Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3faeccb8-76d0-37d3-a396-855bc644c0aa.roa
File:                     3faeccb8-76d0-37d3-a396-855bc644c0aa.roa (raw, json)
Hash identifier:          A4vfLAfVSu/NXuza8HCMcSENY5/dygpPJvZXpE4a3B0=
Subject key identifier:   3C:CD:6D:A3:23:67:1D:E6:01:B3:A6:A9:00:81:62:9C:52:01:53:CD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10B15E3760167A59A571C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3faeccb8-76d0-37d3-a396-855bc644c0aa.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        206.172.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:b1:5e:37:60:16:7a:59:a5:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=90f053e8-2afe-4ad5-85ed-d9b3b5c53840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:9c:61:a0:e0:89:10:11:fc:88:41:2e:01:
                    c0:6a:cb:f2:32:48:24:47:93:b6:ce:b4:5f:e6:37:
                    9b:d7:30:e1:a6:ec:b4:52:19:1b:35:d6:c2:94:a7:
                    ae:dd:81:65:8a:f8:a0:09:98:53:15:55:0d:5f:7e:
                    e0:b2:64:3b:fe:77:2b:81:85:b7:1f:e7:b4:e7:96:
                    a1:13:41:c0:fc:53:92:7e:24:d5:ef:40:a5:e8:b2:
                    29:27:22:ed:77:d3:62:ff:ec:be:5d:fa:9a:75:d3:
                    16:8e:7e:c0:00:63:f7:e8:81:0e:80:83:ca:2f:a0:
                    bb:3a:0d:7d:ac:88:90:e7:9b:80:f8:b0:bd:7d:98:
                    e4:0a:58:24:30:0d:e6:db:a6:e9:72:20:05:7b:f7:
                    33:b3:87:ff:ee:68:98:54:3d:a3:fd:6f:ee:fd:9e:
                    8b:3d:72:cb:5f:55:db:60:83:eb:5a:e2:70:f6:a9:
                    60:bb:bd:0f:8c:67:96:63:73:3c:07:d6:71:6b:3b:
                    4b:d5:bf:7e:58:c7:03:f4:fc:53:9f:0e:85:5c:3c:
                    01:cf:e1:03:09:77:ed:28:7a:55:0d:7d:0c:25:f7:
                    ee:b9:d5:0e:89:72:07:94:db:be:6e:e5:05:35:b1:
                    72:b2:b1:61:a9:2f:d4:3e:fe:65:6e:b0:31:62:07:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CD:6D:A3:23:67:1D:E6:01:B3:A6:A9:00:81:62:9C:52:01:53:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3faeccb8-76d0-37d3-a396-855bc644c0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:99:07:a9:08:0e:8b:44:fc:c1:52:cc:fb:43:61:a8:25:
         53:e9:7a:ab:52:42:f0:d6:2a:e8:04:f3:fd:1d:c7:29:89:b5:
         60:d7:a0:f1:58:0a:4c:48:6b:d2:1f:02:e3:64:15:68:de:74:
         ab:fa:48:15:85:9d:7c:ad:03:b3:b9:b4:90:0b:5b:bf:d2:6d:
         e7:f5:f0:9c:35:bb:7b:30:47:73:82:cd:36:de:54:a7:f1:61:
         2e:5f:6e:15:bc:b1:7c:e6:bb:46:b8:2b:de:e6:c2:e9:90:41:
         d2:a9:f3:d2:2d:12:a9:e6:f9:91:93:5f:39:8c:07:8e:04:01:
         72:e0:9b:27:f0:8f:57:ef:ba:86:4a:6a:0b:b5:75:ec:bf:7e:
         a8:f2:49:ce:91:3e:cc:f3:4c:12:d7:21:35:3e:23:fb:b4:bd:
         6b:71:9e:c1:68:77:44:f7:50:30:6b:a1:f8:ed:0c:d8:fd:1c:
         09:89:88:77:89:49:75:46:eb:c5:57:bf:2c:ba:97:6a:9d:eb:
         d6:65:8b:a0:cf:8a:48:06:b3:84:90:30:86:2a:63:45:0b:29:
         7a:81:e8:43:2e:bc:00:0e:2d:ac:a8:44:71:62:54:c1:31:41:
         7c:79:b3:49:2f:38:73:55:55:42:7c:92:09:c4:64:dd:c2:ad:
         6a:71:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org