Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04916ff2-c1f8-30fe-9927-59398f16e615.roa
File:                     04916ff2-c1f8-30fe-9927-59398f16e615.roa (raw, json)
Hash identifier:          huFoXmgWrZJnlCnDo4aQ4EF+pQ36UKfHYfHcQafJtjE=
Subject key identifier:   2E:6C:9C:B5:40:5D:4B:63:FD:08:07:42:7C:27:EB:12:69:BF:26:1A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12988214126A71F344BD80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04916ff2-c1f8-30fe-9927-59398f16e615.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     7122
IP address blocks:        204.112.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:98:82:14:12:6a:71:f3:44:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=52e5d147-93e0-4fd3-8124-cc8bc98d4d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:62:8c:0f:df:2f:04:bb:12:48:61:80:2b:
                    c6:dd:f8:c7:08:ba:f8:3a:88:0e:3c:d5:1a:3f:fb:
                    1b:ae:fb:52:89:1a:6e:d5:ef:25:16:72:f4:35:ff:
                    dd:b9:9a:b8:b3:95:a1:37:27:fb:6a:70:c1:c6:59:
                    a3:06:08:d8:c9:37:cc:2d:d6:7f:9f:4a:44:92:b5:
                    d9:6a:fa:ae:9f:dc:33:30:d5:f5:da:58:76:a3:21:
                    22:d8:77:5e:d2:c8:0c:b0:23:9a:30:be:ee:35:fa:
                    02:86:5a:b9:c2:d5:43:0b:a4:bd:6d:9f:7b:0e:16:
                    63:3f:ac:fa:4b:eb:04:8b:ed:96:d7:db:8b:c1:d8:
                    e9:55:25:92:41:86:65:d3:63:66:b4:6d:da:82:26:
                    61:f7:50:4f:00:95:93:46:25:5e:93:9e:82:3a:c3:
                    f7:19:4a:c6:92:ed:18:60:f4:58:d8:34:85:5d:ce:
                    db:a8:35:4e:5f:48:8a:92:10:d6:8f:88:5b:43:ae:
                    61:e6:d6:26:f1:45:74:87:37:7b:f3:c8:39:56:53:
                    55:e0:9b:a2:c1:fa:22:07:34:ef:f6:0b:bf:65:c0:
                    90:58:92:67:5b:02:64:72:0b:1f:8f:56:3c:45:ae:
                    49:6d:a5:72:06:02:ad:88:fc:84:62:8e:f7:d5:4e:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:9C:B5:40:5D:4B:63:FD:08:07:42:7C:27:EB:12:69:BF:26:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/04916ff2-c1f8-30fe-9927-59398f16e615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:b1:d3:64:55:9a:e1:65:e4:28:20:32:4d:38:0c:98:40:
         69:e7:09:16:5c:ef:6b:22:d2:08:bf:03:f2:71:26:a9:7d:0d:
         e4:1a:7a:d8:56:cc:f2:ed:3f:d5:00:28:10:26:f3:6b:a3:86:
         b8:9a:83:26:24:28:15:be:e6:32:ae:a7:8f:86:b9:88:33:c5:
         39:51:6c:bf:a2:8c:1b:98:91:6c:3b:ea:a1:80:b2:05:ba:45:
         e1:4d:23:e3:27:64:4a:17:a3:bc:61:28:45:37:8a:d2:17:49:
         ba:60:e0:e5:3a:0c:86:ee:82:de:2b:78:2a:ac:e6:a3:08:45:
         86:61:69:8f:3d:44:42:cc:89:48:c9:49:ab:6f:70:e3:6c:fa:
         30:9f:21:85:1f:71:c2:6e:28:41:78:47:d0:75:2b:7d:fb:f7:
         9d:08:94:55:56:5e:88:4a:84:0c:40:b9:30:7d:59:b1:31:38:
         dd:f4:a0:d2:d4:86:19:a2:ba:89:a2:e6:ee:e4:c8:61:9b:6c:
         e6:4d:35:5d:ee:ae:ee:5e:29:ad:82:36:76:c7:1e:f7:c5:3d:
         bc:a8:30:6a:1b:f8:8f:d9:e8:5e:d1:da:01:76:de:c1:92:30:
         ae:f1:b6:0d:77:7f:19:36:63:58:8c:63:66:64:4c:49:83:9e:
         2c:85:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:00 2023 by rpki-client on console-fra.rpki-client.org