Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/845c20a6-b7eb-3ff9-bcca-30af92ff2eaa.roa
File:                     845c20a6-b7eb-3ff9-bcca-30af92ff2eaa.roa (raw, json)
Hash identifier:          XXIP2CsUcvKZRJA+NNnPqXZbjcjSN9MhtsTUH9uzyzg=
Subject key identifier:   BD:5F:B5:E8:46:EE:6A:61:9C:9A:FD:B0:32:4A:E1:93:85:A7:A5:B2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B5EC94C7194329DE3CCA00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/845c20a6-b7eb-3ff9-bcca-30af92ff2eaa.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:ec:94:c7:19:43:29:de:3c:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=536f1a37-bddc-45b7-92af-35134d97a41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:d0:68:89:de:5e:58:eb:f7:36:8b:dd:19:
                    c1:29:fc:e6:32:3d:a1:2e:a7:85:27:e2:ba:70:e7:
                    c7:28:f8:b3:5a:d2:bb:b3:5e:ab:a0:ce:04:cb:f7:
                    51:1d:17:70:70:cb:9f:0d:58:a4:a5:c6:ce:3b:98:
                    14:54:69:3f:88:31:8a:87:c9:8c:d4:5b:ff:ff:12:
                    7c:de:8e:76:c8:06:90:bc:f4:4f:e0:7d:a4:df:1e:
                    d7:dd:6e:73:e6:03:29:46:e7:15:45:2b:1e:b2:13:
                    b6:3a:a3:84:8c:5a:20:f7:8d:60:72:ec:09:12:1c:
                    58:29:27:63:0a:46:25:f4:a4:e7:f5:2c:e1:bc:ec:
                    fc:68:e2:9a:3f:d5:72:ed:3d:6f:93:7a:b8:ed:79:
                    c5:90:6b:1f:ce:05:ac:ec:ce:4a:9a:9b:a0:e3:a0:
                    d6:ef:4b:5a:b1:ea:11:d8:de:d5:e7:7d:0b:df:a7:
                    9b:e7:85:a0:e5:d1:96:78:e2:1f:8c:d9:3c:aa:e7:
                    20:90:af:d3:d3:3d:07:46:16:40:fa:5c:a1:77:bd:
                    c5:f3:6f:0d:92:d3:12:f3:c1:59:09:49:65:ec:e6:
                    dd:1a:35:8c:49:f7:9e:a4:e3:52:61:0b:d2:04:d5:
                    84:c3:cf:c2:83:b0:80:81:6d:77:a1:1d:56:4d:04:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5F:B5:E8:46:EE:6A:61:9C:9A:FD:B0:32:4A:E1:93:85:A7:A5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/845c20a6-b7eb-3ff9-bcca-30af92ff2eaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:01:42:c3:b9:5e:59:44:ab:72:20:c9:26:72:80:97:81:
         42:d1:5e:ac:a9:19:73:d2:2f:10:b9:72:11:b7:92:0a:ec:00:
         93:b8:66:a4:55:e6:e5:00:c5:30:b8:a1:3c:c4:5c:15:83:25:
         59:7f:6c:c4:06:14:c5:e0:d9:92:57:85:87:8f:2d:4b:1b:5b:
         ee:f1:83:f1:b0:cd:f5:56:87:bb:39:02:fc:3c:91:55:00:72:
         f4:fa:06:7b:9e:35:50:44:6a:58:9b:60:80:7b:93:15:6a:04:
         70:ca:02:89:1f:7d:6f:04:da:76:2f:f9:05:e8:5e:13:75:45:
         b4:f5:3c:1a:69:fb:4d:cb:c2:c4:29:a3:4a:45:8a:59:bc:d2:
         fe:28:07:2d:f8:42:45:e9:54:88:d3:1b:bc:9b:02:24:dc:ad:
         e1:d1:99:3f:e2:a1:81:1a:59:cc:55:0f:66:7a:0f:24:09:20:
         58:75:2f:97:90:70:ec:da:a6:cd:98:b1:d0:3d:b1:fc:4f:17:
         09:5f:18:26:d0:2b:a6:23:05:b3:55:9c:8d:a6:80:45:b2:86:
         84:5e:ed:e9:3a:2b:ec:b2:25:12:1c:2d:d4:f5:c6:86:22:6d:
         15:30:e4:f3:8f:db:86:fa:01:fa:84:54:5c:ed:50:3c:49:5a:
         93:4e:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org