Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5eb4c53f-27f1-3136-972e-e1102740fb0b.roa
File:                     5eb4c53f-27f1-3136-972e-e1102740fb0b.roa (raw, json)
Hash identifier:          1ZUyGoQ2UkXszcTTuH9PpNQ7dxvxCRG8awsjpB02eMU=
Subject key identifier:   B5:D6:9F:2A:58:CF:30:DD:85:20:32:9A:D1:D4:C7:59:EA:DF:87:FC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F88F8DBCF38EE1374C600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5eb4c53f-27f1-3136-972e-e1102740fb0b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.151.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:88:f8:db:cf:38:ee:13:74:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=35148627-cf88-4eb4-9409-6fd8fd054af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:69:66:c5:7d:6c:14:92:f3:7f:18:03:99:
                    2a:a3:4c:82:66:7e:ac:77:bd:4c:8b:96:6d:bd:6f:
                    46:e7:fc:75:2e:9e:e0:cc:9e:be:c8:56:87:89:aa:
                    1a:d8:73:04:e7:54:1f:8d:09:56:52:3a:3c:12:70:
                    b3:d9:50:03:5a:f1:d4:39:3c:c5:ce:61:af:0c:4f:
                    64:5f:b2:80:de:05:d6:a3:db:e9:fc:fe:ea:2e:69:
                    5a:cd:ee:1f:32:48:a2:c9:6d:47:74:30:31:b2:27:
                    fd:0c:30:b2:02:9c:56:1a:d2:8c:28:e6:69:c8:0e:
                    9c:61:5d:96:db:54:a7:ee:13:b3:64:fd:37:7c:e8:
                    cb:88:02:ca:07:d8:e6:fa:1d:05:7c:47:2e:02:52:
                    00:26:a4:95:ad:16:f8:c3:09:64:bf:ed:99:5f:a2:
                    bc:b7:4e:ef:b0:d6:3f:1d:80:77:0b:05:03:b1:40:
                    63:8c:ea:78:11:ac:ce:ad:33:10:bb:da:19:03:70:
                    a2:dd:f2:1b:46:10:f4:cf:7f:e8:ea:07:1c:3a:25:
                    47:99:df:93:dd:f5:33:52:28:c8:61:ab:79:0c:59:
                    41:6f:a0:c7:48:13:74:fc:81:15:f7:a3:7a:9a:dd:
                    c2:ab:d6:c4:04:f8:ca:15:e7:74:bc:f7:36:26:ea:
                    af:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D6:9F:2A:58:CF:30:DD:85:20:32:9A:D1:D4:C7:59:EA:DF:87:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5eb4c53f-27f1-3136-972e-e1102740fb0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:a8:c3:d0:91:d5:fa:03:df:be:f6:74:78:8d:19:25:e6:
         40:38:28:d4:5e:5e:cf:71:52:38:0e:3e:6d:ba:43:2f:b1:52:
         9d:1e:ff:71:de:0b:7b:24:02:27:3a:db:e7:66:55:bb:c4:28:
         9b:6e:9b:74:28:67:72:9a:e7:78:37:96:46:79:3e:89:7b:50:
         ae:12:7d:ec:a1:b7:a9:72:b4:1c:4a:f3:ce:84:29:4a:e4:2c:
         3d:62:dd:bd:e4:e5:b1:bc:f8:8f:70:ae:78:44:03:fe:ff:84:
         48:71:d0:a6:f1:52:79:13:51:4e:d1:d3:c0:e6:56:cf:e0:6b:
         f1:63:11:47:63:32:fd:bd:21:84:d0:44:96:e3:47:17:4e:02:
         01:09:41:e8:a5:43:9f:3f:79:55:f2:99:1a:25:16:4e:81:c8:
         bc:8b:20:14:79:ae:a4:26:93:4d:c9:f8:11:e5:94:14:be:ab:
         1e:06:42:f4:4b:bb:22:fb:e4:b5:f4:56:f6:be:e9:02:db:76:
         34:95:f3:b5:58:03:50:61:80:11:bf:76:15:81:cd:27:7a:da:
         3c:ba:d0:83:a4:15:48:4f:a1:13:6b:d9:dd:94:d7:7b:b7:65:
         f9:8d:11:58:40:57:11:76:e2:26:d1:a3:84:0f:f6:04:19:5d:
         e7:9b:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org