Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3235f40e-3747-3cf8-bf31-316c31da8999.roa
File:                     3235f40e-3747-3cf8-bf31-316c31da8999.roa (raw, json)
Hash identifier:          d4TD5w+y5aiCXA4jitUG0MwmyPV65tEE26hD5hUk1tM=
Subject key identifier:   A8:93:1D:93:0B:2F:38:6D:61:23:2B:C7:9B:DF:5D:A9:96:24:C4:AD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2AB64B5739C019F10D5080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3235f40e-3747-3cf8-bf31-316c31da8999.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.164.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:b6:4b:57:39:c0:19:f1:0d:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=35b83b62-fda1-4f65-a8db-21d21e7a0d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:a2:e8:63:21:52:95:50:f1:f3:f4:92:24:
                    fc:34:ac:04:32:d1:dd:19:0f:f3:2e:ab:a6:93:12:
                    68:45:c7:29:0b:71:eb:59:81:20:0f:e6:79:93:8d:
                    68:3f:3b:1f:06:ec:f1:85:5d:32:da:b3:d4:ee:b3:
                    73:47:0d:ec:7e:4b:89:47:c3:60:11:43:5d:0b:54:
                    a9:17:60:4b:35:85:d2:4e:48:a6:5e:8f:c9:cf:b8:
                    1f:7b:68:15:01:fc:2f:e9:55:53:33:7f:f6:12:50:
                    11:96:74:31:bf:e1:94:61:48:8b:f3:a4:68:4c:08:
                    15:3e:84:30:5f:29:8c:40:e7:54:80:bd:5e:12:a4:
                    25:6f:fe:20:bf:86:8b:32:9f:58:de:28:b2:54:6b:
                    ac:2d:7c:1a:91:f3:e0:b2:fb:38:d5:c7:6b:ad:bc:
                    27:5e:74:7e:82:6e:9c:60:43:96:01:dc:c6:ce:3f:
                    23:f1:40:78:14:e6:7f:37:04:fb:a7:6e:83:79:2f:
                    8b:78:d5:ec:d0:b2:2c:ee:36:00:fc:5c:00:cd:7c:
                    40:8a:2e:5f:d1:b5:5b:7d:c9:19:fb:86:11:84:ae:
                    e3:c8:78:e8:11:9d:ca:af:7c:41:30:b2:7c:c3:03:
                    fd:fd:4f:be:7c:ea:9e:83:a2:40:a2:f5:c3:74:33:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:93:1D:93:0B:2F:38:6D:61:23:2B:C7:9B:DF:5D:A9:96:24:C4:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3235f40e-3747-3cf8-bf31-316c31da8999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:0c:a5:37:6a:c5:f5:32:b8:2d:01:11:14:fe:34:7b:fb:
         94:54:e0:e6:d9:cf:a2:3f:7a:61:19:58:d4:2b:2c:81:07:cc:
         99:fb:d5:6c:e1:3c:1e:6d:84:a5:f7:32:bb:b3:c1:96:45:0a:
         d1:e4:d6:c8:da:63:20:64:e0:82:ee:ae:bc:7a:0e:4a:f5:57:
         2d:00:2d:4a:08:aa:2b:38:b0:b3:63:12:a4:dd:a2:e7:c4:f3:
         5b:4a:b4:51:03:5e:24:ae:98:b1:1e:34:12:d2:a2:03:8a:02:
         32:0d:9f:be:69:0a:1e:a3:57:75:36:81:9c:57:ca:fc:0e:bb:
         ac:7a:7a:b0:2d:85:b0:3d:44:7f:9b:0c:51:49:5f:a8:ee:0f:
         70:42:eb:52:e3:a1:cf:1d:1b:89:15:41:84:b9:53:19:9a:6d:
         09:f8:29:41:d9:52:c9:dc:ae:60:b8:98:c9:e1:12:eb:5c:4c:
         95:d7:ca:a3:65:cc:aa:e1:a9:e7:54:6a:8b:12:82:4a:b2:73:
         eb:68:e9:c9:58:ba:bc:c2:0c:fd:b4:8b:eb:de:94:32:14:41:
         d5:30:68:8d:1a:35:fe:0f:1b:56:28:d0:13:55:7d:3f:c6:60:
         07:a4:84:35:40:74:2e:41:87:43:b9:d6:9e:64:4d:bf:e7:ea:
         ed:0c:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:09:02 2024 by rpki-client on console-ams.rpki-client.org