Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e93373-200e-39ee-ad05-ef044a7ef671.roa
File:                     18e93373-200e-39ee-ad05-ef044a7ef671.roa (raw, json)
Hash identifier:          90kce+5PNCUHVn1iCzlk+/GFCoUQjdyKyFIjfOmZ65c=
Subject key identifier:   83:28:E8:CB:AB:C3:E2:B9:05:CF:0D:B2:37:BF:5D:07:44:91:37:CF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2ABF2DF952517A41DA8F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e93373-200e-39ee-ad05-ef044a7ef671.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.164.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:bf:2d:f9:52:51:7a:41:da:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=5f8d7ee6-f259-40f5-b06c-deb1a93fa276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:ac:7e:07:bf:14:44:ea:42:91:c2:c3:61:
                    6a:87:97:ec:43:5d:6a:23:67:9c:e6:2f:fa:c7:d9:
                    ef:54:13:42:21:6e:e5:3b:bc:9b:9f:92:25:e3:9a:
                    7d:6c:4f:cc:aa:85:b7:86:be:6c:9e:fd:a2:bb:f2:
                    0a:7a:ff:db:8e:71:14:47:46:7f:34:c5:9e:1b:96:
                    60:ee:9c:60:05:cf:ec:3b:4c:2a:ba:94:fe:af:be:
                    22:aa:11:45:e1:54:4c:01:23:4f:01:69:3d:58:37:
                    78:28:a1:9d:8b:f3:da:16:64:bc:8b:a8:10:5f:37:
                    1f:cd:da:1b:4d:90:5e:50:87:05:44:e9:1e:04:37:
                    cd:eb:48:70:8d:21:a3:f5:55:e0:e2:5c:85:d0:41:
                    af:cc:f6:b1:ef:06:8b:d3:92:9f:80:44:20:64:5a:
                    9e:5c:91:d7:d2:fc:43:f2:99:9f:63:63:4c:54:26:
                    d1:30:90:38:65:6c:b9:bd:14:d6:44:fd:ff:05:43:
                    dc:73:35:88:a9:de:8f:c5:74:da:4e:a5:04:cd:3f:
                    e0:d2:57:f2:63:c0:e0:24:0c:a5:d6:ac:87:35:d9:
                    b7:15:88:c8:3f:5c:59:e2:d6:51:17:d9:fe:05:94:
                    b1:11:48:de:f4:e9:9b:4f:89:26:98:98:4d:6c:7a:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:E8:CB:AB:C3:E2:B9:05:CF:0D:B2:37:BF:5D:07:44:91:37:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18e93373-200e-39ee-ad05-ef044a7ef671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d9:2e:72:07:c7:09:ba:d5:64:b8:92:e1:5d:26:cf:2c:23:
         af:07:4d:1a:8e:bd:65:f5:cd:ce:e1:42:da:c7:85:f9:29:5d:
         21:76:75:06:a8:99:d7:2d:37:7c:57:b3:63:a4:ea:b9:ef:49:
         15:f3:54:5b:ee:3d:c9:bd:9d:13:50:43:7c:55:e7:e2:14:05:
         00:6a:6d:9b:8a:f3:8d:c0:4b:35:6a:b6:90:36:44:93:7c:4c:
         99:51:5c:3d:c3:d5:9b:01:ab:4d:39:19:51:30:3d:f3:ba:2c:
         93:0e:53:ba:4a:c3:c9:11:86:95:51:12:d2:72:f5:24:76:30:
         93:44:7b:e8:9d:72:7c:d2:d4:90:18:f2:be:a3:97:20:ac:87:
         af:2e:d4:a9:4f:a4:59:23:19:9c:33:28:ac:fd:40:97:e1:c8:
         cb:73:72:ae:b0:09:40:d6:9c:d6:b0:ee:08:e5:9b:08:47:e9:
         24:cc:5f:71:e1:d7:70:1b:f8:1c:ed:a6:d9:60:0c:0d:45:c7:
         2a:bb:cd:87:21:17:ba:79:49:d9:b1:90:43:0d:f9:b4:41:95:
         22:ff:4f:cc:ed:1d:09:f0:2b:7a:e8:c0:d4:8b:76:0e:e6:6a:
         0c:68:1a:95:aa:38:0a:bc:d9:73:3c:c1:13:54:48:a8:7c:61:
         ea:77:ea:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:09:01 2024 by rpki-client on console-ams.rpki-client.org