Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63616982-b78e-38e9-8219-0e3d4630b310.roa
File:                     63616982-b78e-38e9-8219-0e3d4630b310.roa (raw, json)
Hash identifier:          8i+9airYg+CBSaLqKiipK/TeL2TYYTh98xpaUoF7tGE=
Subject key identifier:   EA:23:7F:E8:3F:D8:A0:A4:D1:33:DC:62:B4:39:B3:63:AB:49:6C:E6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3F1BD6A88121DB82C07C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63616982-b78e-38e9-8219-0e3d4630b310.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        184.151.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:f1:bd:6a:88:12:1d:b8:2c:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=598ad242-9f3c-4315-9e26-ea3fec3a2462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:7c:92:e8:d3:d5:91:f4:aa:32:4c:76:31:
                    e2:e0:e4:69:e2:7e:60:d4:3c:57:48:f7:cf:91:02:
                    6e:5c:9a:fe:ca:85:f6:2d:42:18:a7:3e:ca:3c:ae:
                    c3:c3:8e:5e:22:5c:af:78:c4:a6:c2:15:60:4b:46:
                    22:e9:0d:40:45:e4:38:03:1e:67:42:32:bc:45:48:
                    b0:52:25:06:78:58:18:07:18:99:47:7e:ae:ab:c4:
                    65:8d:52:0a:33:41:93:fb:74:c6:95:4a:76:aa:1f:
                    3e:6d:b0:44:08:1c:d7:25:c0:43:fb:be:dd:2e:8d:
                    d8:6b:ea:7a:ca:d6:b8:59:fe:5c:cd:2f:7c:22:dd:
                    fd:62:cb:8f:0a:6f:c3:c7:23:b9:88:db:95:8c:b2:
                    cf:b4:f6:c3:d9:f9:35:7f:21:f8:82:3a:a2:8d:26:
                    cd:87:72:20:a6:6a:32:d0:d4:2d:fa:7b:21:83:d1:
                    76:71:ac:0b:77:30:81:fd:c3:d2:6b:e0:41:83:85:
                    a8:f3:54:af:09:6d:a2:01:3e:0b:26:c4:39:58:7d:
                    2f:5f:77:96:0b:e0:33:da:4d:44:b6:4b:35:cd:15:
                    f2:f3:ad:13:61:d1:62:f2:bc:e8:a2:5f:ad:75:31:
                    1b:eb:68:77:1e:6b:ff:bf:e1:b8:ae:7d:96:4d:02:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:7F:E8:3F:D8:A0:A4:D1:33:DC:62:B4:39:B3:63:AB:49:6C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63616982-b78e-38e9-8219-0e3d4630b310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:28:f1:8e:66:65:a7:4e:3f:a2:16:85:77:60:e4:36:87:ab:
         65:40:03:6d:c0:3a:25:09:78:75:98:f6:26:4a:e8:03:1d:c1:
         fc:5f:76:5e:de:78:51:1e:f3:de:fb:e3:bc:0c:25:b5:fc:de:
         50:83:1f:42:15:85:01:65:b2:f9:12:2f:06:b0:3f:9a:a0:ae:
         1b:e1:ac:f9:eb:12:85:5d:f5:c8:e6:7a:7f:6b:94:dd:93:22:
         2f:44:55:ab:69:7e:f7:99:27:4a:cd:4c:9d:b2:ba:fa:9f:db:
         8a:49:20:27:0f:ad:12:5a:c5:4e:af:75:dc:7e:71:07:f6:1b:
         1f:1f:d3:65:d2:d7:91:6b:3a:ea:12:ef:20:1b:de:ec:eb:b6:
         eb:60:ef:64:ab:c2:65:04:85:e0:75:1b:b8:39:86:2c:31:d9:
         37:5a:ee:bd:06:8b:d2:58:14:24:d8:c5:19:2d:fb:80:1b:02:
         dd:3b:a1:b6:5c:4a:57:9f:f2:6e:ec:a5:d5:fd:4b:fd:24:1e:
         13:fd:49:ae:b8:64:2f:cb:33:62:58:16:bc:37:1c:8f:03:35:
         92:9f:c1:35:25:7e:1e:c1:29:40:53:07:78:04:ec:7c:bc:17:
         f6:b2:ed:06:72:84:54:bd:26:7c:ad:47:3b:2a:a4:6f:63:d6:
         bb:b0:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:41:28 2024 by rpki-client on console-fra.rpki-client.org