40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:4f:d0:52:50:90:7f:83:83:15:17:c3:82:
                    54:ee:38:07:32:7c:8a:a6:1a:ff:28:ee:0f:67:db:
                    eb:1e:72:95:05:ad:19:de:48:74:06:0e:e4:49:f8:
                    8c:b7:08:47:1e:e0:d7:b5:b6:f8:28:5a:3a:b1:5d:
                    1a:17:af:98:6f:05:54:86:19:26:79:97:a8:b9:97:
                    a2:b7:b5:81:f4:d2:dd:b1:41:53:ad:60:f8:c8:34:
                    bd:aa:b9:72:b6:0f:fd:39:49:52:d3:3d:85:e7:ab:
                    7e:47:05:56:80:f8:6d:07:34:43:13:53:ec:c8:81:
                    99:fa:30:e4:65:9d:ab:6f:6c:da:28:da:5c:ad:94:
                    5f:9b:74:79:d1:57:95:04:67:64:b6:b5:7f:49:d7:
                    72:2e:5f:df:f3:1d:0f:f9:46:c8:4f:09:4f:3c:28:
                    5a:fa:02:d2:1d:14:a2:fe:4b:45:e6:52:82:72:21:
                    fe:83:79:4f:34:61:f7:e8:49:84:53:fb:e1:72:36:
                    17:4b:07:dd:e2:95:55:6f:fa:a7:9e:31:36:d1:5b:
                    22:5e:3a:9f:4d:8e:d0:6f:8e:d6:14:fd:4f:f3:e5:
                    db:21:e1:d1:66:a9:cf:4e:df:5f:0e:37:9d:7e:8a:
                    b7:84:f7:53:20:ad:8d:3f:90:05:ee:be:21:10:b7:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:3A:0D:07:58:B3:C5:D2:E3:5D:2C:33:E4:C2:10:3E:FD:59:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/1ba36009-9e40-3cc3-b6b7-8fc822b83b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9/4304a9ea-ddad-4442-bdab-8d8916ff78f9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:62:15:02:42:21:A7:BB:9B:3A:C8:99:DA:C2:CB:8E:23:28:B4:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4304a9ea-ddad-4442-bdab-8d8916ff78f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:fe:74:f6:00:a0:96:25:4d:ee:6e:61:f8:26:13:7a:31:
         05:fc:ab:2d:20:e1:00:cc:38:35:9a:6e:ab:94:8b:f3:0a:5c:
         ac:f1:73:31:2a:80:b7:03:20:9a:88:dd:3c:c2:0a:0a:1b:16:
         28:89:f6:08:6e:bf:24:9d:c2:5a:c5:b3:f5:86:79:13:e6:da:
         0a:22:49:ab:d3:78:b1:93:ff:13:58:0c:9f:9a:40:85:4f:7f:
         1b:26:b4:57:c1:1c:af:9b:15:2b:c5:34:8d:ea:15:df:15:a5:
         7b:41:de:3a:23:39:4f:23:cd:b7:91:07:f4:74:f1:53:48:db:
         3c:a5:4b:34:1d:35:20:08:45:f7:47:a7:df:3a:c9:af:72:57:
         dc:2f:01:2a:f2:e6:28:b5:0a:cb:67:c1:ce:08:3c:11:fd:19:
         52:06:90:6b:1e:4d:43:b8:07:ef:db:45:a9:8b:11:de:ba:56:
         5b:0b:29:95:ea:94:2e:04:93:b4:60:62:37:b7:94:ff:f9:78:
         13:b4:ea:df:21:65:89:b9:34:bb:67:5c:c2:a6:1c:79:a4:92:
         e9:28:c0:ee:4f:fb:f3:fc:8d:82:a3:6e:a4:53:1c:df:39:26:
         e0:08:8c:08:48:7a:dc:02:bd:30:b6:3d:dc:c3:f8:99:66:8a:
         5d:8d:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:40:39 2024 by rpki-client on console-ams.rpki-client.org