Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/244a5c1e-eac0-305a-b515-c77c615f20f6.roa
File:                     244a5c1e-eac0-305a-b515-c77c615f20f6.roa (raw, json)
Hash identifier:          L5hIztAIqz00w4t/KYbDFnC0tfUAUq4DNJFrkv7WzZs=
Subject key identifier:   A3:96:FE:02:F3:32:56:AA:C1:8E:8B:A7:16:12:4A:F7:5C:32:C0:62
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11B8D2A1C16EB9638BEB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/244a5c1e-eac0-305a-b515-c77c615f20f6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        209.226.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:b8:d2:a1:c1:6e:b9:63:8b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b3b3220f-6552-4b07-83fc-4e6513020675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:23:64:15:1e:3d:d0:94:d6:5d:3b:e5:9f:
                    b6:f3:17:5e:83:d3:2c:96:9e:5d:0c:fb:12:7a:03:
                    f5:72:d5:25:82:d0:6a:e9:5e:d6:fe:21:97:e4:79:
                    bd:e0:de:54:1e:47:1b:e7:f8:a8:eb:9f:2a:02:37:
                    ab:4d:13:b3:3d:98:81:6a:7b:53:78:39:91:2b:a7:
                    eb:27:4a:93:01:e9:4b:1c:a7:8b:95:7d:56:48:6a:
                    8b:06:f7:08:5e:84:83:27:47:0d:c0:1f:b4:71:38:
                    e6:c1:84:22:66:bd:a3:58:b6:0c:0e:69:82:f3:91:
                    b9:4b:5a:eb:d3:5e:97:ab:8b:01:3b:79:f3:15:49:
                    d2:2b:48:02:08:d2:09:16:63:98:63:d9:f7:de:2f:
                    0d:ee:bf:70:a6:7b:05:d4:d1:09:e3:6f:a4:11:52:
                    95:5b:c3:e5:5e:f2:d6:08:73:1a:f4:07:97:41:bc:
                    6e:c7:04:ef:26:df:10:e0:2d:ce:e3:ae:12:4c:0e:
                    74:74:1a:3e:b6:7c:6e:19:08:d0:a0:dc:d0:db:00:
                    d0:59:54:0d:4c:56:77:cd:97:cc:33:8e:9b:f4:ae:
                    14:8e:a9:88:2c:bf:e4:cb:cf:20:2d:39:4c:9b:fa:
                    73:6d:f1:50:02:bb:fa:c9:42:10:bb:7a:90:63:5d:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:96:FE:02:F3:32:56:AA:C1:8E:8B:A7:16:12:4A:F7:5C:32:C0:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/244a5c1e-eac0-305a-b515-c77c615f20f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c9:5b:94:28:62:01:a6:fa:12:62:aa:ab:19:73:b0:6f:f7:
         76:f3:05:b0:7f:49:d7:a7:d4:ce:11:e9:bb:66:3f:ce:1d:ae:
         18:2a:ec:79:cb:b4:f8:e7:0d:f6:50:e3:be:33:93:3d:29:55:
         22:63:6c:ff:67:68:1e:c7:48:dd:05:d3:77:38:d9:16:ff:d7:
         0d:93:0c:d7:dc:ad:17:54:6d:7e:a5:5a:d0:d4:1e:c1:45:cc:
         96:04:45:c6:dd:7a:05:53:7d:a2:1c:5e:5f:2f:69:ca:71:41:
         7c:94:72:88:9a:6e:6c:b5:d0:46:56:1c:6a:29:ae:4e:e4:a4:
         2d:f3:e6:95:96:2b:52:35:2e:84:6a:4c:54:2b:af:44:2b:8a:
         8d:35:c6:9f:fb:3e:63:c6:f0:a7:37:51:96:14:6c:12:c9:cd:
         55:b1:e8:b0:8a:70:d1:d2:3c:78:bd:ea:f4:93:87:bb:fd:b5:
         6a:f9:4d:e3:4b:6c:36:32:4e:b8:c0:eb:5f:8e:bd:3e:e8:23:
         97:b0:5d:e7:92:9d:e9:49:30:97:5c:64:a1:4c:a8:7a:7d:a9:
         e1:72:a0:97:ce:ac:72:95:7c:d3:81:89:3b:20:6e:46:b6:1a:
         dd:7a:6e:d2:79:a1:62:b7:69:c0:f2:44:16:e3:75:90:e3:84:
         57:01:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org