Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c689152-9206-33c5-a94e-e318141afb88.roa
File:                     3c689152-9206-33c5-a94e-e318141afb88.roa (raw, json)
Hash identifier:          vXAS1RYsh5vlQqKCqB+AB4Og+kVja3Kjzo8g2rW6pqI=
Subject key identifier:   5F:2F:6F:5F:46:50:96:A8:CD:BA:75:57:48:20:73:21:CF:82:9F:A0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12B88C0B524D30795AE8E8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c689152-9206-33c5-a94e-e318141afb88.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     32747
IP address blocks:        207.179.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:b8:8c:0b:52:4d:30:79:5a:e8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=f9897205-fd88-4f58-aee3-86122c1c1e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:be:25:fe:e3:5b:a5:72:70:70:56:7a:56:
                    54:9e:70:ee:a2:7e:27:d5:51:49:8f:35:95:98:31:
                    aa:2f:06:e0:e1:26:42:5f:b4:db:aa:a6:e9:6a:9d:
                    78:e0:f7:48:f6:72:62:06:13:d9:7a:4c:5b:69:82:
                    cf:f5:49:ad:99:fe:98:1e:71:94:30:db:ae:3d:f6:
                    b3:6b:35:45:85:9a:ef:9a:20:9c:6b:37:93:c7:71:
                    52:10:50:e8:bd:a4:31:cc:b6:0c:a9:fb:6f:e4:88:
                    17:61:c3:02:a0:4a:61:f2:62:0d:73:6f:a7:2d:c2:
                    1e:43:56:2e:3a:93:26:86:85:6f:4b:70:e9:fd:c6:
                    3a:c0:b4:28:24:57:99:f2:8a:da:00:84:69:71:21:
                    d9:12:f6:a5:ee:10:6f:91:f4:a6:48:5f:10:11:79:
                    61:9f:29:23:17:89:47:21:6f:04:96:a0:04:3c:7d:
                    a6:d2:a0:11:ed:a2:f6:38:8d:7c:92:f0:df:f7:ab:
                    e8:3e:a3:de:8c:4b:e3:30:a2:14:19:bd:c2:98:d7:
                    ee:40:6d:4c:3a:74:d1:c5:dd:7f:68:27:5c:d6:48:
                    85:57:50:ef:43:e2:90:50:52:21:6e:43:94:96:34:
                    ad:bd:51:b3:d7:38:3e:32:3b:be:cc:20:94:2c:68:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:6F:5F:46:50:96:A8:CD:BA:75:57:48:20:73:21:CF:82:9F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c689152-9206-33c5-a94e-e318141afb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4b:09:5f:46:df:c2:65:75:6d:25:34:0b:1c:d7:be:c9:e0:
         71:74:6b:d5:ad:98:95:07:9f:dc:de:30:4e:93:13:25:fd:22:
         4f:fc:d2:4f:fb:39:6d:21:8b:0b:62:c7:7b:a4:eb:54:14:df:
         b6:8f:d1:f4:97:71:57:ae:93:54:41:42:35:4a:86:44:10:05:
         19:d8:a8:d9:1e:9c:09:b0:37:e7:7f:12:73:20:76:ac:d5:53:
         e3:47:0f:2c:92:cb:ee:59:3d:c5:1e:e9:77:e9:09:05:a2:65:
         27:30:06:e8:97:5e:c4:5c:e4:0e:3e:e2:ea:77:d8:40:25:eb:
         c2:46:31:17:07:52:31:89:96:24:56:13:9e:c3:ed:48:3d:64:
         15:3b:85:a5:80:c3:53:95:4c:da:c1:1d:35:fb:a9:6a:8b:4c:
         6b:10:ef:95:92:73:0f:aa:6a:ed:a3:08:ec:72:14:45:ee:82:
         d9:04:ef:9e:4c:13:e3:62:ca:cb:58:a9:fc:e2:df:00:59:e7:
         73:57:1a:a2:f1:fa:03:e5:8b:96:03:e2:f9:e7:d5:20:17:56:
         96:4c:a1:01:f0:a8:d6:ae:da:83:c5:fb:cf:3a:8e:84:4d:f4:
         e5:e1:3a:83:35:d7:30:58:e8:ce:a5:43:c3:29:50:f0:f0:d8:
         90:e4:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org