Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18dce76a-fc63-31df-9d1f-e4eea8a96a5d.roa
File:                     18dce76a-fc63-31df-9d1f-e4eea8a96a5d.roa (raw, json)
Hash identifier:          AjD85v5oNsPcn/D4QIH6PmNbxxY1hzf4ghPpt4rKQn4=
Subject key identifier:   F0:7C:F6:D5:E8:FA:7F:8E:2E:FE:87:D3:CC:C9:2B:A2:83:8A:5B:BD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12DEDCDA5417FFA13DA480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18dce76a-fc63-31df-9d1f-e4eea8a96a5d.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        209.139.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:de:dc:da:54:17:ff:a1:3d:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=e8ccda9a-dbbf-447b-9652-29d6874fb6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:01:2b:dc:1b:f4:4f:05:71:af:71:c9:38:
                    25:a8:64:94:a8:a9:4d:4d:15:12:ac:dd:1d:93:92:
                    90:90:0c:63:68:e1:8a:27:86:f9:7d:69:57:bb:4b:
                    ff:d0:67:ac:e2:93:0e:bd:fe:3f:50:75:17:92:e5:
                    5d:f3:c2:ba:f2:a8:26:d2:42:f9:3a:f2:cb:5d:f4:
                    5a:80:65:d4:88:f1:a2:96:f9:97:b0:c6:be:30:23:
                    c2:c4:82:67:8b:7e:dc:97:8d:ab:04:f0:25:70:c0:
                    8c:e7:f2:ec:73:4a:0e:c2:d7:72:b8:5f:82:ad:ba:
                    36:67:11:f9:f3:27:b9:11:ae:c7:e9:34:fc:b3:5a:
                    fb:66:de:04:de:f1:04:81:0b:b3:66:fb:14:99:d0:
                    83:64:0f:71:07:5c:ee:ef:97:ab:97:46:93:62:6b:
                    9c:a7:cc:91:ac:0c:5f:4f:0e:71:76:6c:69:60:7a:
                    6c:c7:0b:a7:59:54:9f:66:f7:33:31:6d:d3:a0:a4:
                    be:4a:06:30:9b:a5:61:36:c5:f5:6d:87:74:8a:34:
                    ea:55:d6:86:31:1b:a8:4d:b9:e6:30:12:2e:b3:3c:
                    34:f6:13:26:9d:96:11:58:f6:1d:42:fd:22:83:eb:
                    a8:92:29:e0:3b:d1:0b:42:8c:43:9b:0f:5d:cd:6a:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7C:F6:D5:E8:FA:7F:8E:2E:FE:87:D3:CC:C9:2B:A2:83:8A:5B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/18dce76a-fc63-31df-9d1f-e4eea8a96a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.139.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:71:46:fe:57:e8:6b:da:03:5c:40:a2:a4:05:f2:ef:e0:
         8d:29:e0:87:d2:50:de:84:42:33:28:43:74:fe:c2:ad:48:94:
         57:c8:09:42:8d:7e:d9:c9:fc:55:6a:e6:48:e0:28:34:a4:08:
         e7:71:5e:8e:ca:74:b4:87:f3:35:c5:2c:32:d6:4d:d1:39:f0:
         e8:4a:31:d7:ed:95:ff:fb:68:ac:bb:bf:8f:82:29:e9:65:b9:
         e7:f6:b8:b3:62:7e:2e:9c:d5:af:db:ee:45:12:26:a4:d7:f4:
         e2:8a:77:8e:60:5c:29:30:e9:34:31:08:73:1f:94:4e:cc:4e:
         e3:2b:6a:c4:33:df:30:82:41:75:b5:19:4d:b8:bc:2b:f5:0f:
         68:f1:d2:4b:37:5d:37:50:ea:96:c5:37:68:07:ad:fa:7e:76:
         06:2b:83:cd:04:6b:b1:17:05:21:62:66:44:81:8c:ad:b0:75:
         8f:f5:12:2b:fe:04:3f:dd:77:03:c2:3d:fa:18:ca:e7:d2:4c:
         cf:61:9a:7b:2b:94:fb:f6:3a:83:1d:26:48:27:e9:8d:e3:37:
         ba:54:35:39:27:4d:0c:21:ee:3c:7c:8a:0f:34:8e:4a:24:ba:
         ab:d8:b3:81:22:95:82:67:4e:7f:2f:bb:65:79:5c:cc:d8:38:
         77:3a:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:00 2023 by rpki-client on console-fra.rpki-client.org