Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25795ca3-e5cc-3016-b2d2-4bc1c0d538dc.roa
File:                     25795ca3-e5cc-3016-b2d2-4bc1c0d538dc.roa (raw, json)
Hash identifier:          zVTuHf7PxVSDXB9PxD2g70aoYmPnKQMZHthtU/UxWNg=
Subject key identifier:   F0:FC:AB:CE:B5:C6:9A:90:7D:A4:26:80:12:64:C5:D8:A5:38:84:28
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B61AA1D626F226FFC5B740
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25795ca3-e5cc-3016-b2d2-4bc1c0d538dc.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        2001:4958:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:1a:a1:d6:26:f2:26:ff:c5:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=c5635d5d-44af-464d-88a3-627b29a432a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:be:22:92:40:b0:ce:88:23:08:30:1a:05:
                    43:79:d0:1b:db:0e:e1:e0:68:49:31:96:9b:16:0d:
                    90:ce:f6:01:08:71:d4:8b:6b:80:33:5e:a6:33:62:
                    10:51:ea:d4:ee:28:02:d0:5a:32:73:b1:ec:44:95:
                    1d:aa:49:2d:38:d1:26:d4:a8:80:4d:49:37:c7:7e:
                    17:ca:48:78:30:7b:37:c3:7f:b6:69:44:0c:ae:b2:
                    ce:e9:b5:06:4e:b8:e2:6f:a1:23:00:ba:09:ae:e7:
                    3b:19:8f:1f:17:a4:68:91:95:75:10:d1:d4:6b:1c:
                    51:c5:31:52:da:b9:b0:e8:ab:18:55:e3:52:63:43:
                    67:f1:03:61:ed:91:ed:5c:05:d9:69:b1:f6:1b:b2:
                    32:70:0d:2e:a6:01:2f:1f:f7:7e:27:33:2d:11:1d:
                    db:7a:b2:46:c6:42:00:db:17:38:d9:49:20:7a:01:
                    7a:5b:0e:97:a5:b2:07:d3:24:ca:b2:c0:6f:3c:8c:
                    58:c2:b1:f5:43:5c:95:26:1a:6e:c8:28:4d:e6:bc:
                    a2:19:60:94:8e:ad:56:32:0d:5b:5e:c6:8b:d1:f3:
                    73:bc:bc:4f:9a:0e:dd:cd:4c:49:52:38:9c:8e:e2:
                    eb:b0:0e:6e:b6:44:a1:23:24:c4:8a:58:d0:c4:6f:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:AB:CE:B5:C6:9A:90:7D:A4:26:80:12:64:C5:D8:A5:38:84:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25795ca3-e5cc-3016-b2d2-4bc1c0d538dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:d2:23:1b:ec:50:8c:a4:87:2f:fa:92:88:b7:97:b7:80:
         85:f5:aa:dc:4c:bd:50:e5:06:5b:b9:42:cf:55:83:05:87:4e:
         cf:92:50:21:a3:64:6c:3b:84:a0:5c:9e:52:e6:13:41:1c:65:
         3c:49:2e:e4:c4:31:83:59:59:0f:be:60:b1:94:36:5c:d8:33:
         89:64:8a:5a:e7:a3:56:70:db:f7:46:27:bf:4b:68:6c:79:da:
         f6:9e:b1:0b:ce:50:fd:38:07:c3:d8:05:8e:42:5b:ae:b8:8a:
         5b:eb:d6:1a:eb:04:db:d5:a1:ed:68:e1:36:94:be:73:c2:6a:
         0a:e0:94:70:af:c8:d0:96:c5:92:d8:2b:f8:16:f1:c6:3a:67:
         90:e3:fb:97:e2:1f:28:a0:ef:a3:e7:1b:da:51:14:45:8d:23:
         31:d9:e2:01:27:39:de:4d:53:ea:cb:84:01:6c:5f:d8:ec:7f:
         74:e1:57:c2:72:fc:c7:78:3b:18:38:ff:4c:96:ab:60:ac:20:
         96:14:7b:a9:b9:39:05:e0:b1:54:28:d1:58:c8:32:7d:95:f7:
         72:2b:4f:f9:1f:7e:70:de:72:b4:c2:49:45:b3:b4:62:de:e0:
         b5:c1:3a:3f:9a:42:7e:a7:cb:57:80:b4:ac:02:c0:df:15:49:
         8d:c3:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:59:42 2024 by rpki-client on console-ams.rpki-client.org