Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2ca7a4c-2e59-3790-9bf6-6fb0925a7678.roa
File:                     f2ca7a4c-2e59-3790-9bf6-6fb0925a7678.roa (raw, json)
Hash identifier:          Qg6L1gD4JfaOnaj7Ofd2f1KeFV8RWEyQ/yWESSgUP9M=
Subject key identifier:   F9:4F:98:5A:35:55:AB:A5:83:0F:09:F1:76:1A:30:65:E7:47:8D:02
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F7343451B1D27B550B580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2ca7a4c-2e59-3790-9bf6-6fb0925a7678.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.151.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:73:43:45:1b:1d:27:b5:50:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3a7413c5-c646-4a90-88ae-fbf26b47ea37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:2c:f5:66:3e:a5:c7:25:f3:fd:b8:82:a7:
                    1e:4b:ad:cb:b6:20:10:64:99:9f:e0:9c:2c:76:62:
                    12:01:78:c0:0e:dd:64:9d:71:af:df:c1:b2:97:dd:
                    aa:5e:63:ec:63:79:eb:c9:13:3c:e7:c4:93:68:61:
                    7d:9e:b7:aa:8f:45:e3:7e:1b:d0:6b:40:2a:a4:18:
                    c9:20:26:c4:92:7e:65:24:32:43:e7:b4:11:a0:f0:
                    76:4f:09:15:69:86:2c:28:89:b4:cb:cf:95:ce:c0:
                    b3:ca:cf:03:f0:12:b6:77:99:3d:9e:a9:1f:60:fc:
                    29:9f:79:94:41:46:fe:b6:4f:fc:2f:83:18:04:f4:
                    b9:d1:83:ac:ae:45:c6:6d:c3:a1:a9:d0:c7:c6:7c:
                    e6:a2:17:6f:39:26:af:9b:b3:c2:24:95:16:0f:a1:
                    0d:6b:6d:2b:04:36:af:b3:22:f4:38:90:ae:28:d4:
                    95:dc:16:8c:77:ac:a6:f8:a4:b9:1d:57:3c:d0:75:
                    a7:b0:cf:2c:47:58:d4:56:a9:ce:9b:fa:32:8c:ed:
                    44:73:c5:ca:29:d4:0f:a8:4d:5f:e2:19:b3:ad:5c:
                    1f:26:64:c4:90:a6:a7:38:c0:81:ea:21:13:30:f5:
                    6c:cd:20:ce:93:fc:05:e6:1f:04:4f:19:18:15:d7:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4F:98:5A:35:55:AB:A5:83:0F:09:F1:76:1A:30:65:E7:47:8D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2ca7a4c-2e59-3790-9bf6-6fb0925a7678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:32:be:05:70:aa:23:a6:b7:ef:97:97:f4:46:14:af:6a:
         f5:ca:aa:e6:12:97:7e:a6:1f:fc:c1:ee:02:49:9e:aa:06:d7:
         80:c8:5a:6d:1f:8f:c0:23:85:0e:5d:b6:95:a6:09:28:c4:16:
         ac:95:1e:a0:57:b3:f5:38:3c:17:3d:42:70:ac:28:b9:c7:6f:
         96:e0:23:0c:2b:89:6a:3e:0b:da:cd:e8:3d:a6:3c:87:bb:f9:
         78:31:6d:0e:a5:ed:54:97:b7:ef:93:67:f4:c6:fe:19:18:8f:
         55:6b:31:ed:b0:24:d1:4b:2c:96:c9:65:5f:89:f1:a0:ad:e3:
         5f:bf:55:19:f6:a2:63:09:e1:14:a0:d0:6c:b3:b9:56:61:3d:
         da:67:f5:07:b1:46:20:7c:08:2c:66:e5:3d:19:04:5e:23:8c:
         63:1f:58:39:d0:7a:6b:07:e8:7f:86:cb:d5:76:e7:76:cf:23:
         61:5b:8a:8c:4f:d8:ff:d1:7e:aa:4d:36:e5:8a:6c:f0:8e:d5:
         3d:0c:76:67:ad:f5:76:40:a4:31:a4:7f:4e:ea:da:c6:ff:29:
         ca:63:c0:3a:49:93:53:f1:d9:99:dc:88:66:dd:62:1c:f4:ba:
         f8:41:35:cd:08:83:b4:e0:6a:f7:88:8f:12:76:a4:14:17:25:
         d8:74:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org