Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/275433e6-a1a5-3e81-87c4-9537e1fafc50.roa
File:                     275433e6-a1a5-3e81-87c4-9537e1fafc50.roa (raw, json)
Hash identifier:          kA356ryGGWqd52WtbYMGy5xZH9dlde2N0fhOtSIagak=
Subject key identifier:   0A:C1:44:39:81:DE:EA:E6:13:DC:E6:E4:17:51:08:6E:1A:77:94:ED
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B410E89C011A824F9DD6C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/275433e6-a1a5-3e81-87c4-9537e1fafc50.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     12132
IP address blocks:        199.243.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:10:e8:9c:01:1a:82:4f:9d:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=28087f64-0ff6-4846-b47c-3f5c2edfec27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:2b:76:83:41:12:30:a9:d4:5c:ad:9e:5e:
                    c9:c1:23:dc:47:e3:ab:e1:79:05:83:3d:81:c6:52:
                    c8:56:a3:36:03:66:26:d7:4d:a6:af:60:b3:5e:4b:
                    b4:fc:dd:56:18:3f:40:78:2d:51:23:ed:79:49:e6:
                    e3:9d:87:56:eb:56:b1:f7:04:c5:9b:cf:6d:90:7a:
                    66:a2:03:2d:10:e8:90:e2:e4:5c:ec:6b:fd:58:da:
                    2f:58:71:b9:40:8b:6e:94:a2:87:7e:0a:42:97:40:
                    b2:bb:39:aa:d2:96:2e:bd:11:e8:57:f7:e2:6d:62:
                    0c:12:e1:98:a7:d5:24:80:a3:b0:f0:8e:55:87:df:
                    51:4b:fa:30:f2:86:98:9b:33:e1:7b:ae:b2:3f:2f:
                    07:28:c5:69:d9:e2:ee:57:eb:b5:81:62:8d:df:b9:
                    97:4e:a4:30:ab:d1:27:bf:78:94:3e:49:c3:dc:68:
                    cf:81:2b:34:b6:90:b5:41:62:da:b2:fa:d7:2f:aa:
                    91:46:ce:b8:11:b0:d0:0b:be:ad:b7:08:33:82:92:
                    00:73:2c:c2:3d:82:47:9c:f8:e4:41:b8:9f:3d:7a:
                    6f:1e:74:32:25:d9:f5:e9:20:6b:47:18:fe:cd:48:
                    42:3d:ca:b0:1b:8a:35:57:90:4a:8d:29:f3:2d:e6:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:44:39:81:DE:EA:E6:13:DC:E6:E4:17:51:08:6E:1A:77:94:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/275433e6-a1a5-3e81-87c4-9537e1fafc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ee:27:2f:56:2f:6c:dd:7c:80:d4:d8:2f:13:32:59:64:ee:
         1d:5b:ed:3d:54:19:be:90:77:a1:20:d6:4a:2f:5b:fa:76:6f:
         ee:cd:f3:eb:27:fe:15:e6:95:3e:d7:8e:72:c2:31:0b:9e:e9:
         51:ac:38:b6:cc:db:14:17:f4:7a:b7:17:a7:f5:5d:f4:e5:60:
         f3:a9:d1:cf:52:8d:45:b0:16:99:76:60:96:b6:68:de:cc:6c:
         d9:c4:45:58:d0:cf:53:1f:16:5e:1d:f2:3f:f3:f5:d5:ec:cd:
         c4:74:b2:b2:01:a1:32:76:5e:ea:28:78:76:39:9f:35:15:f9:
         63:81:3f:47:7c:3f:82:4c:b2:c5:be:57:8f:79:ea:f4:7a:6c:
         dc:1f:88:58:e9:42:39:0e:ca:fc:81:9a:aa:72:7d:7a:49:7e:
         db:e2:02:56:71:20:a5:d8:59:cb:e6:29:4f:ba:91:63:36:dc:
         a2:14:78:9c:5b:bb:9e:49:91:be:2c:95:92:a2:7e:f6:25:98:
         45:4c:4e:f7:20:f5:13:92:87:0b:ea:a2:3a:2d:dc:af:6a:22:
         40:3f:6f:2d:67:3d:32:82:f0:cc:95:12:66:0a:76:36:19:78:
         bb:66:94:a1:b8:67:af:3d:81:cb:8f:f7:c4:fe:66:b1:4a:a2:
         6d:eb:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:59 2024 by rpki-client on console-fra.rpki-client.org