Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cdcb2c0-97fe-3032-97f7-d39b6c45564b.roa
File:                     2cdcb2c0-97fe-3032-97f7-d39b6c45564b.roa (raw, json)
Hash identifier:          6Wy/R3WFzK70+e7UsL+0vDu3/NMKPPD+zGZm+Ww9NMw=
Subject key identifier:   36:64:F6:84:C7:C1:06:48:65:FA:92:8B:E1:2A:68:CC:B3:BA:35:F3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1006E3DA389575A9319A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cdcb2c0-97fe-3032-97f7-d39b6c45564b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        204.101.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:06:e3:da:38:95:75:a9:31:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=a3909504-bd41-41c5-acff-1802778e475f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:7d:26:c0:a8:96:39:81:0b:fc:e1:c7:65:
                    9e:b8:c4:61:c5:59:2e:0d:d1:e2:b0:b3:65:9a:57:
                    25:b9:51:83:59:7c:9d:58:95:33:63:b8:63:9f:41:
                    f1:6e:70:f9:f7:0d:a2:d5:b3:67:9e:45:03:91:e6:
                    95:e6:af:5f:15:34:44:be:35:66:1d:ae:d0:53:8f:
                    bd:ff:7c:5e:cd:db:59:04:ff:eb:ae:1e:b1:27:c2:
                    e6:d2:a4:b3:66:a6:b7:58:f6:39:98:05:71:f5:49:
                    f9:a0:57:11:37:ee:e2:be:a5:38:1f:0b:a4:67:21:
                    66:25:24:26:88:84:90:c9:21:9d:b6:e2:49:61:62:
                    b3:74:27:1f:15:65:28:03:22:10:e6:d7:d2:20:00:
                    92:9a:8c:eb:a9:f2:bf:1c:6f:fa:a6:fa:16:af:3a:
                    1c:f5:b3:f7:0b:d0:82:c7:c9:f1:e1:4d:61:2b:2d:
                    b3:b5:0e:a2:48:85:af:7f:bd:5f:60:d8:3d:3c:cb:
                    49:5e:86:cd:18:48:51:1f:5a:f0:d7:74:4c:da:93:
                    b2:f0:70:9a:b1:f6:a9:e9:d8:b0:a3:86:2c:2f:1f:
                    c3:87:a3:20:20:4d:2b:3f:49:2e:97:c8:e3:69:f9:
                    01:e5:ae:4f:a7:34:09:a5:09:10:3d:7e:ce:88:3d:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:64:F6:84:C7:C1:06:48:65:FA:92:8B:E1:2A:68:CC:B3:BA:35:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cdcb2c0-97fe-3032-97f7-d39b6c45564b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:dc:25:f9:28:16:06:20:12:4f:f8:15:b0:a0:04:0d:44:
         73:02:02:4a:79:9a:e1:97:43:4f:f1:6d:33:81:5c:b5:e7:dd:
         25:7e:56:62:36:48:ba:12:a1:e6:74:8d:33:71:37:91:f9:7d:
         f0:78:50:47:69:91:3a:6d:60:51:e6:4c:54:e9:e0:dd:7b:1b:
         c9:1d:bd:2b:d7:bf:e1:db:15:8b:08:a1:08:76:14:2e:e2:21:
         cf:f7:01:5c:bc:6c:54:c7:e1:81:61:dc:5d:fe:bf:44:c4:c3:
         82:d1:7d:e4:03:97:5b:3d:ea:60:10:d6:1e:7e:f5:94:59:fa:
         63:06:81:78:3e:48:20:d7:aa:78:29:a6:2b:1e:0b:13:52:24:
         33:c4:77:63:b5:68:5f:79:44:39:5d:36:97:08:08:98:b5:e8:
         77:48:29:af:81:ed:14:f0:d8:a2:f7:cc:6c:67:2a:67:94:f9:
         8e:6c:37:03:14:c8:05:7b:73:85:72:85:68:01:cf:0c:20:97:
         f0:1a:fa:a9:c9:8b:0a:a5:fd:e7:c1:1c:57:cd:03:1b:c7:c7:
         d5:be:8f:5f:1e:ba:4c:bb:bd:8d:8e:2e:d6:06:28:80:38:c6:
         2d:06:25:3b:35:7b:b8:4f:8b:f6:c3:96:82:45:69:d9:21:fd:
         a9:90:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org