Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1f0b82f6-ee7c-3f6f-ab1b-e6cec6e89310.roa
File:                     1f0b82f6-ee7c-3f6f-ab1b-e6cec6e89310.roa (raw, json)
Hash identifier:          /cCTineo7M8ZKlZBIdNamnKVOovEhutb0Ir+5j6vB/U=
Subject key identifier:   25:EA:04:29:00:B4:E9:CD:FC:0E:1B:1D:2D:60:DC:8F:85:1F:7F:C3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1021D3E8DCC5AFF4FDAE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1f0b82f6-ee7c-3f6f-ab1b-e6cec6e89310.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     32678
IP address blocks:        204.101.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:21:d3:e8:dc:c5:af:f4:fd:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=9b353f64-6ab2-4f50-ba91-f726c59da11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5b:22:42:98:49:c5:0d:4f:16:cb:96:49:6d:
                    ac:a7:87:06:94:75:7c:c8:bc:e7:c7:20:2e:12:17:
                    32:bb:da:1b:9a:c9:fb:09:c2:7d:14:35:af:bf:9d:
                    ed:88:0b:71:19:08:44:62:97:2e:e8:35:5e:64:5e:
                    72:41:a9:06:b1:df:8b:b6:49:28:04:7a:0e:f9:12:
                    32:8e:25:98:3e:7c:75:3a:90:a2:ff:2d:fc:2c:2d:
                    c2:b0:1c:3a:c6:7f:fc:10:b0:4d:58:e2:b7:01:96:
                    56:3d:d9:a9:fc:1a:94:f4:e1:48:73:88:b3:9a:23:
                    86:bf:c9:c1:26:5c:5f:09:de:29:1d:9e:a3:7b:01:
                    c1:eb:c5:ec:ca:5f:78:9e:3e:dd:fd:33:d5:ea:8f:
                    0c:96:84:9b:46:fa:8c:78:d5:22:66:5c:42:e1:56:
                    96:fb:cd:ea:09:bb:1f:2b:d9:18:7b:a8:9c:10:4b:
                    84:53:aa:9e:81:93:04:fd:01:87:e6:32:ea:7c:9b:
                    76:5a:92:00:1e:9d:dd:a9:8e:e6:e3:dc:d6:f3:72:
                    63:fa:32:ff:7b:9b:f6:67:bb:df:70:28:f7:d0:12:
                    c4:eb:4e:8e:45:66:d2:c3:96:0d:a1:bf:8d:60:6a:
                    3f:a1:9b:8e:ea:76:7e:f2:39:1e:81:f8:2d:f0:15:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EA:04:29:00:B4:E9:CD:FC:0E:1B:1D:2D:60:DC:8F:85:1F:7F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1f0b82f6-ee7c-3f6f-ab1b-e6cec6e89310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:c0:61:d5:4b:73:08:cb:81:1f:a8:bb:05:9c:f7:ce:64:
         2c:63:98:10:ff:73:aa:94:1d:f2:46:43:66:2a:48:c2:a4:9e:
         8f:2b:1d:04:e6:2d:ec:23:61:a4:5d:d5:aa:2d:07:28:c5:97:
         a7:83:3e:ee:0d:ab:48:ed:fc:03:c8:f4:bc:5a:d1:d9:00:e1:
         f6:0b:fb:76:68:2a:a7:bd:97:4d:2a:8e:86:52:00:25:ce:9a:
         ad:12:5d:49:4d:99:fb:0b:04:99:d3:83:c2:76:e3:f2:f5:26:
         b8:5a:41:6b:f4:38:a3:4f:69:eb:82:33:83:b7:5b:18:e0:37:
         71:17:61:34:d2:3d:ff:0e:2f:fd:5b:02:59:6a:aa:48:49:d3:
         b5:01:a0:f6:94:27:a9:1d:70:d0:4b:bc:0d:63:58:03:67:ec:
         e8:18:94:b1:1e:64:ef:ab:e2:5b:1c:1e:c8:7e:7a:ed:20:c8:
         f4:22:1c:4d:6e:f4:47:55:d6:36:77:a2:0b:09:4f:51:50:49:
         5b:b2:05:71:07:b7:f3:65:09:af:d2:8e:d7:d1:45:eb:ca:91:
         fa:27:09:07:a2:7e:79:02:69:68:c6:fe:5c:00:7c:ce:b5:4c:
         33:41:27:bf:d9:c5:6c:d2:70:fa:f1:6d:5e:08:09:41:50:fc:
         80:2d:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org