Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6c4363b-4483-3e75-8dcb-d3ddd8152146.roa
File:                     b6c4363b-4483-3e75-8dcb-d3ddd8152146.roa (raw, json)
Hash identifier:          ShRbZh3v3xc68KX19ZnQkavAI8srS/MpiYyUMa53hsE=
Subject key identifier:   7E:9D:51:5C:32:16:CE:80:B3:EF:B3:A1:99:E6:81:CA:55:C7:43:B5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B576391DD3D265383AF700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6c4363b-4483-3e75-8dcb-d3ddd8152146.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.236.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:76:39:1d:d3:d2:65:38:3a:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=b4107849-e5de-46d1-ab14-37f87356de2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:3b:69:76:94:ec:13:01:71:82:0f:ca:91:
                    a0:2e:5b:bc:2a:7e:37:c7:84:d6:3d:32:c3:c6:1c:
                    30:1c:5e:e6:e7:a7:d0:00:d4:bf:14:0c:e7:c3:cf:
                    ca:04:98:e2:de:43:ef:c8:ea:db:a1:d3:d7:3b:d2:
                    d5:c8:09:b7:dc:e3:ff:ca:6c:25:a6:58:b1:b7:1e:
                    51:50:1e:7e:51:39:d6:dc:c6:0a:4e:7d:6e:ea:a9:
                    b8:2d:41:f9:8a:76:5c:4b:97:0a:9c:3d:38:28:25:
                    a5:fc:24:df:a5:04:77:b3:5c:bf:62:6d:7b:84:bc:
                    42:d7:4b:92:ce:95:d6:c2:04:dd:91:9e:4c:4f:0e:
                    21:f6:d0:28:0b:28:9c:a0:b0:ea:b7:1b:db:85:7a:
                    ce:ea:27:c9:b9:b8:9f:9c:df:29:85:cd:33:23:00:
                    26:d5:9b:41:9d:b2:21:2e:b4:3e:9a:e9:28:b0:12:
                    74:b1:7f:7e:90:54:fb:d1:5c:e0:36:f0:8d:8c:31:
                    a9:f9:da:90:05:64:d6:31:cb:01:4e:3a:de:a9:99:
                    89:4e:90:74:9a:58:e4:1f:91:3f:7a:30:3b:14:3a:
                    82:1c:7c:64:62:2c:a9:cf:2e:f2:6f:b1:da:21:cb:
                    3e:9b:9a:17:51:e2:58:5b:49:44:42:c6:1f:d6:27:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9D:51:5C:32:16:CE:80:B3:EF:B3:A1:99:E6:81:CA:55:C7:43:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6c4363b-4483-3e75-8dcb-d3ddd8152146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:c9:b4:e6:66:42:fc:2d:a3:bd:c0:0a:3b:b6:25:14:fa:
         d0:c9:43:16:54:26:c1:94:6f:c2:c0:2f:12:bc:ee:6b:83:2a:
         2d:d4:ba:0f:e3:98:bc:ba:be:4b:3d:18:f5:2c:a3:8d:75:b6:
         c4:5d:70:1f:2c:ee:f2:38:b0:5f:bf:8a:37:5d:fa:02:d6:68:
         b9:94:4f:bf:c5:08:82:08:03:7e:0d:04:67:2c:50:49:6e:3f:
         b8:09:52:e3:1b:1b:c8:ff:4d:4e:ea:84:96:6a:f4:fd:55:3a:
         de:49:cc:71:95:c7:e2:5f:4c:cc:95:82:eb:1f:33:4c:9f:65:
         54:78:c9:8e:c5:fc:75:89:ff:2e:78:41:97:16:d1:27:02:e5:
         e3:c6:5f:b7:ca:8e:6c:3b:eb:5b:03:39:2d:57:34:b7:2d:6a:
         48:65:1b:e7:0b:f5:3f:cd:7b:93:78:d9:88:1c:56:5f:36:81:
         af:a7:88:04:58:c1:44:45:c0:cd:0f:d8:1e:e0:b9:e0:f6:9e:
         d1:5e:fd:ef:68:3f:2d:ea:37:d9:f9:fb:9a:c0:6b:9a:cd:10:
         56:f8:80:13:ab:b9:45:27:b4:df:1c:ac:97:a5:e9:a9:cb:1f:
         a8:00:f5:ac:88:5c:92:0d:70:7d:17:e9:99:82:e5:76:47:31:
         2d:b1:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:54 2024 by rpki-client on console-fra.rpki-client.org