Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3acaf8f5-8619-3171-ae89-4416f5910df5.roa
File:                     3acaf8f5-8619-3171-ae89-4416f5910df5.roa (raw, json)
Hash identifier:          Chj8ypMK7Vwy0RGDaB2EzdUTf0w7N0pOtuMAWbIA2G8=
Subject key identifier:   C8:08:D6:9C:DA:FB:C6:DE:2F:1E:30:71:42:B8:70:76:35:05:EC:33
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FB40B3BB3923839621B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3acaf8f5-8619-3171-ae89-4416f5910df5.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     3804
IP address blocks:        199.243.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:b4:0b:3b:b3:92:38:39:62:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=c851823a-82b3-438e-bbeb-0751948e779e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:37:7f:63:b8:f8:73:bb:89:11:86:8d:e9:
                    79:73:7b:07:3e:2d:bb:3b:66:b6:97:74:09:e3:65:
                    23:87:b9:98:d2:00:af:c3:67:06:b3:82:02:bb:83:
                    c2:96:27:2b:d4:f8:0b:b2:63:88:f7:41:7c:3e:99:
                    40:83:dd:92:16:f3:00:87:72:81:0d:cf:2a:23:1d:
                    5e:16:b1:d8:dd:06:a9:df:74:5e:25:d6:f9:e8:71:
                    17:36:23:03:66:c1:1d:f2:8b:b1:1f:b8:aa:eb:39:
                    7f:0e:ca:11:9c:08:cf:df:28:12:76:a4:32:92:cf:
                    84:67:f0:2f:74:7d:22:b8:0c:f2:96:ff:a4:fa:56:
                    1e:f6:48:f0:6b:84:19:bd:39:f0:ec:55:51:0c:ad:
                    27:2c:5c:d3:aa:cc:5c:5e:12:7b:6c:0d:71:52:e7:
                    4f:16:00:f9:94:a8:b2:5f:04:d5:c5:ec:ce:cb:19:
                    3b:d0:c6:1d:d2:a8:1b:57:1f:1b:00:5c:f9:16:f9:
                    b9:c7:9b:97:3a:43:49:f0:94:75:fd:f2:9e:72:4e:
                    d5:2e:d6:76:08:cb:5f:eb:75:17:88:d9:b9:1d:99:
                    79:da:be:6b:0f:ca:ba:a5:8d:39:ab:61:79:62:58:
                    86:62:b9:e3:e8:c7:96:5d:06:03:84:97:66:37:8c:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:08:D6:9C:DA:FB:C6:DE:2F:1E:30:71:42:B8:70:76:35:05:EC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3acaf8f5-8619-3171-ae89-4416f5910df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:b8:99:35:19:a2:e2:49:e9:3c:49:fa:79:af:21:da:56:
         bd:ff:8c:d6:74:69:f9:16:da:08:3e:1e:cf:19:93:6f:04:61:
         16:76:4f:99:9b:af:f8:d6:76:b4:e1:2c:45:e4:68:65:e3:b2:
         cf:9a:6d:38:33:01:29:21:78:e0:d0:91:7e:f9:7b:b3:37:f1:
         18:85:b9:55:a9:a5:4c:8d:4b:52:34:64:1d:44:86:ab:37:f6:
         f9:ed:a6:4c:af:19:2e:bc:69:46:e9:96:a4:e0:6b:3c:b8:b2:
         1b:93:17:7f:53:49:a6:ff:5f:17:33:75:61:cb:90:75:7f:93:
         3f:e2:fb:4e:2f:95:3e:b4:32:7b:a0:5a:a9:1b:b3:74:00:4c:
         1c:30:e9:62:05:5d:cd:10:35:9e:17:7f:d2:b8:90:c9:a9:ca:
         80:7e:ea:84:d4:9b:79:b7:c2:2d:41:a7:d8:50:a7:0f:56:b3:
         b5:18:73:74:ba:76:b5:7e:28:91:a8:9a:7d:db:66:ba:33:e0:
         99:5a:f1:1a:da:be:42:fb:ff:f3:93:1e:10:b8:b1:3f:38:3a:
         a2:16:fc:b1:f9:d5:30:80:88:36:d6:e5:8f:74:27:60:22:f1:
         95:c3:40:33:ca:61:5f:cc:6a:57:a2:7b:3b:67:5b:02:66:e2:
         bc:92:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org