Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/69c408e5-700b-3530-bec1-bd2a8cc90c2d.roa
File:                     69c408e5-700b-3530-bec1-bd2a8cc90c2d.roa (raw, json)
Hash identifier:          Hoe9CJEH/wQSKvOMoQzfDsu+dU965ENeJILo+AP3j5c=
Subject key identifier:   0A:9A:27:F1:6D:4D:CD:EA:EF:4F:68:58:22:FB:98:90:D1:D3:74:E9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F933ACEF2707EBED1DEC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/69c408e5-700b-3530-bec1-bd2a8cc90c2d.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        184.151.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:93:3a:ce:f2:70:7e:be:d1:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=60d24b11-878e-487d-bbc5-c94314770395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:9b:f6:ac:0e:00:d9:f8:c0:03:36:ce:9c:
                    cc:32:5a:d8:5c:88:11:ed:59:04:c2:aa:6b:4e:4b:
                    de:f9:d4:fe:88:27:56:37:14:9d:e4:ed:d9:35:cd:
                    a7:99:23:a0:11:9a:b3:32:e5:8b:02:71:87:cd:60:
                    19:e9:96:7a:27:97:1a:f8:e3:ef:37:5d:c2:e0:24:
                    83:1c:74:68:38:91:f1:3e:e2:94:dd:3e:1a:a4:b7:
                    ea:5c:da:0d:02:18:66:f7:68:0c:d8:44:89:bd:81:
                    b8:f4:c2:10:7c:56:bf:6e:f7:42:c2:7e:e7:cb:7c:
                    ce:89:98:1f:81:ab:bb:0e:ed:cb:c2:58:ae:5b:7f:
                    31:72:f7:68:e4:a5:b9:77:a1:43:4c:ab:e0:50:c2:
                    8a:70:38:c0:0e:5f:cf:04:d1:9d:37:ee:77:81:f5:
                    31:f1:8b:71:1b:ee:5d:62:cc:23:10:de:cd:e6:49:
                    10:58:ff:d0:bd:a9:06:5d:37:be:00:ed:dd:cd:c3:
                    75:ac:25:69:29:0c:4d:c8:b8:24:78:65:de:c5:44:
                    2a:db:f1:9d:e9:65:17:09:8c:1b:b1:83:51:ec:8d:
                    db:68:8b:08:06:31:4b:b5:3b:f8:33:da:07:cd:4d:
                    0a:a8:82:ff:80:21:c9:24:ac:de:89:0a:ce:a7:b9:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9A:27:F1:6D:4D:CD:EA:EF:4F:68:58:22:FB:98:90:D1:D3:74:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/69c408e5-700b-3530-bec1-bd2a8cc90c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f8:c2:37:91:73:6f:d4:7a:67:ff:ab:ab:ea:9f:ac:9a:91:
         0f:18:61:30:7b:3c:21:39:e6:c4:d6:76:f2:6b:9c:bb:61:b8:
         e5:bb:71:6c:1b:fe:f4:1b:3a:6c:cb:e1:8d:30:d1:65:28:3e:
         e5:36:c3:d4:18:cb:02:c3:67:3d:21:b8:68:47:a1:70:a8:b5:
         7c:a1:ba:26:84:05:4c:4e:d0:5e:05:dc:c9:6b:ce:a8:46:da:
         04:39:e6:54:fb:d0:eb:8d:e4:54:de:fd:f1:68:5d:d7:b1:25:
         9b:33:ff:21:83:8a:7e:ef:7e:2f:7a:07:7b:91:ce:d8:71:de:
         16:6d:c4:dd:8b:fc:ba:2d:27:27:b1:49:ba:f5:39:d4:21:55:
         e9:10:d1:d5:fb:7d:91:03:e7:e8:a1:ba:55:26:d8:3e:ab:22:
         a5:e6:07:70:9b:86:7e:d2:1f:b3:b6:cf:c8:b0:11:67:32:56:
         e7:5b:67:10:20:ea:a3:77:57:6a:21:0a:31:ef:fc:97:0b:65:
         c9:72:46:05:90:56:42:f9:2e:a7:bf:cc:19:67:ff:ea:64:30:
         c9:9b:c7:dd:86:ef:ac:17:91:7e:2d:19:46:69:0d:c1:8b:92:
         e1:52:e9:6b:f7:ce:e0:95:a5:2f:54:34:da:72:a5:25:56:58:
         23:90:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org