Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/418c3615-436a-36d1-b0a8-c664b77694ab.roa
File:                     418c3615-436a-36d1-b0a8-c664b77694ab.roa (raw, json)
Hash identifier:          CurMSVz0beVV84X32scQEgGdr/9KCQYUof50WE8nPMY=
Subject key identifier:   EB:AB:E0:16:C0:F3:F8:D7:54:C0:9D:6D:56:3C:4A:E6:62:E7:FF:D0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B105E026C34F46875EA6980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/418c3615-436a-36d1-b0a8-c664b77694ab.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     397168
IP address blocks:        206.47.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:5e:02:6c:34:f4:68:75:ea:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=c85bcaef-a8cf-41e3-97d6-e2dc89bff057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:74:9a:6d:49:69:0f:e6:15:05:a3:29:da:
                    a4:cf:44:7b:21:e0:29:40:95:7e:ce:db:c6:7c:37:
                    df:5b:9d:45:eb:31:b2:1c:18:69:6c:16:a0:e7:44:
                    fa:1b:29:aa:66:c8:9b:ed:16:6c:05:67:f1:ad:ce:
                    f8:2a:2d:9e:c3:5a:96:47:77:54:f7:47:66:1e:7f:
                    c2:9c:da:1e:79:ff:86:2d:e4:fe:29:92:2a:c1:5e:
                    9f:1f:66:a2:41:8f:29:6c:68:99:8d:89:d8:3e:72:
                    8c:d2:f4:a2:a1:57:9e:99:76:5e:67:ce:f0:d1:3e:
                    26:24:59:f9:cf:38:be:1f:f9:38:97:7b:6b:8c:cb:
                    c3:3b:4f:63:bb:1a:e3:57:8e:02:c5:86:83:bd:27:
                    1c:f1:c2:6f:77:29:d5:40:6a:63:4e:ec:ec:ce:42:
                    96:7d:61:68:49:06:b6:67:c5:90:4b:46:42:d7:1b:
                    93:6e:49:87:25:5c:f7:90:4f:1b:cf:c7:31:2a:10:
                    b7:20:00:86:04:6f:90:40:c4:05:60:a0:48:c8:55:
                    79:bc:02:06:2e:62:70:1f:85:7b:4f:29:2f:4d:8c:
                    2d:f7:28:6b:74:bf:c3:54:e5:39:87:7a:39:ce:a3:
                    0f:d6:f5:45:17:17:a3:9a:f4:50:be:a6:7a:bf:7c:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:E0:16:C0:F3:F8:D7:54:C0:9D:6D:56:3C:4A:E6:62:E7:FF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/418c3615-436a-36d1-b0a8-c664b77694ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:a3:5b:9b:59:08:c7:e1:b9:db:47:f6:60:aa:df:fd:d4:
         b6:7c:61:fc:67:a2:d2:64:2f:7e:87:d6:23:3c:86:20:76:3e:
         bc:7c:89:e4:fa:34:d7:71:a3:87:cc:fc:5d:61:de:22:5c:f1:
         b1:8b:21:a2:30:eb:d8:76:8d:82:24:2e:42:74:e9:c8:d0:7b:
         4f:70:6d:a2:5c:53:b2:56:49:4c:39:d1:55:18:65:ef:0c:09:
         6c:5c:76:9d:d0:a6:0f:ac:78:fa:88:f1:1f:11:c6:1c:34:7d:
         85:89:6a:3e:97:0c:6e:76:89:79:fa:36:f8:fa:d4:83:7b:8c:
         ba:f1:05:0c:66:2e:14:f4:6b:1f:ef:04:f1:9a:44:a2:64:52:
         05:59:8f:12:db:b5:31:c8:89:9f:83:12:b8:6d:d1:bf:3d:b2:
         f8:d9:7a:f7:42:a1:59:4e:65:bf:3b:7f:7a:8c:54:2f:fc:3b:
         59:c2:e9:0b:97:ad:12:ef:4d:99:c6:b8:e8:cc:48:c1:d8:9d:
         71:f7:c2:2c:be:72:37:86:be:01:cc:bb:55:51:7b:6c:a2:8f:
         22:90:ad:3e:69:9f:ca:de:49:da:ee:3f:29:7e:62:5e:75:46:
         5c:6e:ee:72:a0:f5:15:d2:c2:ca:cc:aa:45:49:cd:15:bd:11:
         a3:85:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org