Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18012abc-c36b-37de-aa8b-307444263620.roa
File:                     18012abc-c36b-37de-aa8b-307444263620.roa (raw, json)
Hash identifier:          COe6YKDnAiW51SBGwBqcPbzqGlbJd4R8S5xnU303cYE=
Subject key identifier:   F1:67:A5:DA:85:94:22:8F:7D:D3:53:BC:C9:8F:C7:79:88:AE:E8:78
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B597B3F1AB44545CBF320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18012abc-c36b-37de-aa8b-307444263620.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     30336
IP address blocks:        209.226.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:59:7b:3f:1a:b4:45:45:cb:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=e8e8b923-a071-4e47-abf9-78df44639ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:fc:59:f4:8b:1d:71:39:e5:39:8b:07:9b:
                    e1:67:21:5e:50:1b:46:09:4b:c2:b8:a7:e1:63:73:
                    67:2c:3d:87:13:2c:71:3f:2e:ec:68:c3:1f:9b:da:
                    47:1c:43:96:34:87:28:dc:e7:90:9d:41:71:53:4f:
                    af:2e:19:0a:f9:2d:39:59:9f:47:29:02:d0:21:2f:
                    90:b1:11:a5:3f:b3:76:47:64:28:bb:8e:08:c4:64:
                    16:b4:3d:f3:db:7a:53:06:4a:c9:ac:c5:e0:87:c9:
                    a1:40:02:06:a6:8d:2a:7b:2a:bd:37:91:64:45:e4:
                    62:57:75:d5:84:46:e7:73:b3:53:33:d7:bf:0f:b9:
                    76:e4:dd:5e:01:56:f1:f8:29:34:ad:f2:5f:49:d2:
                    8c:d5:f3:54:2e:d2:a8:e9:9d:d0:59:26:cb:5b:b1:
                    49:2c:d9:8d:ad:38:9a:67:b1:77:46:66:e6:d7:73:
                    55:b3:fd:4e:c4:06:5a:f2:d1:fe:7f:b0:9a:22:17:
                    c5:a8:a0:15:c1:d3:e0:8a:b1:f6:4c:b6:ee:59:b5:
                    34:96:b5:ce:0d:53:ac:9a:95:47:2e:81:02:7d:74:
                    9c:6a:1c:9b:13:6f:55:2d:8c:b0:66:5f:61:8e:2f:
                    7b:de:69:b0:51:36:63:84:6a:2e:3d:c7:b7:07:75:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:A5:DA:85:94:22:8F:7D:D3:53:BC:C9:8F:C7:79:88:AE:E8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18012abc-c36b-37de-aa8b-307444263620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:2c:02:af:0f:e6:66:28:9e:eb:f6:f1:17:00:92:d7:ea:
         a2:bb:bf:6a:67:18:cc:c0:ac:0e:b8:2f:7e:8d:5d:aa:5b:47:
         27:95:35:22:1e:03:cd:fb:2f:75:70:bb:ed:94:d9:63:98:d7:
         11:be:0f:7b:37:f3:4a:b3:2d:f9:10:4c:4c:88:d1:6b:ec:9d:
         09:e4:c7:41:47:43:cf:66:39:0b:58:ab:82:3f:a7:a4:89:60:
         46:e7:9e:49:ff:08:05:6f:85:c3:88:ff:44:63:c5:87:c5:6e:
         ff:c2:78:e3:99:0f:d0:c7:88:27:87:e7:5a:9d:8e:72:0c:30:
         c1:4f:52:be:2a:f9:77:e8:7a:53:5e:ff:50:0d:81:aa:48:4f:
         65:d4:62:30:5b:6e:22:29:72:32:5f:ea:ad:5d:50:22:dc:23:
         36:2b:f5:00:58:f3:99:7d:be:c4:4b:a9:fb:8d:0d:a5:89:2a:
         e7:2d:63:18:31:26:56:fa:9a:d3:e8:04:42:74:63:2b:03:98:
         cb:6c:b6:5d:ea:22:45:26:45:ab:48:8a:59:7b:99:1a:02:6f:
         c8:44:c9:16:e0:1e:13:fc:a3:e4:7e:50:40:a1:b3:5c:7c:8e:
         ed:44:97:a1:f9:6f:fa:ed:6e:2f:01:fe:e1:45:dd:4a:90:b1:
         6a:a1:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:09:01 2024 by rpki-client on console-ams.rpki-client.org