Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd661172-db5b-3c9b-a7c5-44769aa44bb3.roa
File:                     cd661172-db5b-3c9b-a7c5-44769aa44bb3.roa (raw, json)
Hash identifier:          dBnxn5IPK8Dj4tuIhQNdKh+9KYZN0V0bEv+nicJg/tE=
Subject key identifier:   B7:1F:77:97:3F:7F:B7:33:27:17:22:75:9C:10:9C:02:CC:35:51:52
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B9BD56FA038B5A00E21A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd661172-db5b-3c9b-a7c5-44769aa44bb3.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        216.208.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:9b:d5:6f:a0:38:b5:a0:0e:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=c9ed0ec7-0b19-456f-be5e-6290ef15fc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:49:19:ea:18:9d:7c:3d:33:a4:65:04:e8:db:
                    a8:5c:23:e1:d6:55:92:f9:cd:e9:0e:63:68:f0:05:
                    f5:65:d9:cd:4c:f4:1f:ee:3c:d7:ef:03:61:ff:94:
                    ac:64:51:22:79:ca:e7:23:c3:f3:fb:45:56:1f:14:
                    e5:cc:86:02:d9:98:c9:3e:80:ad:48:13:b0:92:1e:
                    e1:11:20:e7:dd:3a:ec:ae:e6:1b:79:c5:70:69:79:
                    af:05:fd:2c:f9:c7:0a:4f:4b:56:51:ba:3e:1b:85:
                    09:6e:b3:60:2e:ac:c2:bd:43:b7:18:46:bb:bc:9a:
                    10:c1:1e:fa:fd:21:88:82:a2:68:b9:15:9f:3f:4c:
                    62:c1:1b:99:7b:2e:e0:7f:d8:09:6e:1b:8f:37:d7:
                    db:2f:a3:00:53:9f:e6:bb:36:0d:56:58:e2:06:a5:
                    e6:37:82:c2:00:4a:9a:bd:ca:d3:0d:e1:b5:21:9b:
                    5f:94:19:4f:8f:f3:3a:38:51:66:a6:02:04:9b:69:
                    c6:f0:d7:5a:d9:94:60:e4:f7:fb:59:b4:b6:70:3f:
                    cd:46:7a:af:7e:7f:44:f2:16:f8:b5:95:58:c3:48:
                    2c:41:bc:93:45:77:ae:97:97:f9:06:a9:21:a0:74:
                    fa:d5:a5:a8:02:94:1f:a2:b7:4b:77:19:00:81:93:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1F:77:97:3F:7F:B7:33:27:17:22:75:9C:10:9C:02:CC:35:51:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd661172-db5b-3c9b-a7c5-44769aa44bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:0c:b8:a1:03:09:80:9e:f6:60:85:5e:88:fa:47:2f:c8:
         07:83:1d:5a:a6:d4:06:7c:de:0f:10:b5:4b:9a:4b:95:bf:2f:
         0d:9e:7b:f7:9c:ae:83:45:45:76:d6:9a:c3:0d:2d:6e:13:30:
         be:1d:a0:32:84:82:da:e2:ab:85:34:b7:33:fc:02:87:e6:1d:
         da:7c:a0:90:e7:5d:ca:41:a0:c4:66:1a:93:0f:4f:c6:64:9c:
         26:47:5d:04:78:36:51:ce:df:cd:11:fe:0e:9e:10:15:08:9a:
         06:1c:1d:06:f0:b9:f0:39:e4:b9:f5:b5:3a:af:7e:ad:a6:04:
         24:48:cf:20:8d:5d:39:1f:25:59:0c:cf:9a:ba:a0:01:f8:e4:
         d5:72:78:11:94:65:63:b7:69:be:01:52:6f:73:cc:8e:57:a4:
         4b:15:ab:61:8d:37:90:7d:14:af:1e:f7:86:32:4d:f7:ed:93:
         07:50:be:99:8a:16:e4:ef:72:07:60:8c:72:8d:3f:cf:1f:bf:
         0b:e0:c5:02:ab:39:99:12:b6:c8:04:50:05:43:7c:ab:d7:f3:
         f7:3c:77:28:b1:ea:2b:4f:b4:71:70:5e:bb:89:82:9f:55:ac:
         97:03:15:d8:7d:22:78:f9:28:22:9e:ad:0e:7f:94:d3:34:bd:
         15:18:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:49 2024 by rpki-client on console-fra.rpki-client.org