Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa
File:                     43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa (raw, json)
Hash identifier:          kci8a2B7oh+9cdKjP0dQ1l4HpuUv82gW/FBNX/SqGQM=
Subject key identifier:   54:3B:5E:76:A9:95:63:B8:3A:86:6E:8C:44:ED:BE:D9:64:B1:5A:24
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10032A45B31A6D387C4040
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        204.101.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:03:2a:45:b3:1a:6d:38:7c:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=1dc45242-7d36-4194-aa0b-5814019befb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:c6:fc:a8:77:f9:a8:46:33:bb:e9:d4:30:
                    bb:be:57:ff:28:e8:01:be:0c:b3:2b:47:f3:74:61:
                    8a:a6:09:ef:b2:a3:02:f8:1b:2b:a1:49:f3:35:95:
                    a6:c2:a5:da:fc:10:d3:ec:6a:22:8d:92:ce:ad:62:
                    ce:36:3f:a6:9a:96:00:57:b1:eb:ac:ca:5d:46:42:
                    23:93:8f:a7:90:e0:7e:be:71:24:43:4d:2c:1f:f4:
                    c9:9f:4b:e3:f3:e4:2a:81:35:a4:c1:b4:d8:2c:fa:
                    3c:34:ea:c0:88:55:e5:c3:d3:b8:f0:16:f8:70:4a:
                    3f:81:f2:dd:9b:e4:27:05:b8:48:50:df:ab:76:09:
                    c1:cb:15:54:b7:3a:70:2b:4c:bb:23:b9:fb:c0:88:
                    57:25:2d:ed:63:b7:e1:97:b6:46:48:db:75:3a:3c:
                    e2:6b:06:d5:26:21:2f:97:f8:e2:46:d1:8b:9b:7c:
                    2a:43:1c:72:97:4a:02:08:e1:55:c0:54:88:be:5b:
                    29:84:3b:9b:f5:75:48:ea:8f:0f:0b:8f:e3:36:38:
                    6c:25:27:eb:19:77:14:a2:4c:82:55:27:51:80:e3:
                    95:4c:63:0e:2f:2b:0b:6a:c9:d3:8a:fb:67:80:66:
                    85:81:66:f6:91:b9:f5:95:98:a5:3c:e9:e9:94:f6:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:5E:76:A9:95:63:B8:3A:86:6E:8C:44:ED:BE:D9:64:B1:5A:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43aa6a28-641f-3717-89bf-0ab9f1bf4cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f4:52:b9:24:9a:7d:39:8f:ac:62:b5:60:9a:c5:87:ac:a7:
         16:7a:89:70:5b:75:12:ed:9c:be:a4:c2:f5:9a:30:b7:88:55:
         2c:6b:47:16:f7:39:eb:03:01:89:c0:f6:3e:5e:66:7d:73:0e:
         d3:11:dc:1a:9f:b5:f9:e8:ca:8f:a4:78:0c:00:0f:47:5d:4a:
         82:dd:8a:b1:21:5e:46:59:b9:98:2e:30:26:1d:21:70:f9:eb:
         70:35:dd:e8:94:98:73:85:99:46:0a:50:57:33:48:65:95:d9:
         e2:b5:ce:2d:31:f7:3e:7a:ab:c2:d6:ca:33:c5:e8:3b:7a:cc:
         34:10:56:fe:de:25:71:21:74:33:e5:71:80:a0:65:c2:b4:cb:
         04:51:93:e7:e0:3f:1a:44:8f:d2:16:4a:bc:f1:29:16:55:04:
         68:9a:81:8e:f9:61:de:70:b8:1b:a9:02:55:63:e8:7d:4d:41:
         7b:56:eb:26:78:c3:73:87:1f:fa:4b:47:ac:33:f1:b6:25:f0:
         69:44:5f:75:3c:7e:44:36:b1:77:7e:d8:b5:79:1b:5a:a1:26:
         06:4b:d6:33:a3:a4:aa:6d:38:ad:1e:43:65:c1:ba:e9:2b:82:
         da:4f:fe:5a:dc:7a:a8:de:39:2a:e3:a9:91:59:7e:18:32:23:
         e5:c6:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org