Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721fa110-01f7-37fd-a8ed-c78926bc20d1.roa
File:                     721fa110-01f7-37fd-a8ed-c78926bc20d1.roa (raw, json)
Hash identifier:          ezB55TK4vKrt6bEz9XlUJb2kYO8y+QVkwZLI42auz44=
Subject key identifier:   05:95:AC:3D:21:3C:1A:BD:7B:2E:F8:CD:B6:41:D5:91:2C:6C:DF:85
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B46AE30875850830DB4200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721fa110-01f7-37fd-a8ed-c78926bc20d1.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:6a:e3:08:75:85:08:30:db:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=3db06958-e25f-42a2-b024-6e205286f93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:39:e8:01:ba:96:88:1d:a8:9f:74:d2:ff:e0:
                    78:d4:8a:31:ce:46:5f:95:22:f3:e1:24:ce:1b:8c:
                    2a:96:cb:fb:72:8b:1f:ec:b8:55:c1:fb:ff:52:a0:
                    c0:79:10:57:54:54:91:db:6c:a2:bd:9e:3b:60:ba:
                    01:10:93:10:39:31:cb:e1:81:bc:af:3e:9b:46:8e:
                    1b:02:ce:62:bc:43:96:ed:08:28:22:7b:2b:dc:a8:
                    da:c8:01:84:66:19:20:d7:79:b5:cf:83:d2:45:d9:
                    6d:93:72:8d:34:29:29:6f:30:3c:83:6d:b6:55:e2:
                    60:fa:2a:e0:56:3e:b0:3d:af:c8:b0:4e:29:a0:2a:
                    ed:94:28:bc:1a:bf:56:38:50:ab:32:eb:a7:b7:f8:
                    1d:0b:e3:7a:e9:20:62:e6:76:6f:21:86:a2:20:99:
                    cb:70:0a:e7:11:28:8a:c0:a7:4b:aa:a7:18:3c:fe:
                    9d:4c:b0:c2:7d:fe:45:d4:fe:76:a4:81:60:e7:9d:
                    22:9d:1d:18:2a:a6:94:ae:d2:74:9e:fe:fa:c8:74:
                    ea:1f:0f:ec:be:32:e0:84:bd:92:d7:c6:2e:af:20:
                    07:af:a5:5a:38:c6:93:ef:40:eb:88:26:35:27:c4:
                    a1:38:fd:fa:60:ef:1a:f6:2a:7b:b9:3e:a6:ed:92:
                    cc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:95:AC:3D:21:3C:1A:BD:7B:2E:F8:CD:B6:41:D5:91:2C:6C:DF:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/721fa110-01f7-37fd-a8ed-c78926bc20d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:19:10:d2:94:a2:cd:5b:f6:da:44:07:fa:67:14:78:6c:
         cd:ef:59:51:f4:ce:80:b0:a2:c4:1e:98:f1:d9:be:30:26:ab:
         f9:49:35:3b:0c:14:06:5e:5a:23:91:5e:7b:e8:4d:8b:07:87:
         73:66:63:71:5f:9d:a7:cf:8e:fb:f5:bc:1f:71:0c:e7:ac:55:
         86:d0:54:0b:26:e7:ee:f3:7c:96:ca:8b:f0:6d:d2:2f:ba:f5:
         61:ec:e6:2a:51:f0:c3:28:10:0d:33:5e:58:87:97:4b:55:d5:
         14:7f:ff:33:10:f3:dd:65:21:d1:df:3c:a9:8a:cf:18:cd:b9:
         a3:7c:29:e6:eb:1b:5d:6a:5a:dd:de:39:ef:79:18:a6:5a:1a:
         c1:1f:8c:34:a2:0d:cb:5d:1a:6b:9d:e3:29:01:33:dc:52:20:
         48:03:38:12:cf:3b:74:c2:32:22:4c:96:be:19:00:36:63:78:
         bb:99:c7:88:6d:84:15:fb:37:77:3e:1d:75:bf:21:c9:21:77:
         7e:cf:d5:e7:a9:38:c3:6b:f9:e6:82:0c:83:d5:87:ea:52:d6:
         79:7e:a3:c9:8b:14:07:a9:dd:e7:c6:d8:8a:75:45:90:79:e8:
         36:03:71:67:9f:b8:db:a6:b5:2b:ac:a8:a9:3f:ce:5d:eb:27:
         ef:99:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:48:00 2024 by rpki-client on console-fra.rpki-client.org