Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1283cb8f-0f52-36cc-a0a0-a14247a14b93.roa
File:                     1283cb8f-0f52-36cc-a0a0-a14247a14b93.roa (raw, json)
Hash identifier:          34tFHlHw3s6T6PNhoaBNI7t0woUMIPwt/dEWAeW0ktQ=
Subject key identifier:   84:37:79:CF:9B:73:D5:12:4C:B2:3A:55:7F:70:4C:B0:A9:DF:33:10
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10D1599133B07CDD064CC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1283cb8f-0f52-36cc-a0a0-a14247a14b93.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     4540
IP address blocks:        207.35.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:d1:59:91:33:b0:7c:dd:06:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=fa7c0c06-654c-446e-9033-d083864af899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:49:ad:a5:2d:a9:85:1b:3e:26:e1:90:25:7e:
                    39:26:fc:cf:e3:66:70:8c:e4:4a:4f:19:f1:a2:1e:
                    14:c6:72:05:c9:04:bd:e5:f3:ba:e7:b2:aa:11:ec:
                    96:35:de:1d:82:95:cb:9f:74:e8:bc:b6:ea:24:54:
                    7a:e5:7a:78:d1:db:88:bc:5b:cf:37:f2:bb:4f:0c:
                    b2:1a:4d:78:5a:2e:05:5b:7b:8f:f1:10:e7:0d:b1:
                    9c:ea:8b:88:76:43:e5:8a:a6:1d:fd:25:f5:26:3b:
                    e7:da:30:50:70:92:61:03:7d:63:b3:4f:61:08:94:
                    0c:ac:f8:9b:0a:49:b6:6a:0f:84:7a:c9:bc:4f:3a:
                    6e:cb:b3:66:c4:6c:e9:d5:fc:28:e7:8f:6a:7c:74:
                    44:95:a1:89:40:1b:11:63:f0:42:e0:c0:47:f2:af:
                    1e:83:1b:6a:ef:52:55:dd:cc:cb:ae:76:8e:b5:d8:
                    53:d9:b8:c6:ea:8e:33:14:a7:5f:3b:5b:6a:d3:f9:
                    f5:b8:3a:50:1f:2b:a9:ba:a6:60:c6:f4:7a:34:52:
                    99:f3:02:46:0b:a0:e5:1b:7b:4d:cf:4d:21:bc:bf:
                    3d:63:18:dd:29:f1:bd:5b:12:2a:31:b6:25:cd:43:
                    87:5a:32:fc:04:62:45:51:95:27:0e:f3:72:01:e9:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:79:CF:9B:73:D5:12:4C:B2:3A:55:7F:70:4C:B0:A9:DF:33:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1283cb8f-0f52-36cc-a0a0-a14247a14b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f6:50:5c:ae:da:2f:e4:69:58:34:04:a3:93:20:cd:d2:f9:
         e1:47:b8:5d:c1:85:a3:86:a3:66:e4:e2:1c:b7:0a:45:27:43:
         09:1b:f2:e2:1d:da:e8:8f:69:bd:fd:f0:ca:9d:f1:ed:63:15:
         8f:18:e5:94:d9:d5:ea:1a:35:9b:fb:7d:14:c9:3d:31:af:7d:
         93:9f:cf:33:06:2a:18:78:03:23:31:df:13:30:23:8f:e8:a9:
         fb:f2:2b:b9:4e:88:02:d8:ef:60:9a:e5:41:ca:d5:0b:ed:d6:
         94:fd:36:f4:02:72:ca:d8:06:30:fa:db:71:6f:24:55:91:e7:
         72:e6:e3:97:17:27:7f:fb:38:26:9d:9f:91:b0:9d:8e:60:1b:
         72:d5:30:18:0c:ba:71:4a:eb:d9:b0:8e:c3:f8:1b:b4:6c:62:
         64:db:63:2e:cd:b7:03:7e:47:94:fa:5c:35:a8:30:aa:97:18:
         59:11:3c:12:ad:cf:5f:5d:1d:99:8b:30:97:cb:c0:49:5d:50:
         ad:04:55:5d:fa:57:f0:76:8a:a7:52:3b:f4:bc:f6:3d:ff:b2:
         c7:b8:eb:df:ee:de:a3:3e:42:0f:e7:70:97:07:53:8d:71:e8:
         30:0a:bf:c8:b0:4d:34:5a:45:c2:98:c5:7a:5e:3a:32:2c:57:
         21:9f:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org