Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf8c046d-420a-347b-afa7-1f74cf0597ce.roa
File:                     cf8c046d-420a-347b-afa7-1f74cf0597ce.roa (raw, json)
Hash identifier:          hWD6tl1iMNJupO2mmkRkEtHgFeVYFoP8N9H/aTwfH80=
Subject key identifier:   30:D4:54:71:FF:5C:67:5F:D5:1B:13:E1:E0:FA:75:BB:C4:EF:94:5C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4D041F6D1F9CD98AFC480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf8c046d-420a-347b-afa7-1f74cf0597ce.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        206.172.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:d0:41:f6:d1:f9:cd:98:af:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=03e29b4b-20a7-451c-95ed-71d7288464ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:e1:2f:9b:65:68:db:08:11:8a:5e:14:68:
                    9f:d6:e4:92:b9:6f:1e:99:5b:fe:fc:16:0a:d1:1f:
                    49:c2:6a:a8:f9:c0:14:f4:4b:50:cb:10:7e:8d:47:
                    91:96:ac:4a:a9:30:27:59:fd:02:3e:85:c4:fd:57:
                    62:fc:eb:68:93:2d:de:8d:47:70:ed:85:89:06:72:
                    d3:70:81:b7:47:09:de:bf:a0:47:6e:9c:d0:7e:55:
                    1b:8a:00:61:82:15:23:65:34:cf:83:18:8e:57:36:
                    76:2f:f5:b1:dc:45:60:59:79:a7:90:bd:9c:f7:f9:
                    ce:b3:e5:bd:fa:33:fe:5d:17:bf:e3:40:66:fb:89:
                    5a:c1:db:cc:b5:a4:42:3f:07:50:a9:a6:12:36:fe:
                    34:d1:dc:ba:e2:c0:e6:ce:e5:35:29:41:20:2c:67:
                    55:3f:38:97:ca:a5:2f:bb:b1:aa:a8:ae:2c:78:ff:
                    e2:c6:ed:49:27:08:1e:23:fd:eb:21:09:db:ca:f3:
                    ee:ba:06:56:d0:11:74:39:a0:20:c6:67:53:94:77:
                    3e:91:3a:b2:6a:81:81:df:a1:e9:4e:3c:1f:2b:98:
                    af:cc:97:ce:5d:6f:c6:91:9d:5d:86:bf:c1:06:0a:
                    0f:3d:93:2d:85:a6:6c:4c:af:ce:e7:d3:34:8d:44:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D4:54:71:FF:5C:67:5F:D5:1B:13:E1:E0:FA:75:BB:C4:EF:94:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf8c046d-420a-347b-afa7-1f74cf0597ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:6e:2e:f8:15:17:c1:0e:c0:37:66:45:da:1f:6d:a5:20:
         d0:97:88:67:e5:80:bc:ba:22:90:be:c9:a7:d5:d0:05:ad:71:
         7c:d7:92:dc:74:17:db:27:87:57:10:b5:54:00:27:2a:25:b4:
         d6:65:ac:e6:51:16:be:5f:9a:ab:4f:53:76:e5:48:26:0d:ff:
         01:d7:c2:40:d1:d4:5b:37:16:08:9c:30:f6:d7:4b:cb:1c:74:
         ba:92:0c:d5:8f:57:e4:16:c1:01:7b:26:7a:45:8d:63:77:c3:
         eb:07:9c:e4:7e:e6:8b:b0:22:d8:37:1a:e5:37:8e:5d:24:4b:
         cb:37:cf:50:72:b2:ce:29:8f:1b:35:e5:64:a1:ac:48:96:97:
         b4:97:e4:06:da:c2:b5:a9:4a:37:df:12:98:35:df:06:5f:f4:
         96:9c:a0:7d:fd:c1:8c:f1:f5:e2:b3:1d:1a:ba:ec:90:8b:d8:
         3a:34:3b:88:02:c1:89:ac:35:8f:e9:a7:45:ff:b6:b8:5e:b9:
         03:0c:a9:f1:f2:91:b7:24:d6:92:13:25:f4:d6:a9:16:12:d4:
         31:48:72:98:ff:29:5d:8c:40:58:d9:c3:7c:8d:6b:95:5b:15:
         58:7b:dc:e6:a3:9c:6b:96:20:21:e4:fe:e5:d0:0f:c4:6f:c8:
         61:a7:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:34 2024 by rpki-client on console-ams.rpki-client.org