Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40c1be6c-38a0-36c8-9806-fbdc37acb54f.roa
File:                     40c1be6c-38a0-36c8-9806-fbdc37acb54f.roa (raw, json)
Hash identifier:          MMzqKAh6fGjJZK3o7tIssMV0DEMkg7FF3SNFZ8SOr6A=
Subject key identifier:   BD:8D:C2:80:F4:94:73:2A:0A:E0:5A:3E:F5:07:C5:7D:05:54:61:D5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1145E9865C487462A91AC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40c1be6c-38a0-36c8-9806-fbdc37acb54f.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        207.164.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:45:e9:86:5c:48:74:62:a9:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=281758a2-0fcb-44ee-9798-55d5907c607b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:34:20:c3:2c:e9:81:8b:77:ce:15:6c:00:
                    a9:81:24:97:08:36:68:b0:61:5a:87:66:0e:40:a7:
                    79:3e:47:9a:47:1b:e9:95:2e:1a:b2:d7:2d:20:62:
                    30:ef:d1:0d:bd:d3:8c:70:5c:42:91:d6:6f:03:ed:
                    31:22:2d:30:da:1d:73:e8:34:74:de:11:0e:83:c7:
                    e8:9f:5c:9e:f4:6f:8b:94:8b:8e:8b:9f:d6:65:b2:
                    8e:94:3b:1f:3d:d2:aa:66:45:87:c4:99:91:45:9b:
                    8e:82:4e:7b:1c:91:74:8a:98:a0:4e:bd:66:d3:0d:
                    40:8b:86:a0:54:80:51:9a:87:7f:a2:ec:90:7c:92:
                    7b:48:b5:fd:db:cc:b8:34:7c:7f:36:87:49:ee:c9:
                    7b:4a:74:d1:a4:d0:13:36:b8:bf:f1:d8:98:9f:9f:
                    15:3e:6e:6a:63:a5:12:d7:0a:28:ef:b8:f5:26:90:
                    0f:d4:39:50:b7:fb:54:ed:15:de:ec:df:da:01:cd:
                    cc:d1:3c:b5:52:e7:67:c3:57:e2:ab:44:ea:93:88:
                    2a:ce:f5:f9:9d:da:44:1e:d2:c5:be:59:f4:cc:cc:
                    00:55:df:36:ea:f2:48:f2:90:7b:22:39:15:50:fe:
                    32:af:03:7d:aa:02:eb:85:29:4f:ea:13:a2:e4:b0:
                    10:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:C2:80:F4:94:73:2A:0A:E0:5A:3E:F5:07:C5:7D:05:54:61:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40c1be6c-38a0-36c8-9806-fbdc37acb54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:69:ba:e5:f9:45:f6:a8:37:93:bb:84:da:c4:3e:fe:f0:48:
         1f:7a:c9:69:82:cc:d6:64:53:c2:8a:4d:a2:d1:37:e6:cd:cb:
         68:2c:72:e6:1a:5a:3d:22:ca:ae:05:ee:e9:f7:6f:2b:f4:6a:
         9e:39:f1:f2:8f:a3:52:22:36:bc:ba:8b:70:d8:84:24:e8:40:
         07:8d:3b:d3:93:57:4c:72:24:1b:2f:1a:4c:7b:0a:4f:25:c5:
         e4:de:d7:43:3d:71:c0:d6:55:75:f8:1f:39:ce:fc:ab:20:7e:
         21:0b:87:6b:52:bf:64:98:fb:9e:f7:e2:eb:46:33:6b:31:62:
         19:9d:7d:55:b4:8b:e7:2a:87:0c:62:50:17:6e:46:bb:e4:20:
         ee:c7:a5:a5:c5:f2:59:2c:bf:75:e3:77:cb:3e:72:52:d9:e9:
         3d:79:cb:ba:dc:cc:30:4a:e9:7c:07:0f:cd:7e:7f:b7:d0:6e:
         f8:73:d5:d3:25:d0:da:f6:14:18:4b:c7:04:18:c8:c5:d3:83:
         7e:12:74:17:1c:6e:cb:7b:50:19:67:81:e5:53:fa:32:8f:2f:
         b5:bc:29:22:b8:1d:7f:dc:91:64:c1:a9:a8:33:0d:c8:0a:d3:
         39:51:d2:4f:fe:70:e2:0a:7a:ca:61:42:41:72:18:66:6c:b6:
         b0:39:d7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org