Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbba8c99-79b4-3f36-8c61-8022712565fd.roa
File:                     cbba8c99-79b4-3f36-8c61-8022712565fd.roa (raw, json)
Hash identifier:          szyyuvWS9uOmXN9XN+I6YKI+fjNLLDps6Xaf41o4T80=
Subject key identifier:   82:39:4C:5F:35:36:3D:8F:13:59:F3:60:CA:EC:02:3D:B4:83:11:2C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B5FDC36750991F7AB31280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbba8c99-79b4-3f36-8c61-8022712565fd.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:fd:c3:67:50:99:1f:7a:b3:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=f086dd9d-e768-42fd-8983-7790bac991c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:b9:e4:19:f3:67:84:c2:4c:3e:5d:26:9c:
                    30:e6:d9:d8:02:ae:55:a8:24:c0:39:68:8f:86:0d:
                    26:e6:6a:20:46:36:73:d2:8a:55:8b:f1:7c:6b:94:
                    1e:11:d7:e6:e4:f3:83:bd:d1:ef:40:e0:86:fb:c8:
                    1e:e6:70:c4:97:e9:91:84:f6:06:54:12:7a:1d:b3:
                    dd:84:f5:b4:4b:41:c2:88:a4:42:a5:3d:08:f3:73:
                    2c:72:4e:b1:c9:d5:c9:0f:4e:13:d5:b2:26:9d:8d:
                    b4:5f:9f:27:91:b1:93:2a:3d:29:46:3b:bf:84:6a:
                    7a:03:9b:0c:67:d9:9e:c0:c9:59:8a:09:b9:28:26:
                    cc:34:40:f0:ea:43:8b:31:41:5f:68:5a:8a:31:0c:
                    a4:c0:cd:b4:11:7f:6d:83:0f:5c:7d:5c:24:d9:1a:
                    c8:4f:7e:9c:84:c1:31:18:49:f3:b2:01:76:17:5d:
                    80:5b:70:6f:71:b7:3a:b7:3f:12:72:24:66:13:0e:
                    95:87:4d:8e:a5:1e:da:3a:24:94:1b:38:c0:d8:ad:
                    5b:be:1c:2e:47:96:ea:00:41:26:f0:56:df:94:60:
                    7c:54:0b:d8:b4:2f:eb:15:07:d8:4b:96:e8:9f:35:
                    00:cd:47:53:e5:4d:c2:52:d9:aa:b5:91:bc:25:aa:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:39:4C:5F:35:36:3D:8F:13:59:F3:60:CA:EC:02:3D:B4:83:11:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbba8c99-79b4-3f36-8c61-8022712565fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:4d:fc:cd:11:10:f7:16:c0:06:70:54:9a:a0:0a:b7:32:
         d1:ba:26:a1:0a:69:66:da:27:81:f7:66:95:22:18:ac:73:54:
         9c:d4:ef:7e:d7:5d:1b:f1:15:9d:25:0d:8e:c5:a1:9f:0d:59:
         12:ee:c7:54:9f:b7:53:7b:15:56:5a:27:1f:ad:02:df:c5:2e:
         d8:b5:aa:4e:38:d4:d2:c6:1e:fa:a9:63:89:c4:4c:9f:ef:8f:
         0e:30:ef:2e:64:d5:5a:a0:75:c9:06:da:2c:a1:4b:16:dd:54:
         4a:49:09:8e:26:e8:02:06:89:bb:f1:9d:38:79:98:7e:6d:7c:
         48:4b:4f:66:fb:9b:d1:f2:db:1e:e3:b8:48:14:ab:a1:fd:47:
         47:e0:e2:c5:40:2b:ab:74:5e:e4:b7:4c:95:08:9e:23:9e:a3:
         7e:a1:89:b7:30:3b:09:cf:2e:b7:e6:64:4b:32:cf:d5:37:87:
         1a:9e:89:0e:45:b3:18:f8:9c:4d:6f:ff:66:8f:cb:7e:f1:6f:
         99:4f:cf:e6:50:11:3d:3c:5f:06:1a:d3:0c:01:21:c3:90:f7:
         a7:c3:ea:09:aa:d8:b4:5e:84:cb:69:a0:2a:5b:ed:d6:e6:a0:
         b9:f9:2e:0c:c3:67:aa:e5:68:90:db:df:05:0b:a9:4d:84:74:
         21:fc:2d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:48:01 2024 by rpki-client on console-fra.rpki-client.org