Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a63a7fa-0fd8-3588-8fbe-78ba989a22b7.roa
File:                     6a63a7fa-0fd8-3588-8fbe-78ba989a22b7.roa (raw, json)
Hash identifier:          12G03xMQOIBID5HonDoeF46V4nMW7jcJCo7Vd79Q5ew=
Subject key identifier:   45:5C:67:FA:E5:67:E4:17:3B:88:A7:D6:DE:83:23:93:F5:9F:B4:34
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B44783BE7BBB01FCE2AC98
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a63a7fa-0fd8-3588-8fbe-78ba989a22b7.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     397168
IP address blocks:        204.101.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:47:83:be:7b:bb:01:fc:e2:ac:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=e14f7d9f-8182-478b-b9a9-e3254ffa5623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:a6:5c:08:1c:f3:3e:a0:80:1a:e9:29:da:
                    bc:4c:0e:44:c4:13:51:09:38:d8:ba:33:b5:c5:61:
                    01:d5:ba:40:4c:fe:7a:af:aa:1b:d2:b2:40:ce:cf:
                    42:5e:cb:ae:2f:b2:c9:a1:7f:05:c2:f0:8f:c2:46:
                    b5:2d:d3:cf:ef:f4:bf:d4:1e:df:02:b3:7c:f2:e5:
                    c4:0f:23:d6:0e:92:f8:57:fd:3b:bc:73:7e:1e:f3:
                    7a:a8:0e:9a:72:a8:1e:d1:7a:9c:b4:6b:bc:3a:df:
                    3c:c8:b7:88:8b:77:17:af:09:43:e0:0b:f8:62:a7:
                    e8:80:61:e6:2d:7a:c5:1a:53:6e:70:e8:13:5a:fd:
                    ee:cf:28:f6:ba:b1:11:83:0c:4f:91:67:3e:33:92:
                    a9:55:3d:3c:15:6c:fd:7d:44:ff:fc:96:05:7f:f9:
                    b7:f2:41:f2:a4:4a:5e:68:99:de:31:60:d5:62:e3:
                    fe:7f:1f:2a:6e:f5:ad:a4:1b:6d:98:8e:0a:2f:76:
                    3a:13:3f:66:ad:6e:72:ea:5f:40:90:31:00:4b:96:
                    c6:ec:c3:11:bc:1b:67:03:f8:03:fc:2a:53:c9:ff:
                    27:ac:27:07:e6:47:d2:c7:d9:b3:f2:a5:1c:e2:75:
                    25:bf:25:b7:df:99:f5:03:75:0f:65:a8:33:2e:6b:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:67:FA:E5:67:E4:17:3B:88:A7:D6:DE:83:23:93:F5:9F:B4:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6a63a7fa-0fd8-3588-8fbe-78ba989a22b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:a1:27:55:2d:af:0a:ee:8c:f5:6d:96:3f:53:a0:d5:03:
         17:9d:84:2a:5c:02:be:63:34:67:f7:cd:09:22:e0:b2:2b:a3:
         ab:dd:b1:42:48:f7:4c:02:b7:cf:2c:4f:9c:c1:8e:a7:b3:dc:
         eb:6d:18:b2:b2:79:ea:7e:4e:45:55:ad:9e:f3:5b:8e:79:ad:
         2f:ce:a1:16:a4:5e:11:df:e5:91:ca:12:8a:e6:95:23:b4:58:
         be:0d:6c:44:c4:4d:f9:86:74:8c:01:69:29:f2:da:17:cb:13:
         37:d1:2e:df:f7:52:d3:90:5a:93:de:3f:3c:ea:da:ce:df:b2:
         35:56:bf:0d:64:9b:60:6f:75:88:ca:10:d5:af:52:bf:be:ca:
         3f:44:b0:12:5d:ad:e4:57:a0:bc:b6:23:d3:bf:55:42:c7:e4:
         90:8b:22:6a:86:d5:4a:0d:2e:01:f1:70:77:ab:3a:6a:38:48:
         24:b5:7a:a0:95:d9:db:0c:86:cb:f7:4e:15:07:0d:1c:d4:03:
         64:94:c8:12:dd:9b:88:43:5a:9f:b4:87:42:9a:8b:95:b7:de:
         ef:f5:62:5a:c1:cc:1e:f7:3a:f0:8c:56:2c:98:9d:72:a2:16:
         9b:48:76:1a:fe:3d:59:fa:b1:31:6c:65:dd:ad:79:c0:4d:81:
         62:09:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:56:08 2024 by rpki-client on console-fra.rpki-client.org