Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17cb0a69-6e81-38f6-81d5-867814dfc4fd.roa
File:                     17cb0a69-6e81-38f6-81d5-867814dfc4fd.roa (raw, json)
Hash identifier:          FLPWVqohjZE4aVTQEvOfWewR9MZLspTh28pvfyqmrPM=
Subject key identifier:   05:F6:1D:D3:E7:AF:3E:0D:BA:67:37:72:F0:21:EC:1E:B2:7E:6E:23
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2BA7CA2DB99808A5CBC580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17cb0a69-6e81-38f6-81d5-867814dfc4fd.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        216.208.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:a7:ca:2d:b9:98:08:a5:cb:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=7e2d19b6-37a6-49ec-8bd1-2c692bfe4242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:c4:aa:83:ff:b4:bd:43:33:eb:25:a5:92:
                    f7:71:ec:d5:6c:17:26:d8:13:c5:11:8b:90:c4:8f:
                    ed:a1:71:7d:86:c6:42:14:0e:13:aa:63:6b:b9:15:
                    ec:84:e7:88:8d:ed:bf:c7:84:c9:81:68:41:93:6a:
                    fc:06:21:e7:77:f7:1f:c3:5c:da:ec:01:7a:d6:87:
                    06:f5:50:df:aa:44:ee:55:d4:03:07:06:4c:23:e5:
                    fc:bc:7e:48:44:c6:cc:91:9f:21:3b:f0:16:15:49:
                    dd:66:6d:25:d4:17:c3:1c:a9:32:eb:af:b1:85:40:
                    63:8e:67:3c:30:d2:ca:76:a5:42:fa:aa:77:37:0a:
                    da:00:47:f2:82:60:36:d0:f4:aa:bb:3f:ce:8f:6e:
                    34:27:a7:28:ad:ad:3d:80:10:a8:36:4e:b7:e8:41:
                    43:27:ec:bd:c3:ca:8b:f4:fe:6a:96:c4:23:ff:14:
                    ae:c3:49:e2:2f:8b:9e:ec:03:2c:90:1c:8a:bb:36:
                    90:77:b2:7d:1f:22:d8:05:c5:a8:99:7d:05:d2:c5:
                    9e:50:97:4b:10:14:71:36:19:ba:9f:82:cf:29:84:
                    ce:7a:31:95:d2:69:5e:c2:8f:94:6a:42:7c:e7:92:
                    04:0a:e7:0d:0a:50:73:3e:eb:ca:85:40:97:1c:68:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:1D:D3:E7:AF:3E:0D:BA:67:37:72:F0:21:EC:1E:B2:7E:6E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17cb0a69-6e81-38f6-81d5-867814dfc4fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:28:70:3a:33:db:11:af:b2:01:cd:6d:61:e5:f1:9c:af:71:
         4c:6c:d3:83:a8:8c:bf:a3:3c:f3:ea:c2:6c:53:1a:75:ec:ae:
         09:d7:f0:87:93:b8:cf:50:26:dd:fe:f9:e8:40:11:12:a5:84:
         b9:88:74:f1:a3:1a:8d:c4:8a:1f:03:26:ac:03:84:75:fd:8c:
         88:50:c9:b8:ca:99:9c:f0:02:44:f5:d6:71:c9:9a:ce:78:b6:
         eb:fb:e3:d6:79:b9:4c:e3:02:62:17:db:94:ed:0c:45:ce:9e:
         d4:ad:8e:27:45:3d:39:74:55:a1:9f:e1:e2:10:f1:27:9f:3f:
         e4:d9:3c:ee:1e:0c:39:ac:7d:6c:18:a7:a5:9c:5d:da:66:21:
         a6:83:43:bf:8b:97:84:fc:53:c0:fb:c0:51:db:46:46:fa:b4:
         5e:c7:d8:8a:3a:5c:70:44:6e:a9:6c:6a:85:e8:d5:f3:b5:4b:
         f3:6b:90:a5:b0:ff:fe:63:f6:85:52:6c:77:23:45:98:93:95:
         a5:f8:ab:b6:ea:a6:48:77:b6:42:e6:81:38:81:1c:c3:1a:b0:
         c5:76:74:75:22:70:72:da:3e:f0:f9:06:20:13:a8:ca:61:96:
         a4:e0:db:ba:4d:ca:60:d2:8a:48:ec:43:90:50:b5:7e:7d:c5:
         d1:1e:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:09:01 2024 by rpki-client on console-ams.rpki-client.org