Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
File:                     e23c22d9-927c-3a62-b4be-b1550143609d.roa (raw, json)
Hash identifier:          7Jp7+H0DFZ1bs5r3VZLLQXAUWKObiGu5r08kWnwiscQ=
Subject key identifier:   D9:59:A3:34:16:9A:67:79:C6:79:99:62:AA:16:BC:32:6D:55:AE:D2
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584793B110445432AA741F118160
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     0
IP address blocks:        192.42.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:10:44:54:32:aa:74:1f:11:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=d9400999-819e-4c0c-8a85-cabf97929154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:62:fb:af:f8:7c:ab:81:b6:55:16:a8:3d:
                    93:be:ee:7a:54:46:28:5a:a2:85:97:5f:f1:54:9e:
                    0e:1a:3c:8f:6a:71:5e:11:40:29:2f:b4:32:fe:3e:
                    96:89:f6:bc:5f:b0:5d:c5:e1:ad:d6:a7:ed:3e:f9:
                    03:f0:41:74:6e:27:38:52:dd:ce:45:81:3f:1c:02:
                    38:2c:ae:7d:6d:e8:5a:c4:3e:05:99:6d:bb:af:f0:
                    d8:fd:2d:37:17:de:ac:f3:87:1f:ca:7d:66:b7:a3:
                    23:f0:c1:05:ba:d1:c1:8b:8f:59:64:3a:b9:88:a1:
                    ab:f4:7a:90:15:de:4d:17:75:cf:38:1f:52:42:ee:
                    b7:17:b1:84:ce:a9:2d:d2:dc:3f:f7:6e:cf:54:c3:
                    62:7e:78:c5:99:07:42:a1:44:bd:17:58:ad:53:db:
                    b7:0b:33:4a:7f:dd:7a:25:9b:84:7c:79:47:cb:97:
                    b3:94:61:38:07:d2:11:4e:11:92:5f:74:b6:9b:90:
                    99:90:8c:65:0a:17:0a:60:34:d4:59:4c:29:9e:45:
                    75:08:96:e3:63:ed:d6:c3:29:23:f3:ac:92:d6:f1:
                    63:79:1d:aa:44:82:8d:70:56:78:ea:24:97:90:68:
                    88:ed:27:cf:61:8a:e6:20:7b:6b:89:66:71:6d:86:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:59:A3:34:16:9A:67:79:C6:79:99:62:AA:16:BC:32:6D:55:AE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e23c22d9-927c-3a62-b4be-b1550143609d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:1e:02:80:0a:09:5b:bc:07:dd:88:46:c2:79:9c:94:47:
         d6:13:c5:d3:05:45:06:ad:9d:3c:98:f0:37:36:6b:e1:76:bd:
         ef:e7:af:99:dd:18:a6:8c:2b:72:96:f4:81:b8:82:19:ba:80:
         b2:e8:32:4a:88:8b:19:9e:3f:34:a1:7c:3b:26:0d:cd:ab:db:
         2a:56:2f:89:68:f1:84:a6:c5:ef:dc:02:66:38:7f:55:a9:79:
         3f:51:87:16:df:bc:02:0a:37:32:58:66:19:d4:cd:ca:27:cc:
         e9:41:89:2a:0b:42:e2:46:76:fb:01:36:5d:1d:d1:fb:37:7d:
         74:e0:02:a5:d8:67:e1:e4:3e:e7:98:de:57:03:bf:c7:2e:1e:
         40:de:42:6b:95:25:ae:f8:e2:7f:52:a4:f5:b7:32:e4:35:ee:
         9b:92:f3:e7:22:05:d5:2b:dc:66:35:8c:32:c2:9d:6d:5e:c4:
         bd:9d:cf:04:f3:ce:78:bc:bd:dd:df:a2:0c:48:5e:9d:68:b8:
         8a:98:2b:c6:6e:22:03:60:27:7a:b2:49:ea:37:76:8c:91:cc:
         2c:46:1b:fa:be:c0:23:98:09:45:e2:af:4e:9a:cd:f3:47:f6:
         61:ac:04:96:6d:c4:82:10:82:18:82:1c:b4:32:44:0b:c4:d0:
         f5:8d:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:57 2024 by rpki-client on console-ams.rpki-client.org