Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e8bd1b9-5738-35b1-99eb-00cb1c403091.roa
File:                     1e8bd1b9-5738-35b1-99eb-00cb1c403091.roa (raw, json)
Hash identifier:          h94K3DD+w4wWVT96QLzvK4JAyfo8oS4MLdHTWR2/5AI=
Subject key identifier:   18:2E:30:D2:32:DA:BA:83:45:A8:98:1B:58:2B:26:40:1C:C0:8C:69
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11FD9BB19C2C972C02C3C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e8bd1b9-5738-35b1-99eb-00cb1c403091.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        216.18.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:fd:9b:b1:9c:2c:97:2c:02:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3e55f09c-5c43-40ba-98ae-24ede8898af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:7a:f9:53:a9:0b:85:38:9b:6a:58:f9:3c:
                    c8:35:d6:c2:21:f8:4d:d2:ce:6f:d5:48:e1:d8:c5:
                    82:00:08:5c:78:91:de:28:fa:a6:0f:1c:ac:7b:ac:
                    ff:5a:1b:5f:60:8f:38:71:b8:f3:0d:9e:0d:9d:ca:
                    89:a7:b2:3d:d3:f0:fb:ce:e4:94:32:8a:3d:f5:86:
                    c8:2f:47:6e:dc:aa:35:68:e6:43:d1:fb:17:41:cb:
                    dd:4b:f0:e8:69:b8:18:d7:d7:32:74:a9:87:dc:60:
                    d7:e2:cb:a5:23:21:6a:2a:e1:45:b3:b0:4e:7d:dc:
                    93:c5:b1:6d:e4:d1:77:84:a0:af:86:58:0d:b7:90:
                    98:46:55:c0:cc:b6:5a:1a:4c:52:ae:f4:78:21:0b:
                    05:20:c8:27:5e:45:d5:3b:b6:d2:99:d4:b1:f6:7b:
                    e5:b1:a4:e4:cb:ad:17:61:8d:39:6b:c7:ac:00:32:
                    e2:d9:25:c5:10:de:0d:03:a0:39:d3:98:1a:03:24:
                    1c:da:77:ba:7e:78:95:5b:ae:10:37:26:02:1a:16:
                    f4:fc:81:10:03:72:22:42:31:b9:ba:4e:b4:94:75:
                    b6:0d:e7:06:be:40:df:26:73:f7:ba:8d:69:e2:39:
                    05:71:06:84:ea:60:6b:d4:04:65:e8:13:39:2b:aa:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2E:30:D2:32:DA:BA:83:45:A8:98:1B:58:2B:26:40:1C:C0:8C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e8bd1b9-5738-35b1-99eb-00cb1c403091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:22:c1:71:03:6e:bb:ad:cb:df:3c:18:fa:d4:bb:96:3d:0c:
         45:d0:5a:d1:98:e5:1a:2f:3f:8f:1b:63:d3:ef:69:56:aa:ce:
         89:91:d1:ae:0f:dd:e8:c2:38:f3:57:d8:bd:91:33:c7:94:e9:
         9d:3c:80:7b:d8:16:73:2f:1b:08:24:61:24:58:ff:2a:ac:39:
         5f:fe:ad:ee:6e:5f:5e:9e:d8:79:be:4b:38:d3:6f:7b:d4:c7:
         0e:33:50:f8:dd:23:33:ad:0a:10:72:55:be:d7:a7:5c:97:05:
         ea:6c:15:d5:37:74:b4:e1:42:cb:2d:d1:1d:0b:1e:29:6e:dd:
         4c:42:4b:9d:8e:ad:12:9a:e4:f1:8d:6e:1b:91:3d:81:09:bd:
         8c:27:fb:1c:59:3b:64:f9:38:e7:67:fd:e8:17:7d:de:4e:bd:
         09:e0:cb:72:58:61:16:70:13:51:ab:fa:64:0a:ce:bc:1a:e6:
         e2:63:c3:96:02:91:38:55:84:6e:b1:8a:bb:06:bf:66:52:34:
         70:dc:e4:e9:8b:08:00:8b:03:5d:cd:cb:21:60:20:c9:9c:a4:
         e7:f1:58:ab:ef:eb:c9:ad:c1:48:35:a8:c1:1a:f2:9d:c7:c0:
         83:09:9c:09:e0:b6:9e:2a:ee:56:70:c4:ae:e6:38:c2:4c:24:
         c8:56:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org