Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0b6b98c4-dfa6-3923-85e4-bc59f84a02f6.roa
File:                     0b6b98c4-dfa6-3923-85e4-bc59f84a02f6.roa (raw, json)
Hash identifier:          RbtDEQq5476Tie2946qB/He2N1R8G+7z+oDgzTufrnQ=
Subject key identifier:   2F:A2:EA:8A:A1:4A:CF:D4:DD:2B:17:3F:13:32:47:FB:70:B0:A8:F1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B102F32326675955E935200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0b6b98c4-dfa6-3923-85e4-bc59f84a02f6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        204.101.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:2f:32:32:66:75:95:5e:93:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3b80a767-bf60-4390-b097-6bff4470c8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:e0:02:f0:90:6e:da:d4:a4:97:16:eb:96:
                    fc:9e:6a:91:e9:b4:f3:3c:26:bc:fd:47:b0:c1:6f:
                    e3:08:f3:3c:cf:49:60:bf:02:5c:d4:b5:df:d5:fe:
                    2c:5d:7e:b5:bd:4f:5a:8e:33:24:4d:c7:52:69:d5:
                    18:e9:de:f9:2f:0a:15:bd:46:80:f1:83:74:9d:8a:
                    a8:25:85:cc:d3:47:6d:c5:33:04:d8:51:4e:d5:bc:
                    c6:35:f2:6f:30:99:6e:d3:9e:9f:9d:91:e2:78:55:
                    5c:6f:4f:64:fa:14:5d:bb:f1:07:55:03:96:c1:bc:
                    39:2e:82:ef:cc:dc:6c:8b:71:ed:64:b4:2a:b7:f6:
                    f9:e1:f2:b6:22:e8:45:f2:2c:d4:4f:30:5c:cf:52:
                    78:ed:b0:9b:73:64:76:61:e2:ea:9c:fc:d1:31:0e:
                    84:15:de:af:39:7d:88:c2:0a:9a:49:eb:5f:19:b5:
                    c1:40:ae:97:35:d6:33:50:54:4c:c6:e3:36:4d:76:
                    5c:f1:39:26:06:75:b5:b3:2c:dd:0d:68:a9:20:5a:
                    cd:6e:49:98:42:33:57:36:bb:eb:b9:e9:47:69:20:
                    12:6d:6b:36:40:0e:00:5f:37:a0:46:56:5a:1e:6f:
                    ca:b2:84:da:a9:d9:55:6a:5a:72:4a:1f:61:73:23:
                    69:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A2:EA:8A:A1:4A:CF:D4:DD:2B:17:3F:13:32:47:FB:70:B0:A8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0b6b98c4-dfa6-3923-85e4-bc59f84a02f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:53:3c:47:d9:cd:23:fb:21:ff:fc:be:4b:e5:b0:1b:f9:
         e3:f6:3e:f7:7e:5c:c0:06:15:14:5a:77:01:63:76:19:1b:48:
         55:55:1d:b9:8a:04:78:05:2a:c7:66:f4:5f:74:6d:5c:0a:70:
         d1:78:9f:73:c9:41:99:86:16:3c:fa:47:bf:bb:44:af:6d:bd:
         71:5d:c6:26:e7:d4:8f:56:77:af:10:e9:76:f9:29:5d:41:10:
         54:85:fc:36:13:60:8e:da:2e:57:12:5d:1b:fb:b5:3a:bd:4a:
         a0:3a:50:c1:2c:9a:be:97:c4:02:ce:fc:ac:00:e0:c7:c4:6b:
         e1:82:df:2b:18:01:ff:29:59:f9:51:52:ef:5d:c5:7e:b2:41:
         08:e1:91:1d:66:16:19:4d:ba:f7:46:f6:e7:87:e0:bc:0a:09:
         10:26:34:8e:91:69:08:c6:d5:bd:02:e1:3f:03:ae:65:de:d9:
         ca:2f:73:70:30:a5:2a:8a:6f:e1:0c:4c:af:14:06:74:b2:10:
         3a:d7:bc:4d:5e:38:bd:7f:87:da:03:4c:8b:0e:3d:e3:af:64:
         bd:be:0c:c7:3b:1b:f0:7f:2d:42:5c:0f:43:d7:ad:25:60:ee:
         b6:55:d6:c4:58:e4:58:bd:9b:1d:ef:fd:db:3b:7d:95:a7:4e:
         8c:91:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:15 2024 by rpki-client on console-ams.rpki-client.org