Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10f02ac9-ae3a-3905-828e-ba83ca48638c.roa
File:                     10f02ac9-ae3a-3905-828e-ba83ca48638c.roa (raw, json)
Hash identifier:          4hZ/42u8z6AEoHN7erycXKcH9YJW+9qEA7EDCxPVf4Y=
Subject key identifier:   0D:46:74:14:09:6D:9C:1F:EE:13:1F:B1:98:9E:2F:CD:8E:26:6D:A0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B58CA70B0BACDDBB5FAC40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10f02ac9-ae3a-3905-828e-ba83ca48638c.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     40575
IP address blocks:        209.128.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:8c:a7:0b:0b:ac:dd:bb:5f:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=51c05a01-7aa2-4268-a493-d7d17af52005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:30:9f:7b:5d:09:3d:76:cd:74:e6:8d:d5:
                    5e:be:23:72:14:c7:c1:2c:c6:fc:72:1a:4e:e2:dc:
                    73:50:5d:4f:6f:f9:ef:1a:7c:76:6a:35:e1:92:cf:
                    35:cc:d3:16:1b:fe:9d:c7:56:dc:50:64:f1:32:ce:
                    e6:1e:6f:a7:14:28:a5:9d:97:ac:11:95:39:d7:35:
                    f1:e8:7d:e8:f3:56:71:cb:51:92:20:8a:fb:e1:73:
                    84:0b:e8:31:27:b5:58:76:5a:2b:c0:40:3e:91:02:
                    49:b9:53:70:a3:3a:20:d1:a2:72:62:ff:74:70:7b:
                    47:c8:29:35:65:89:78:e6:e2:fe:64:4b:50:6b:6b:
                    05:7b:fa:a0:9d:27:0e:49:f6:f4:8c:e1:d2:cb:6d:
                    10:b3:93:ef:b5:72:1f:c5:23:8a:58:90:d7:00:72:
                    e7:ac:9c:11:01:df:29:65:48:e2:17:21:31:94:b0:
                    d3:93:27:4b:86:cb:19:59:97:30:3c:eb:89:10:e6:
                    9d:94:39:64:8a:57:95:db:6e:c6:58:ff:a9:51:e5:
                    6a:3d:84:fc:8c:a8:ee:8c:49:fd:af:1f:ff:98:19:
                    a3:8d:d2:8f:d8:09:55:01:cd:36:60:2f:12:3e:a8:
                    2b:78:7f:27:28:99:56:e8:e0:d9:c2:5e:e4:c0:85:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:46:74:14:09:6D:9C:1F:EE:13:1F:B1:98:9E:2F:CD:8E:26:6D:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10f02ac9-ae3a-3905-828e-ba83ca48638c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ef:ff:24:4b:7c:07:0c:97:84:18:79:79:d5:bb:45:00:ff:
         18:c2:e6:e6:5c:25:3b:79:31:c5:c9:43:f4:1f:94:f9:13:40:
         f7:70:b0:8f:6f:c5:17:da:74:3d:ac:d5:7f:5b:0e:63:ec:b6:
         70:f3:1d:68:89:85:41:11:a0:bc:35:21:0f:be:65:b4:1b:3d:
         90:70:b0:ef:ee:ce:b7:8d:90:3b:54:2e:77:a5:7c:71:61:b9:
         b3:39:bd:51:59:8d:06:85:b4:7f:34:af:b5:9a:5a:6d:5c:c6:
         e8:f2:75:68:64:ad:38:dc:38:6a:bf:56:c4:ca:3a:c4:6b:ca:
         61:88:a2:f4:41:2a:3d:0d:ce:fa:a6:0a:dd:8e:65:28:1e:aa:
         b8:3c:02:b7:dd:9e:29:bb:13:f1:23:96:81:97:7d:4c:a1:3c:
         74:09:ce:d5:5d:dc:b3:f4:a0:16:82:44:aa:45:d9:f0:54:7c:
         0c:e1:67:1f:70:58:59:4b:b3:36:58:9c:28:70:5d:e1:7f:4a:
         20:a4:c7:f5:5f:c8:53:20:ac:a3:f6:7a:d9:8c:ca:84:85:53:
         8a:7c:3b:06:e4:7b:cb:e1:c0:32:02:ec:53:dc:89:39:c1:e4:
         56:bc:fe:42:bb:ee:35:cb:af:ab:ea:09:2b:19:79:ee:da:6e:
         85:0b:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:59:42 2024 by rpki-client on console-ams.rpki-client.org