Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d93ef0e6-5767-3ab8-95a2-fee70733f1e6.roa
File:                     d93ef0e6-5767-3ab8-95a2-fee70733f1e6.roa (raw, json)
Hash identifier:          DXJOdmODrjYsiGQYOg2eLUVQ00JauSD6eGq9lW/m0UA=
Subject key identifier:   11:BC:A5:3E:AB:63:D3:A2:5D:DD:7C:32:36:B0:A3:50:D8:53:80:D9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3FD238CEDD7C25CC75B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d93ef0e6-5767-3ab8-95a2-fee70733f1e6.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        198.235.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:fd:23:8c:ed:d7:c2:5c:c7:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=a98b42fa-a42e-4392-b482-5e2161a246f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:39:29:53:a7:60:1d:6f:e7:e0:6c:43:81:43:
                    51:c7:de:06:88:89:8d:f8:f6:ff:06:7a:3f:73:e5:
                    ee:68:35:15:3c:b4:6f:b4:38:5f:77:0a:e5:66:4c:
                    bc:da:2c:6d:8f:bc:2f:ec:a3:62:20:67:95:05:fe:
                    d1:15:7d:3b:6a:37:c1:1d:69:d4:4a:77:7d:bd:c6:
                    7b:90:77:a4:32:f3:92:0f:41:98:9b:38:95:77:2c:
                    36:02:ca:39:98:b0:ff:7b:1e:83:59:16:e7:1e:0a:
                    b8:6d:97:00:36:90:0a:43:6a:5b:8b:aa:b3:a2:e0:
                    16:59:f5:d8:7b:26:18:f2:36:84:7e:97:04:f8:df:
                    2a:15:f1:aa:8d:6a:df:2b:42:45:88:3c:0b:60:e7:
                    03:1e:e4:c5:9c:c3:e2:d9:f9:3b:fd:2b:9b:3b:4f:
                    f3:14:0c:ca:ca:0e:ee:73:1a:3f:8b:6c:38:67:bb:
                    93:67:3c:5d:6e:ac:94:be:53:46:c0:ce:3b:67:16:
                    6c:16:30:9e:0b:2f:15:12:83:48:a7:d4:c5:76:20:
                    e5:03:8a:9f:a0:45:37:3d:05:51:50:59:3c:29:6e:
                    31:df:20:58:0e:4d:f6:9a:0c:2c:bf:0e:97:01:06:
                    29:cf:d3:d1:9f:36:de:e9:00:0a:35:ff:6d:11:3b:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:A5:3E:AB:63:D3:A2:5D:DD:7C:32:36:B0:A3:50:D8:53:80:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d93ef0e6-5767-3ab8-95a2-fee70733f1e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:70:81:12:78:d4:2c:03:06:66:19:88:fb:32:94:6b:d6:04:
         3b:19:68:5b:e0:40:1a:53:cc:b9:b5:99:2c:ae:09:5e:69:67:
         f2:09:61:33:17:78:e1:88:4a:a2:a3:cd:98:df:e4:d4:15:45:
         7e:07:d8:37:36:cb:b1:f1:f6:9b:44:85:dc:29:31:4b:b6:bf:
         d6:b5:47:3c:46:f1:5e:23:78:60:33:fb:74:ba:d3:4e:38:a2:
         e0:36:4a:7b:70:df:d3:6c:0f:c6:0f:39:25:61:39:2c:8b:6f:
         d3:b1:a3:1b:c4:01:ad:dc:73:8f:15:7e:b0:41:39:62:4c:df:
         96:bf:ef:6b:7e:3e:7b:c1:78:e7:96:a2:09:18:0f:ec:5a:e9:
         eb:7e:28:83:65:ec:ef:98:16:0c:ba:45:fb:e4:4b:05:70:0a:
         1f:04:ea:6f:d1:68:f4:38:2f:b5:d1:e4:94:30:d8:c0:2d:cd:
         fb:df:e8:e5:8b:d4:74:f9:b5:7a:a1:3a:5b:67:b1:07:0f:30:
         27:93:ef:d6:9b:60:f3:51:57:aa:10:b7:d5:b7:68:9e:b9:c2:
         02:d3:03:cc:7a:50:92:ae:28:e9:cd:6d:e9:b3:a9:0c:59:05:
         4e:3b:43:bd:f8:e7:1e:a9:1a:02:a7:7c:42:49:78:a4:99:92:
         ea:19:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:48:01 2024 by rpki-client on console-fra.rpki-client.org