Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1d91971-bde2-3959-8733-0c89a5200281.roa
File:                     c1d91971-bde2-3959-8733-0c89a5200281.roa (raw, json)
Hash identifier:          AO1YzwRDTiR/GkbKsKXx47TZUf3Rx5+epy+Mx/4+UBE=
Subject key identifier:   3E:B8:AD:7E:A8:76:F8:99:37:63:EE:FE:5C:A3:26:38:7D:FF:F9:CE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B58F0402B5AB7D677C6623
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1d91971-bde2-3959-8733-0c89a5200281.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        209.139.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:8f:04:02:b5:ab:7d:67:7c:66:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=dc000e09-ebeb-4979-95e8-688027cdeadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:48:25:7e:a6:2b:12:1d:27:55:a0:58:ed:
                    32:a3:11:3d:17:33:e9:8d:d0:ac:25:d7:57:16:98:
                    1c:87:fe:ce:3c:26:5f:6b:6d:6d:44:6a:a1:b5:3b:
                    fa:23:03:47:bb:32:17:b8:d2:ac:b0:c5:88:af:fb:
                    7d:49:5a:5b:e6:72:31:a7:3f:95:a4:4f:1f:9f:17:
                    cb:28:36:b6:c8:e8:47:74:36:63:34:c2:88:af:3f:
                    c3:f8:84:0b:ab:8e:eb:16:b8:c9:e7:c6:e2:9e:8c:
                    40:0e:82:25:0d:f6:d2:60:21:56:aa:37:2f:ee:76:
                    b7:bf:b7:2c:cc:7c:df:bc:5f:45:32:36:8a:0a:5c:
                    86:2c:a5:f0:f5:9f:38:cb:1a:0a:fc:4c:6d:a3:f3:
                    de:7c:4a:bc:03:f0:27:94:23:39:8b:85:8e:56:10:
                    e7:c7:0b:dd:a9:db:aa:e9:a8:ef:f8:a7:59:aa:de:
                    54:f6:44:33:33:3d:fb:c1:e3:22:b8:47:82:18:25:
                    55:30:45:36:89:eb:eb:5b:e5:d9:52:a4:84:bb:1b:
                    c5:1d:69:17:77:d1:12:cf:26:f5:3f:53:8d:e5:bc:
                    85:be:30:69:68:5e:72:07:87:88:1c:e7:8c:86:0e:
                    da:db:68:af:dc:ee:fa:31:d0:d1:9a:67:3a:63:c7:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B8:AD:7E:A8:76:F8:99:37:63:EE:FE:5C:A3:26:38:7D:FF:F9:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1d91971-bde2-3959-8733-0c89a5200281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.139.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:13:9f:05:c6:75:1f:ac:1e:af:9f:4d:4c:86:24:d3:2d:4a:
         bc:49:5a:ec:7a:9f:ae:6c:d2:44:ba:64:f7:2b:05:1c:32:34:
         93:ae:4b:35:df:32:9f:dc:e6:f8:93:2b:ee:7e:0d:e8:90:0a:
         02:21:4b:a3:a9:7d:04:0a:fd:0a:6a:23:49:81:b5:3d:b1:33:
         e3:7e:7e:f0:c4:80:c1:9f:1f:f7:02:5c:e0:8e:f8:dd:d9:ca:
         0b:5a:47:b9:4d:0c:4b:d8:a9:ba:e6:13:75:ba:91:ab:59:7f:
         13:d2:76:56:95:cc:75:80:79:ea:ff:28:95:63:65:12:7b:83:
         e9:4f:f1:fa:71:32:07:4b:45:ce:bc:b3:94:b3:5d:bb:6f:cb:
         9e:77:08:bc:36:c6:90:d6:76:c3:fd:0f:2f:6f:cc:4e:e5:f3:
         fd:f0:9e:e0:f0:fb:36:9a:e5:0c:bf:1d:79:53:1b:78:e6:6e:
         9a:6a:ec:f2:92:e4:87:91:d5:c3:db:69:fb:fe:44:53:28:d5:
         6e:85:d8:36:c1:de:35:ef:5e:bd:a1:f9:97:04:cc:a5:ee:ca:
         c0:f1:35:b9:73:ba:be:20:1f:a3:2a:ac:6d:e9:05:c4:66:ec:
         99:27:a3:f9:b8:18:ff:ff:a5:7f:59:db:94:15:99:fe:d2:58:
         3a:af:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:30 2024 by rpki-client on console-ams.rpki-client.org