Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec74db34-26a5-36b9-8c82-fcb0fc591e8a.roa
File:                     ec74db34-26a5-36b9-8c82-fcb0fc591e8a.roa (raw, json)
Hash identifier:          KEWTYsEkHJrLbenImOoTmYi+Kx1KIgnwcKPJrd69HUI=
Subject key identifier:   C6:18:45:AA:D6:8A:23:D3:7A:5D:C8:73:64:BB:CF:83:9A:B9:C0:65
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3008B0BD012ED2E3DBA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec74db34-26a5-36b9-8c82-fcb0fc591e8a.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        65.92.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:00:8b:0b:d0:12:ed:2e:3d:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=19156e9d-d3aa-4f38-bf22-5f23d730ce1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:36:87:b6:ad:b3:5b:d8:bc:c2:53:85:90:
                    d1:07:0f:01:6c:db:58:9b:88:ed:f6:4c:14:f8:db:
                    39:90:0c:ed:da:36:53:3a:44:61:ef:f8:9f:b9:38:
                    66:0d:7e:5b:db:1f:75:64:aa:ab:17:89:27:30:47:
                    b2:aa:5d:92:ce:a2:ac:f6:77:c7:01:b8:34:7e:e9:
                    7f:0d:8f:a1:85:a4:80:1a:87:62:a1:9f:e3:86:53:
                    f0:2e:7b:d3:b0:cf:e0:41:c6:1e:eb:9e:bc:5b:9e:
                    c9:ee:ff:e0:f8:8b:07:02:a2:f8:83:f0:35:f9:72:
                    0b:22:a7:35:12:cc:94:61:1a:4f:69:a9:af:b4:26:
                    78:88:da:22:f7:4a:1f:3a:a7:7d:67:f5:6b:83:dc:
                    23:24:4b:71:e8:2c:49:a7:02:31:10:01:ac:7c:b8:
                    0a:92:ed:7b:af:ac:ee:ce:21:1f:21:a5:44:d6:fc:
                    29:d0:81:99:23:00:e5:72:a6:09:1b:d6:87:b3:4d:
                    b7:d4:6a:1e:20:62:ec:3f:89:d9:58:cf:42:88:e0:
                    e0:5f:aa:8d:a5:30:ad:d0:24:95:3a:ff:3e:c5:a1:
                    30:74:83:11:ab:0a:fc:bb:9d:2d:ba:ea:72:c3:b6:
                    6e:1a:d7:be:6e:98:3d:44:12:3e:29:04:e6:f8:55:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:45:AA:D6:8A:23:D3:7A:5D:C8:73:64:BB:CF:83:9A:B9:C0:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ec74db34-26a5-36b9-8c82-fcb0fc591e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:3b:12:e3:4d:0f:19:b0:df:bd:87:bc:1e:8f:bb:14:41:
         bd:3f:0a:e9:1c:90:74:18:39:86:c0:a3:fd:9c:53:e0:1f:37:
         1e:99:de:74:a6:06:67:3c:b4:ed:74:2f:a7:9a:b9:53:4e:54:
         1c:99:44:c9:1e:1c:45:c5:6a:41:25:f0:0c:a4:52:36:02:2f:
         2f:42:65:dc:45:e2:c1:b3:71:9a:61:b9:40:ef:73:84:f2:55:
         cf:8a:8d:a6:a4:c3:f5:ae:04:d9:a4:f4:ae:2d:e2:d1:5a:e6:
         17:d5:dc:fc:d2:fb:c2:74:57:bd:25:d4:ab:ef:0a:3b:c6:70:
         d0:9a:e1:68:55:a4:a3:32:b3:23:85:2f:9c:c2:64:e1:e8:67:
         02:48:06:a6:ad:82:72:ed:4d:c4:47:84:45:dc:a9:9e:68:c7:
         de:e1:27:5a:68:46:09:ff:14:64:73:65:68:c6:3f:37:65:82:
         08:11:e1:e2:f9:35:8f:22:12:61:c5:1c:a7:eb:68:4c:d3:39:
         90:e5:ff:2e:4a:aa:d7:8c:64:e1:6b:23:13:ad:b5:e7:6c:31:
         9b:a0:9b:09:f4:1a:47:34:ed:f6:fb:5f:c7:7b:e2:3b:4e:e2:
         9a:ae:78:0e:aa:ec:75:52:a4:3e:84:26:e9:ed:30:ee:05:92:
         1b:ee:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:07:25 2024 by rpki-client on console-ams.rpki-client.org