Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be773f90-4a9b-3bbc-8c53-36035b338685.roa
File:                     be773f90-4a9b-3bbc-8c53-36035b338685.roa (raw, json)
Hash identifier:          SAMus5lRVFvoXR0lWD7Gq/UGRVh2DtOSdYxJG7i75Xc=
Subject key identifier:   0C:1D:C9:32:69:4D:04:ED:33:C2:E9:19:5C:E8:F7:D3:2F:11:32:B2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2BAB9FE189296A6B57D030
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be773f90-4a9b-3bbc-8c53-36035b338685.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        216.209.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:ab:9f:e1:89:29:6a:6b:57:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=deb1eb15-b0eb-487c-83ec-5e54197c74b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:87:6f:a2:09:26:10:f4:cd:4d:e0:7c:e0:
                    f4:80:0f:79:34:b1:82:e4:6f:31:72:a7:b8:2d:ad:
                    94:33:a3:63:68:34:9a:2d:2b:3c:bd:ea:55:cf:6a:
                    53:ec:02:38:de:ab:5a:2a:19:f6:19:03:9e:a5:05:
                    f9:a1:a5:2c:f6:50:a1:5e:33:e8:15:8f:fb:7f:73:
                    af:8c:f1:16:0f:f3:d3:3c:29:6e:c3:71:b7:94:d9:
                    64:79:45:79:80:4d:d9:1c:58:2d:32:0b:f6:96:35:
                    3d:6b:0d:ce:29:1c:eb:97:34:56:74:3a:78:bb:d7:
                    00:38:f9:36:fd:54:2e:68:16:aa:32:0d:b2:28:10:
                    c4:5f:20:23:12:20:43:ee:18:83:5c:ae:e5:2c:f3:
                    b1:98:eb:f3:62:10:71:bb:57:35:59:cb:c5:01:9a:
                    59:91:17:0f:45:23:7a:a4:e8:7b:2a:75:ac:5d:c1:
                    f1:b9:7e:f9:b8:85:91:fe:10:da:fd:90:23:68:f2:
                    08:25:5c:ab:e7:89:ba:5b:1d:d3:50:b9:0d:27:b4:
                    cb:81:f1:1c:87:88:9e:ab:bf:f6:d0:f3:06:72:8a:
                    4b:8b:38:0e:67:0b:90:d8:51:fb:83:ba:8a:38:8c:
                    ef:29:97:a9:f2:53:00:bc:2b:10:ea:70:4e:17:ba:
                    e8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1D:C9:32:69:4D:04:ED:33:C2:E9:19:5C:E8:F7:D3:2F:11:32:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be773f90-4a9b-3bbc-8c53-36035b338685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:70:a6:c7:bd:ae:da:50:d7:78:b8:2b:a6:56:6e:ac:4d:bb:
         4e:8c:dc:57:62:a3:c9:4b:2b:e5:7c:4b:fa:c0:b4:00:98:64:
         b2:68:f4:d7:27:33:c0:47:e2:b8:39:b3:fb:4a:06:45:3f:19:
         4e:7a:44:5e:fe:17:1d:ae:17:4c:3a:80:e4:2b:c2:4f:9d:80:
         db:aa:72:8c:1d:ba:0d:be:15:12:47:cc:67:08:63:03:d6:51:
         3d:7c:00:ed:47:03:84:e2:a2:8b:fc:bd:97:a0:cf:2c:01:ea:
         f6:b0:78:18:1c:58:50:16:45:84:ba:6b:1a:45:08:eb:f4:2b:
         d4:0d:2c:83:68:eb:34:10:fa:f8:28:bb:b6:a2:fa:27:e4:33:
         55:79:62:2f:25:54:23:ae:b0:c2:2e:c7:44:8d:d6:9f:83:44:
         37:26:5c:a9:81:e9:0d:24:55:13:46:d7:21:ae:84:b9:8f:f8:
         45:49:b6:ca:db:af:c3:23:26:3f:61:aa:d4:46:23:14:ee:97:
         8b:34:f0:e7:94:c5:fe:d8:f4:39:a3:73:e1:b7:90:c7:a5:eb:
         37:24:60:50:93:e7:a3:1f:32:dd:89:f1:32:5f:87:c8:1d:0a:
         1f:ca:85:70:7b:fe:f5:2e:de:84:f2:1d:19:1a:3f:24:d1:3b:
         e0:8d:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:09:03 2024 by rpki-client on console-ams.rpki-client.org