Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64266e8a-5bb2-3032-a39b-2b9a4d503331.roa
File:                     64266e8a-5bb2-3032-a39b-2b9a4d503331.roa (raw, json)
Hash identifier:          uR4wNAayy/zfH4wYMetXXgsHmVeY0fAnKA2w6U9+v8k=
Subject key identifier:   58:19:6E:08:7D:C5:11:F2:DF:6A:CF:E2:AF:59:F6:98:29:8C:E9:89
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B6091EABED717A677B12C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64266e8a-5bb2-3032-a39b-2b9a4d503331.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.209.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:09:1e:ab:ed:71:7a:67:7b:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=2a67e825-6dcc-4154-8f53-3ad19619e9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:35:61:2e:24:95:73:b9:2e:c5:fb:4d:c0:
                    5c:40:5f:27:d5:84:ba:e5:f4:38:a8:ca:52:2d:b4:
                    3e:bb:7a:81:5d:6d:b3:fb:00:c3:ad:b6:fd:2f:d6:
                    51:6d:0c:fc:67:9a:9d:24:0f:f8:7b:c6:57:b5:cd:
                    70:d2:f7:47:8a:e9:27:2c:ea:4c:31:2a:e6:24:5b:
                    7c:76:df:80:4b:7a:46:02:71:cc:14:74:ba:ec:99:
                    b1:4f:a0:0e:78:c5:a8:bb:cf:a8:58:d7:3e:9b:57:
                    af:a6:fe:e1:cd:88:ac:77:3e:aa:fc:04:68:ad:e5:
                    3a:cb:fc:20:14:b0:5c:1d:26:67:90:a9:a6:8c:d2:
                    7d:49:b9:b1:b6:11:9a:af:27:c1:a1:33:81:bf:9c:
                    f0:31:e6:92:73:1f:2f:57:2c:d6:26:32:96:b3:d6:
                    94:88:f7:91:d2:78:84:33:cf:5f:3e:9b:66:7b:1c:
                    8c:c6:21:17:61:0b:34:03:29:d4:5d:5f:39:37:bc:
                    10:57:a2:eb:38:ef:74:86:7f:aa:97:51:4f:8b:55:
                    05:13:12:90:be:c7:61:7a:53:ff:dc:6e:21:fe:74:
                    08:a5:f9:41:2c:0d:64:94:8b:fa:f8:90:5e:8d:8e:
                    33:69:1d:e1:d0:7e:46:f5:48:92:3e:e6:d9:ca:21:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:6E:08:7D:C5:11:F2:DF:6A:CF:E2:AF:59:F6:98:29:8C:E9:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64266e8a-5bb2-3032-a39b-2b9a4d503331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:60:ec:0e:63:ba:71:75:26:72:63:b9:d0:d6:7a:2a:b9:
         fa:f5:8a:b5:1a:14:a3:a7:30:13:6d:2d:cd:93:bb:78:f9:b9:
         55:4a:30:fd:9e:84:42:b2:8f:26:83:ab:bd:2e:85:b5:c9:04:
         1c:b7:9d:e4:c6:3e:b2:5d:62:e0:fb:ae:74:ce:85:70:fd:1a:
         8e:53:be:d0:ce:da:98:07:7a:11:28:d4:d4:32:64:90:96:7c:
         65:fb:0c:b8:c4:17:d4:af:28:2c:5c:83:99:ad:8c:15:65:e4:
         85:46:22:8c:88:f9:6f:23:4d:35:5e:ff:50:ec:5d:39:74:5f:
         d5:35:e4:a0:8b:0e:35:b1:df:fc:a8:8b:a3:c2:e3:56:1f:c9:
         fe:e2:ce:62:74:2b:4c:a8:3e:f7:5a:e9:74:1f:41:36:ec:70:
         04:5a:a3:46:ba:58:a9:7c:cc:1f:1a:93:e8:7f:08:cd:af:f1:
         6e:db:e8:5d:60:cd:ff:20:d2:97:a9:e7:06:68:c0:35:a3:a1:
         1f:1d:8a:9b:11:12:ac:df:28:e0:29:09:e4:91:68:c1:6e:36:
         ec:bf:82:e8:3d:14:52:20:ac:87:d1:6b:ff:a7:33:da:a5:2e:
         13:46:d3:28:f3:8f:98:83:4a:97:73:cb:1e:bd:e2:65:ae:87:
         c5:38:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:33 2024 by rpki-client on console-ams.rpki-client.org