Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2122baac-97b8-3b34-8c74-772f58e1b41b.roa
File:                     2122baac-97b8-3b34-8c74-772f58e1b41b.roa (raw, json)
Hash identifier:          ASL+kMoJrr7iQJAjwAzQk4kfr9GA/bbd5exxaVxdojU=
Subject key identifier:   96:C1:AB:82:62:7F:6D:73:06:75:25:4F:67:CE:A3:4B:C7:D1:DA:16
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F7D39DAD87D3416E34B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2122baac-97b8-3b34-8c74-772f58e1b41b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        184.151.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:7d:39:da:d8:7d:34:16:e3:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=f1a852a0-74e9-4c6f-9c27-f890376d5d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:e1:94:62:90:d2:18:56:89:c9:d6:01:0b:
                    c9:d5:80:33:c2:ec:bd:f5:12:90:45:b0:fb:ce:ec:
                    42:74:be:ff:29:e2:1e:62:eb:3b:fc:49:98:51:de:
                    00:1d:50:50:4d:27:ae:10:bf:d3:56:2e:e5:0c:0f:
                    89:2c:c3:7a:dc:31:c6:01:89:ed:2c:30:30:c3:66:
                    81:3b:13:38:88:8c:4a:0c:43:c5:cc:7c:c4:02:47:
                    e9:ef:1e:d6:ee:1c:0b:cc:2e:e0:b6:b5:bd:ce:c9:
                    3d:e6:48:34:f0:a5:79:ca:e8:3a:8c:47:2f:ae:36:
                    a6:6b:80:28:ac:e6:7e:99:a1:2c:b6:ba:5b:bb:7c:
                    11:bc:e2:59:06:d7:f6:c3:ee:f3:fa:71:10:b7:fa:
                    8d:70:e1:7e:b2:82:1f:38:1f:d7:d1:16:18:a1:b3:
                    48:65:ac:3e:d0:77:6a:d6:e2:0d:0e:29:b9:62:c3:
                    11:01:ff:df:58:9d:53:fb:32:42:cd:24:38:b2:b0:
                    32:bd:cc:71:7b:2d:55:e5:5d:56:d4:28:48:e3:0d:
                    b7:95:af:ca:38:c1:31:60:33:25:78:a6:75:4c:a8:
                    8c:be:70:3a:49:a8:3a:3c:90:96:c8:2c:f9:ec:03:
                    44:bc:a4:bd:df:15:8f:8c:95:35:3e:9e:c2:66:c8:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C1:AB:82:62:7F:6D:73:06:75:25:4F:67:CE:A3:4B:C7:D1:DA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2122baac-97b8-3b34-8c74-772f58e1b41b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:2b:cc:97:63:f9:40:13:d5:ae:9e:52:d3:02:ac:04:d4:
         99:bd:ba:7c:f5:47:fa:3e:1e:62:e2:a7:d9:51:a8:ab:59:d8:
         55:0e:eb:ec:63:a2:73:46:72:f4:4d:cb:92:c5:7f:a9:b2:70:
         d2:c8:ab:33:c8:12:79:ea:17:61:5b:c5:cb:25:e3:36:ca:3e:
         c4:44:1a:22:c1:0e:cf:6c:31:fd:c5:48:d8:1f:f3:f9:84:15:
         01:81:c1:8a:a2:64:7b:f3:65:f4:4c:29:d8:b4:fc:bb:d1:bc:
         4a:52:9e:86:cb:f1:0c:40:6c:63:0c:92:48:05:a9:91:51:97:
         9a:9d:35:50:02:38:57:f5:f0:fc:3d:40:1d:a4:4f:bb:96:c2:
         6a:41:89:61:34:54:f8:69:f7:21:a0:ac:ab:53:6a:7f:d5:39:
         c8:e2:5b:49:b8:dd:bd:d6:75:95:12:6f:0e:13:4c:8c:01:c5:
         de:7a:2b:b5:a6:e0:0a:6a:43:26:9e:75:95:25:ba:7a:e9:e2:
         6c:8a:a4:ea:42:9f:07:0f:ce:0b:62:5d:c6:0c:c3:bc:2e:d6:
         50:a8:21:b4:53:ed:79:7b:5f:53:a8:57:32:7d:5c:a7:dd:15:
         33:4c:5d:70:8d:38:8d:18:a5:22:92:a9:79:31:81:e6:54:26:
         1f:73:5b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org