Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/412db81c-0c14-30fa-987f-16804bbd6309.roa
File:                     412db81c-0c14-30fa-987f-16804bbd6309.roa (raw, json)
Hash identifier:          TfUt+wMHlWbQPKQ2Mfq3Fh+w0Ve3hWD85PdPhRj92J8=
Subject key identifier:   2E:5A:CF:26:09:3A:81:90:17:FE:E0:BE:32:2A:19:F3:FF:1C:62:19
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10460A58D9A09BCB2AD290
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/412db81c-0c14-30fa-987f-16804bbd6309.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     54937
IP address blocks:        205.200.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:46:0a:58:d9:a0:9b:cb:2a:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b902c38f-ce76-490d-8a62-4fde3f0ad8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:63:03:de:05:2b:18:7d:cf:42:27:53:ab:
                    39:3a:29:ea:29:66:48:f2:aa:87:c2:60:ef:a3:cb:
                    c5:2e:0b:f2:3a:a6:32:82:29:ab:05:14:bf:91:55:
                    84:85:ba:a6:c0:30:a2:3d:7e:e8:71:59:ab:df:54:
                    f9:9b:fd:11:8c:b1:3f:41:1b:18:5f:75:bc:39:c5:
                    17:7a:6d:37:e5:b5:85:00:32:8f:67:9a:e3:37:28:
                    1b:bf:34:ad:df:9d:ea:89:dc:c2:be:38:1c:ef:5c:
                    25:9e:dc:b2:9f:1b:4a:01:06:16:40:0e:8b:39:b7:
                    34:92:1c:c5:9f:f4:c3:bf:99:01:b0:62:b4:e1:36:
                    c7:d0:8c:a9:31:e6:7d:ec:99:09:07:e6:f5:43:4a:
                    1a:27:29:b9:e1:29:ec:6d:82:96:68:8f:8c:38:b7:
                    7d:a3:63:97:25:a6:37:5d:98:70:7e:50:f7:6b:b8:
                    7a:57:3e:d7:87:c5:c9:45:fe:58:41:18:0a:70:45:
                    23:2b:be:d1:0f:c9:2a:3a:72:b8:94:88:a8:74:d8:
                    f0:1e:e7:9d:78:cf:b8:d7:ec:ce:b7:c3:24:9a:8b:
                    0b:5e:37:46:6d:9c:7c:99:2e:0a:ed:ce:a2:db:97:
                    35:03:1e:98:aa:12:31:69:08:cd:38:5c:c5:98:79:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:CF:26:09:3A:81:90:17:FE:E0:BE:32:2A:19:F3:FF:1C:62:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/412db81c-0c14-30fa-987f-16804bbd6309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:34:af:83:ad:8f:3b:6b:b8:3e:7d:68:12:27:dd:8c:3c:f2:
         45:5f:1e:18:5f:ea:a9:20:27:7a:ef:26:2d:87:be:50:c9:62:
         6e:16:33:16:8d:5f:5a:fe:86:a3:d2:91:00:57:b3:17:82:b0:
         14:fa:e8:32:6a:d7:4a:34:50:8b:27:1d:3c:cb:38:ce:29:f0:
         5b:4b:46:07:49:98:c5:28:e8:fe:fb:e1:78:58:13:2c:b5:bf:
         72:bd:3a:85:d9:ba:d1:b8:03:c7:3b:a8:e0:3c:ae:95:cb:7d:
         1d:13:30:9d:8f:81:32:ba:cf:fb:26:c1:7a:a0:fe:09:d5:51:
         04:8a:0b:c4:22:85:aa:2f:2b:7c:7f:b8:00:14:2a:32:24:d1:
         5e:a4:86:da:b9:53:ac:19:c1:ba:37:fd:56:3d:00:d4:4c:81:
         ff:ba:b3:9b:06:d5:61:70:89:64:cf:fc:39:ec:6a:b7:eb:a5:
         b9:35:c9:d6:8b:69:d4:0d:f4:f2:90:b8:28:fd:4a:90:2d:cc:
         e1:99:ee:31:f0:0d:75:43:e7:bf:91:0d:40:cc:d4:ae:3e:37:
         ad:88:bd:eb:3a:80:a8:c0:cd:07:a8:a3:2a:37:5e:06:e4:3e:
         8d:30:51:8c:04:c4:ad:cc:13:8f:01:ff:78:42:5a:3a:fc:76:
         82:01:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org