Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14ba987b-68ff-3373-8270-aa3105966a34.roa
File:                     14ba987b-68ff-3373-8270-aa3105966a34.roa (raw, json)
Hash identifier:          YEpFmTmSK78yTBfyyrWRgusArvUmO79YG7BraTZdg/A=
Subject key identifier:   16:09:54:C8:76:DB:B2:96:66:BE:4F:08:04:7B:F2:97:B9:4B:E0:41
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B41BF99EE9D5C29FA2B180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14ba987b-68ff-3373-8270-aa3105966a34.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:1b:f9:9e:e9:d5:c2:9f:a2:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=f8a36263-1df7-4469-b825-62f9a822a211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:09:ac:51:c8:d5:ef:5c:b7:11:15:24:c9:db:
                    95:cc:db:d2:f7:78:d2:2a:d5:12:87:63:2b:93:21:
                    a9:04:47:d2:1c:93:da:1b:2d:b7:55:05:24:ae:8d:
                    77:1b:9d:90:df:ef:d1:05:ed:eb:0d:17:5a:9a:bc:
                    91:35:39:36:00:de:43:a9:51:b3:af:48:e2:98:e1:
                    8e:c6:6e:91:22:e2:30:9d:aa:11:15:f1:94:a9:dd:
                    7f:3f:85:c1:50:fe:63:ab:91:87:67:2e:5f:d9:ac:
                    04:4b:25:3a:c0:9a:11:8c:dc:e9:7c:de:8d:5b:2a:
                    b5:86:40:9a:ab:4e:76:db:06:94:8b:8c:a6:9e:36:
                    5d:47:f1:99:1d:74:85:bc:13:24:00:5b:a2:15:2a:
                    72:5f:44:65:b5:48:4f:7c:6b:e2:d7:bf:53:44:38:
                    d3:a9:9c:3b:86:f7:3a:da:3e:84:ad:f1:c0:7a:be:
                    74:99:51:bc:68:c4:aa:1b:3e:46:f2:55:cc:31:08:
                    57:e7:3d:5f:a9:0d:e5:c5:36:fd:37:af:aa:1b:74:
                    54:1c:06:39:47:71:23:79:8a:64:fa:59:47:81:14:
                    40:db:0d:6b:8a:07:30:09:63:3e:cd:6b:5f:f1:78:
                    3e:cb:76:c0:f6:66:53:f5:e5:bf:88:88:d8:bb:94:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:54:C8:76:DB:B2:96:66:BE:4F:08:04:7B:F2:97:B9:4B:E0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14ba987b-68ff-3373-8270-aa3105966a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:6d:06:cf:fd:2d:bd:bc:ac:80:4d:67:72:39:4e:49:10:
         40:b9:54:25:52:ba:2d:27:ef:54:5f:0e:44:96:58:a7:69:54:
         e6:4e:a1:09:84:7e:da:00:8c:3c:c0:68:98:ed:96:bb:97:80:
         5b:b4:b2:c8:ae:de:bc:37:05:f4:f7:54:3b:15:93:cb:c2:aa:
         95:14:18:12:9b:7b:71:c2:d6:f9:22:76:48:45:b7:05:b4:8b:
         ab:4d:9e:83:02:cd:74:8b:33:52:e7:8f:4f:75:dd:b2:98:9c:
         e5:60:80:e0:91:c3:01:d9:58:0a:68:7e:ea:fa:42:05:ab:27:
         5c:3c:64:1c:20:02:1d:5d:3d:16:f4:74:8d:11:9f:c2:0d:22:
         a4:f7:f3:46:86:61:78:9c:44:7c:8d:25:c0:0f:6b:a0:43:8b:
         68:1d:bd:28:a5:6d:55:64:35:dd:03:e7:dd:74:a5:ac:e7:6e:
         9b:91:4d:e7:25:0a:08:b2:d2:10:d3:6a:00:48:d3:72:bb:4e:
         5b:85:9f:5a:09:3d:d1:13:ee:7c:98:07:82:63:dc:ff:1f:a0:
         86:eb:0f:4f:dc:db:10:ee:19:61:f6:79:8c:b0:a5:a1:2a:4c:
         12:bb:8f:09:69:8a:50:29:19:8d:0e:95:12:4c:b3:49:5c:a2:
         7f:af:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:07:18 2024 by rpki-client on console-ams.rpki-client.org