Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa
File:                     2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa (raw, json)
Hash identifier:          fJ4D89HT3XeZ9hbeou+pX26x8pYtssz/oWExcHwxJow=
Subject key identifier:   38:3B:9C:76:ED:35:FA:15:37:49:52:87:24:DD:22:71:1F:99:E8:F6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B119B24915FD3755630C100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     11831
IP address blocks:        209.17.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:9b:24:91:5f:d3:75:56:30:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=dc21b5c0-8681-424b-a3d0-f6a34151d5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:30:a1:7e:c7:b4:e2:fb:a2:75:94:c5:6e:
                    94:8a:93:e4:88:3a:ad:57:a3:e3:b0:1d:0b:a6:87:
                    08:7c:0d:53:1d:54:19:a4:84:c0:ee:6a:a3:d4:7a:
                    92:81:5c:67:9d:b9:54:86:38:c7:c1:ce:24:2b:99:
                    4c:a0:10:a2:29:77:42:22:bc:3b:ea:a1:6e:13:ba:
                    fe:30:e3:34:eb:c4:1e:87:61:be:73:e5:1d:29:c7:
                    21:e6:eb:ae:26:9a:db:2a:14:6f:d0:38:56:1e:6b:
                    bb:92:00:66:0d:19:84:54:f1:00:11:93:8c:a0:02:
                    dd:1b:67:7d:97:ea:00:2a:1e:e6:56:2f:e2:59:bc:
                    ae:61:66:96:85:c5:7e:5a:bd:aa:24:2d:2f:8b:19:
                    c1:b4:3c:5e:98:fd:df:00:e3:60:02:f4:f6:4d:7a:
                    97:5d:21:99:00:3f:38:af:85:82:dd:b0:3c:53:7f:
                    39:5a:3b:68:a5:41:24:bb:9b:ea:f8:d8:3d:d8:90:
                    25:08:50:89:59:4c:4d:fe:4a:dd:e7:fd:15:4e:f6:
                    d9:e6:f1:62:88:6d:29:d1:8b:d9:5d:7b:22:80:75:
                    4b:5d:33:4f:94:61:ea:e8:66:3a:1f:9f:a7:0e:cc:
                    60:17:89:37:95:e1:bf:33:7e:5a:6e:34:38:ca:a7:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3B:9C:76:ED:35:FA:15:37:49:52:87:24:DD:22:71:1F:99:E8:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a79b6b9-5759-32e9-86f5-ff115ef8e6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:f0:f1:b6:12:a9:5f:06:ce:2e:c5:96:b6:3f:7e:03:1f:
         08:37:14:ed:fb:9c:b4:36:30:3a:6a:b8:cb:bd:57:6f:28:3a:
         dd:08:44:e4:8f:04:49:64:8d:d3:37:4e:af:64:3b:6e:3b:34:
         53:67:8d:ed:82:cd:97:1e:e6:e2:d2:57:d5:bc:6f:aa:16:e7:
         17:73:aa:f9:35:40:e3:ae:3b:78:e7:20:8a:e8:db:6a:d4:b9:
         de:6a:52:16:e9:d2:60:60:5d:e2:8f:02:26:b4:9e:7b:40:b1:
         43:29:b0:06:c9:b0:c2:ea:cf:f0:39:0b:55:1a:a6:f0:c5:a7:
         42:9f:94:be:a7:f7:3e:40:9e:10:f6:de:34:06:07:be:e3:0a:
         87:cd:dc:db:a6:df:4a:53:c8:60:9e:55:ac:ef:16:95:24:3d:
         3e:3c:2a:a0:01:0a:b2:cd:71:7b:53:8f:52:e5:33:7d:bc:08:
         e2:a3:bd:40:cf:90:6a:68:40:0e:66:08:ed:da:c5:c9:b3:90:
         97:80:5a:8d:fc:eb:c4:1f:71:92:92:df:2f:2f:ce:a3:da:91:
         7e:d3:52:8e:a1:dd:28:10:e9:34:55:4c:5a:14:df:37:70:46:
         93:6d:f2:80:07:9d:63:a9:a3:83:ea:66:17:92:18:2f:eb:44:
         de:32:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:41 2024 by rpki-client on console-fra.rpki-client.org