Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d341029a-b0f5-3f56-b867-5b35188b009f.roa
File:                     d341029a-b0f5-3f56-b867-5b35188b009f.roa (raw, json)
Hash identifier:          edbklwlzU77WcTqkm/lD9xmjfV8vk4fEwqnucglIo8k=
Subject key identifier:   A0:AB:51:4A:B3:75:FB:BF:B9:E9:5A:F1:38:0C:8F:4D:CD:3A:FE:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B61F5E02BC73641ED5D200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d341029a-b0f5-3f56-b867-5b35188b009f.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:1808::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:1f:5e:02:bc:73:64:1e:d5:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=aaa4fe14-1dc4-4edc-8476-1d115acfc779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:5e:b4:6e:5a:ab:4a:af:31:62:4d:99:eb:
                    36:f9:6b:e2:68:a6:72:66:0a:6c:5f:bc:c5:a3:a2:
                    ee:8d:c1:f3:f1:33:19:0b:d4:ec:13:9e:40:4e:21:
                    c4:28:8c:00:db:26:c3:36:91:c5:aa:a3:ad:a2:da:
                    3e:c2:42:80:7e:f1:6f:fe:8d:b3:94:ac:a6:b2:3e:
                    f6:e0:39:35:ec:ed:3c:12:19:64:bb:66:42:b2:2e:
                    09:c8:81:82:2f:f3:e4:4e:74:5d:ae:a0:2a:34:e8:
                    db:68:54:a4:52:17:7c:46:9a:ec:c8:95:be:8e:6b:
                    52:ac:32:e3:51:3c:96:f4:2b:2a:3f:cc:0a:de:48:
                    2c:e2:51:84:9a:6c:c5:79:96:97:4f:bf:ba:a1:c9:
                    ef:67:70:ef:25:b0:b3:ac:69:69:f2:0c:8b:80:84:
                    ea:56:84:5b:10:b1:2b:a8:bf:a8:b7:a1:2b:c9:38:
                    61:6b:6e:2b:d6:cb:0b:2b:41:53:b5:1b:17:e5:46:
                    f2:89:46:68:fc:16:2f:22:10:b5:bf:f5:d6:42:64:
                    5e:21:56:72:71:a4:3d:01:b2:e9:68:de:c7:db:91:
                    86:a5:da:ad:13:85:3b:49:8a:8f:01:e8:e6:8f:2d:
                    67:e5:5c:86:66:5e:92:5a:63:8e:09:cd:29:d9:f9:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AB:51:4A:B3:75:FB:BF:B9:E9:5A:F1:38:0C:8F:4D:CD:3A:FE:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d341029a-b0f5-3f56-b867-5b35188b009f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1808::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:e5:86:b9:65:9a:ce:1f:3d:86:45:18:97:c5:78:10:17:
         93:53:b8:f1:96:a4:34:e6:2a:d4:6a:88:64:fd:d5:0a:4d:1c:
         06:29:21:f5:dd:67:57:2e:8d:8e:70:b9:10:b1:17:b9:d3:0e:
         aa:f5:8d:80:79:f0:59:62:96:81:17:d8:6f:af:af:91:d0:e7:
         1c:19:32:cc:95:06:09:93:e6:19:a3:55:a1:1b:ac:06:00:6d:
         99:a3:72:64:22:3e:2c:1b:84:0e:ba:13:30:8e:31:c7:6b:8c:
         ba:df:59:6c:03:57:3c:1c:92:53:bd:03:39:7e:75:01:1a:f2:
         6f:fe:f6:07:25:53:40:b1:e3:57:79:66:64:f2:81:cf:ce:97:
         9a:80:39:38:bc:5e:21:7a:fc:15:fc:b6:78:6c:46:f9:bd:e7:
         fe:42:8f:25:58:fc:39:f1:b3:52:9f:28:7b:33:e2:48:b9:90:
         89:cd:27:45:9c:5e:d8:24:81:8e:be:45:3e:09:ef:5d:98:a1:
         aa:05:1e:f0:a4:b6:bb:06:8c:f3:69:dc:f4:76:88:8c:80:25:
         11:30:f5:20:f8:22:a3:a5:2a:4d:46:b1:65:6d:b7:f8:39:9b:
         dd:bb:c3:a4:23:59:70:07:20:e6:92:0c:c5:3b:97:71:10:97:
         97:2d:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:51 2024 by rpki-client on console-ams.rpki-client.org