Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8f7259c-f9fe-30f6-bb55-039b13987256.roa
File:                     b8f7259c-f9fe-30f6-bb55-039b13987256.roa (raw, json)
Hash identifier:          HgBIDQr7VQOZ+BmSquTvgi4Mx29exTRkoBq6SXOj25o=
Subject key identifier:   77:14:BB:D2:93:E8:60:89:78:DF:30:F6:52:45:B9:4C:EC:4F:45:CC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4550F91D2595D23348B20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8f7259c-f9fe-30f6-bb55-039b13987256.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     54788
IP address blocks:        204.101.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:55:0f:91:d2:59:5d:23:34:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=41ae5314-6e06-4524-9a9f-c517882d3460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:84:a2:0e:a3:45:09:47:22:76:a6:a7:4b:31:
                    b2:7d:5b:3b:e2:7d:40:09:69:04:2c:33:6b:de:d0:
                    9c:d3:ac:9a:7c:64:95:dd:f5:37:d9:1b:2a:8a:8f:
                    83:aa:33:f2:78:e5:38:20:5f:14:59:0e:71:6c:97:
                    4b:7b:3e:6b:c0:8f:0e:82:4b:d7:c5:ab:31:36:f9:
                    35:69:4a:33:f9:dd:b4:60:ba:21:92:03:57:29:83:
                    cc:90:90:96:25:f3:9c:cc:71:ea:ec:c0:2d:39:3d:
                    b9:ff:9b:94:22:19:af:c7:d9:43:53:e7:45:2a:bd:
                    5a:50:ea:b3:c7:58:c4:cf:f4:b4:f4:9f:86:20:04:
                    3c:cb:30:6f:03:9a:37:1a:4a:22:d4:3f:c9:23:ae:
                    b6:9a:75:b0:8b:7b:51:75:b6:18:96:be:f3:03:98:
                    c1:87:25:fe:3e:95:35:cd:57:91:1c:9a:f5:4c:64:
                    7c:30:99:bd:28:6e:87:fb:f5:c0:0a:33:e2:45:85:
                    2f:b7:5a:84:07:6a:33:f8:f7:12:cc:15:ce:e1:63:
                    40:5c:b3:ce:36:16:2f:b6:cd:0a:77:02:1d:3e:6f:
                    3c:ce:4b:f9:92:ab:24:6b:3e:97:db:ca:b3:11:be:
                    7e:a4:22:24:ba:e7:ab:e8:25:71:3f:bf:08:bb:43:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:14:BB:D2:93:E8:60:89:78:DF:30:F6:52:45:B9:4C:EC:4F:45:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8f7259c-f9fe-30f6-bb55-039b13987256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:16:85:63:a4:34:8a:64:60:0f:5c:6a:aa:9c:98:89:26:
         cc:47:60:b7:14:8c:0b:97:57:b0:9f:f9:19:3f:7b:b0:dd:b9:
         6d:f6:ed:3a:f2:7e:15:a2:93:79:c7:2c:ec:48:25:7c:cf:f4:
         d4:7d:2a:89:6a:91:97:92:8a:fc:3e:59:d3:42:b0:86:cf:33:
         b6:de:29:f1:fa:c2:5d:c3:cc:43:3f:05:56:19:b4:e8:65:58:
         7b:e5:bf:08:37:3a:ca:46:28:27:af:8c:99:68:f7:3b:a1:19:
         57:fb:1b:fb:25:d9:ed:a9:c1:8a:c1:47:9d:2f:25:e3:75:ae:
         31:2d:ff:71:b6:73:09:fd:e3:39:64:92:a6:ec:9a:e8:e9:68:
         4b:c1:64:9f:5b:be:48:b9:dc:42:8e:06:25:d3:bd:f8:62:4a:
         9c:b8:66:d1:56:d2:a0:48:31:fb:33:da:da:7a:6f:f6:90:43:
         fb:f8:8f:64:c8:f3:3b:ed:de:e2:87:a0:d3:62:c4:fe:a0:90:
         12:b0:8f:2b:92:36:42:31:0b:c5:84:c7:04:8e:ec:03:c4:7a:
         2e:c3:81:10:ad:c8:40:7d:89:91:5a:33:93:9c:1a:bb:b4:ab:
         10:87:ee:66:7e:2f:6a:63:b8:11:a6:bf:9c:d6:0b:3a:cd:70:
         26:df:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org