Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b36177e-a5a8-38ac-948f-f65f47023001.roa
File:                     3b36177e-a5a8-38ac-948f-f65f47023001.roa (raw, json)
Hash identifier:          UUcnbGWREYg6XyQGpZ5PhE5Qns15PDusIgI0f1h2J8U=
Subject key identifier:   9C:B0:A8:9E:0E:58:82:E0:DE:71:E0:70:B6:06:5E:86:79:85:27:B3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B104F56BA1515F90CD69080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b36177e-a5a8-38ac-948f-f65f47023001.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        205.207.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:4f:56:ba:15:15:f9:0c:d6:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b609e3ae-c35b-4106-8414-eb3a038ce212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:e5:ca:33:f5:b4:e8:a6:06:6f:8e:43:95:
                    a4:b9:d4:c6:a7:21:c8:ee:27:d1:bf:b9:89:c5:ce:
                    97:27:68:94:78:7a:76:a0:03:e1:80:58:78:88:51:
                    b9:e7:11:37:51:cb:1e:8f:51:57:15:cd:69:4e:5a:
                    c4:04:11:5d:ef:0d:73:c5:4b:80:d8:0f:d1:34:80:
                    35:af:cb:45:4b:f6:0a:54:9d:e9:76:e2:7f:27:1b:
                    e2:cc:f7:a6:f0:d3:40:b8:97:6a:1e:1a:d4:7c:cc:
                    09:d0:8a:eb:52:b1:18:1c:9a:40:78:ca:2f:b9:2f:
                    69:f9:eb:60:a9:24:cc:2f:8e:ac:71:d4:d3:39:0d:
                    be:36:f5:bb:76:63:cc:b0:8c:8b:61:d4:bf:9d:a8:
                    7a:c3:e0:33:ed:ce:eb:b2:93:e6:d0:5a:d9:41:4a:
                    45:cb:fa:1e:f7:52:73:fe:13:a8:3c:e8:ae:cb:83:
                    a6:15:01:03:5e:01:eb:c3:69:f4:d0:be:04:b1:21:
                    88:ea:96:3c:20:72:bc:1d:1e:68:2f:f0:57:ce:18:
                    38:1f:20:fd:8e:58:e7:51:11:89:43:57:e4:b3:e6:
                    b9:c1:62:5e:1c:06:aa:33:b0:d6:96:35:77:e3:56:
                    44:7f:25:53:e5:07:bc:01:14:4a:9b:6f:15:7c:fe:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B0:A8:9E:0E:58:82:E0:DE:71:E0:70:B6:06:5E:86:79:85:27:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b36177e-a5a8-38ac-948f-f65f47023001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:52:09:19:ad:6f:ab:c3:57:58:99:7b:ef:96:46:91:55:
         b4:39:b8:e9:ee:11:03:40:8c:56:63:9e:26:f8:9b:12:cb:80:
         92:4d:c4:e3:5b:3d:8a:65:8d:16:d2:31:91:90:57:d2:30:86:
         ce:7e:7e:08:c6:a1:a2:cf:a5:de:c2:d6:c2:3d:4a:4b:0a:d5:
         70:34:1e:74:66:d6:b0:86:a4:bb:32:e3:e7:1f:29:d7:1d:18:
         32:37:5d:b8:e8:ea:2d:08:74:1a:59:cc:b7:d1:18:02:7c:81:
         2f:aa:79:62:b7:96:89:25:85:b1:83:ff:7b:b8:1d:35:1f:1b:
         09:40:fc:a5:b0:e8:e1:0f:d4:b6:52:bf:ec:22:ce:e3:91:db:
         fe:ee:be:57:36:5a:47:56:c0:ec:f8:1d:fa:e3:0c:8a:64:2c:
         61:fb:88:c7:6e:eb:8a:ff:22:79:18:09:f8:10:ec:4c:59:60:
         e5:b6:0f:30:b7:73:db:9e:91:ab:45:9e:d8:15:67:e8:3e:37:
         41:9c:f9:06:0b:9a:b7:9a:5c:2d:90:d0:54:62:0b:6a:6c:c4:
         9d:b6:82:56:04:1a:b8:5d:c2:58:24:b7:d1:61:4b:5a:a6:ca:
         21:53:b3:e4:c9:4c:98:3f:90:82:2f:22:34:9a:d7:ef:f3:1b:
         42:3f:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org