Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/112656eb-0cbb-3031-984d-b67cf908911e.roa
File:                     112656eb-0cbb-3031-984d-b67cf908911e.roa (raw, json)
Hash identifier:          pxUR8lsp3oTTA/aWCT4KV3YXEVAXy6hvKsKIkt+hRI4=
Subject key identifier:   28:4D:72:4F:50:5A:5A:29:88:12:FD:0A:62:AB:CC:F9:C0:94:F5:BE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F4577C9B1A23E40443D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/112656eb-0cbb-3031-984d-b67cf908911e.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        174.92.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:45:77:c9:b1:a2:3e:40:44:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3fbeea92-d5b1-441a-8203-a80cb41675d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:3d:18:26:c9:11:e1:2f:ff:31:d8:44:0d:
                    a0:49:72:84:58:a4:25:f1:a5:2e:38:3a:06:d3:a5:
                    5e:33:83:d8:f7:8f:6d:23:a9:74:4a:fe:82:4c:ed:
                    b7:44:f7:b0:94:11:ec:0a:67:23:14:e2:5b:01:11:
                    7b:28:e5:c8:bd:6d:42:23:80:24:23:9d:eb:68:fe:
                    fc:53:f8:6d:bf:7f:42:85:22:b1:3a:43:05:5b:e7:
                    f2:41:51:45:80:51:4a:05:69:57:0d:c6:d6:bc:aa:
                    8d:5b:c4:59:22:04:24:c8:5c:6d:bd:4e:66:55:04:
                    94:6d:05:db:5e:8d:e7:cd:0f:4a:2b:f1:10:af:85:
                    f4:7f:80:f9:7b:e2:ac:d4:36:7b:39:eb:63:16:fb:
                    d5:bc:31:64:51:f5:93:7f:8a:f1:68:bd:04:b4:32:
                    78:5d:87:21:f1:a3:9b:d1:4b:06:dd:fb:ba:1c:96:
                    9b:d4:6a:3d:e5:d2:64:80:3e:a6:4b:be:29:2a:28:
                    c4:cd:d2:e5:08:c4:b1:c7:4b:75:2b:80:6d:6e:61:
                    34:d1:0d:82:34:13:91:51:d0:95:bb:53:24:94:f3:
                    ee:5b:ff:89:12:ad:b9:86:71:3d:40:16:49:03:88:
                    42:8d:b5:3f:da:46:e3:11:d6:81:20:9d:49:cc:4f:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4D:72:4F:50:5A:5A:29:88:12:FD:0A:62:AB:CC:F9:C0:94:F5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/112656eb-0cbb-3031-984d-b67cf908911e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:31:73:a9:63:3d:a3:13:6a:e7:9f:6f:76:4a:b8:10:c6:a4:
         94:75:8c:1e:8e:75:2e:43:1a:67:7a:4f:11:ff:47:eb:9c:67:
         44:49:52:02:e8:c9:3c:61:ed:57:8e:ac:ad:4f:f6:0b:fb:26:
         db:c5:7f:f6:aa:41:7d:9c:ba:8a:c2:66:99:92:17:72:a7:bc:
         0c:eb:ba:6a:37:c5:0b:23:bb:77:3e:06:52:80:07:e9:e4:54:
         98:29:77:40:56:64:7c:24:c1:fb:79:96:96:2d:52:d9:1b:30:
         35:19:53:28:70:d9:96:13:cb:20:ec:a8:d0:cf:e0:6d:18:91:
         e6:b3:32:cf:a2:c4:1b:b2:4f:c5:1e:f7:5e:e0:4f:b7:6c:f3:
         02:30:87:f9:4c:26:44:d2:f8:91:79:cb:c7:b7:26:5f:f3:22:
         e0:5e:e8:c3:2a:17:22:4e:bd:fd:11:77:fd:7a:ad:53:c7:55:
         a4:73:91:32:e9:4e:2a:fa:58:3d:fe:68:78:77:5c:15:9e:9c:
         ec:21:4f:b3:0c:cb:98:3f:57:70:2d:66:82:ee:af:2f:25:68:
         7b:06:73:c6:49:9c:b6:8d:90:f4:ca:7c:f4:39:7c:4c:73:2e:
         b3:cc:9a:20:3a:b4:9f:d4:1c:63:fa:6e:0c:33:1c:c9:68:1b:
         40:0a:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org