Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d0de715-6367-3889-b6df-20e8435df9c4.roa
File:                     1d0de715-6367-3889-b6df-20e8435df9c4.roa (raw, json)
Hash identifier:          XV05pzxRQ/jZX5MgBj6caSL5wypK3sRnO2EQgmdTLko=
Subject key identifier:   43:A3:50:17:6B:BA:0B:AC:E7:7E:B9:87:D2:02:59:32:E2:AA:B4:80
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3D847B7CA6E7AB515F4D0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d0de715-6367-3889-b6df-20e8435df9c4.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:d8:47:b7:ca:6e:7a:b5:15:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=fca5013d-2b63-4ece-90a6-9bcf0e0a8dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:a5:05:47:a0:c5:40:e0:63:82:bd:d7:7a:
                    7d:0d:c4:6e:6d:60:13:59:28:7e:03:85:74:be:54:
                    37:9e:1a:3c:af:90:6b:0e:42:4c:57:b1:69:58:e4:
                    36:39:dd:8b:1b:07:67:43:87:74:75:f9:6a:9b:80:
                    32:de:86:b9:34:83:e9:a0:b7:a4:b8:cf:0d:a6:4d:
                    7d:8e:ce:f2:d0:df:6b:c7:10:bf:17:e6:1f:1b:f3:
                    05:78:8b:f4:f4:1c:cb:1f:2f:df:a8:69:53:49:35:
                    d8:81:18:60:75:96:02:8b:c1:25:66:6c:dc:03:02:
                    21:45:3b:36:23:94:4d:be:df:08:84:51:1e:94:0d:
                    3c:3e:bb:af:54:b5:a6:7a:2f:5a:45:4a:fd:13:82:
                    42:ae:fc:b2:4e:fb:a6:34:4a:3f:90:0a:d5:7c:ab:
                    86:50:68:6a:ca:9f:dc:a3:69:40:e9:c8:12:38:5d:
                    cc:22:1c:84:a2:b9:07:ce:ff:47:a3:40:4d:08:16:
                    cd:4a:f3:2d:9a:f7:a1:79:33:0e:6e:9a:27:6a:68:
                    19:22:fb:a0:e1:bd:cb:98:5b:ac:85:f2:f6:87:76:
                    c1:de:ab:26:d4:5f:49:2c:90:f3:85:01:4e:70:34:
                    c2:78:12:ed:fb:da:3d:d9:ed:af:ed:f4:41:7d:1f:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A3:50:17:6B:BA:0B:AC:E7:7E:B9:87:D2:02:59:32:E2:AA:B4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1d0de715-6367-3889-b6df-20e8435df9c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:73:a0:07:27:8a:76:25:86:80:e2:51:99:22:0f:95:f8:
         62:35:74:d7:4b:f9:38:fc:d4:67:03:a8:57:74:c8:79:26:57:
         17:70:8c:37:38:c0:b3:eb:e0:f8:7a:ea:d0:93:69:54:bc:a2:
         a5:52:c2:b5:d4:07:ba:df:72:a6:cb:89:30:df:58:f4:a8:08:
         da:e0:0e:fc:64:df:85:9b:3a:6d:86:68:fe:f3:e8:84:f9:b3:
         ed:fb:0e:a0:79:04:a1:eb:c3:39:df:bf:59:1e:2c:e5:79:06:
         28:dd:d2:e9:19:41:ee:1c:ff:81:9d:13:a2:39:7b:3c:c8:fd:
         eb:a0:46:1d:bc:45:c8:e3:ca:3e:3a:40:b0:e2:fc:a0:4f:d0:
         5e:28:d7:b8:97:98:3f:ea:59:af:47:34:70:f2:af:fc:22:66:
         b4:3f:0e:33:40:a1:5b:79:fe:bd:4d:ab:d7:c3:5c:7f:d4:c7:
         83:65:72:9e:3c:5b:bd:ed:89:e8:ec:e7:5e:e2:f6:6f:9b:d3:
         af:0b:f5:0f:40:3a:c5:47:5d:d2:bc:52:61:b0:e6:fe:de:3e:
         3b:a9:15:f7:92:c6:b1:5d:5b:6d:ad:fd:2e:00:32:98:f7:84:
         b5:a7:f9:c7:dd:52:8e:31:84:e4:f0:68:bf:9d:1f:46:e3:bb:
         bb:f4:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:53 2024 by rpki-client on console-fra.rpki-client.org