Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a18fb5a-6d07-38a9-96b1-0300120a9659.roa
File:                     4a18fb5a-6d07-38a9-96b1-0300120a9659.roa (raw, json)
Hash identifier:          l/ESB3ZiGXGMn8teXKX77YgBy3Lp6J4wViNTiN+KkTc=
Subject key identifier:   AF:89:B4:D9:F3:8D:59:39:91:57:E9:93:F7:3A:ED:0A:F8:F2:B1:1A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11F680F6ADB05568176FC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a18fb5a-6d07-38a9-96b1-0300120a9659.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        216.6.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:f6:80:f6:ad:b0:55:68:17:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=41f1aca2-4d41-4e5f-bce5-7d1602df2aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:ee:d6:1c:82:fa:17:31:61:d1:98:a8:92:
                    69:8e:e8:b0:da:1b:b7:71:81:4a:37:d7:dd:f5:f3:
                    c5:9b:47:0f:6c:1d:52:75:11:de:fe:46:83:bb:2a:
                    bc:df:68:49:b7:1b:fa:8f:fb:a5:d4:d3:46:d2:af:
                    e0:0f:0a:a1:43:97:be:e3:ce:b5:0a:bb:ac:53:2e:
                    8a:08:ac:3b:d5:a5:cc:24:52:bb:af:5a:33:ea:71:
                    d0:20:51:c8:4f:b1:ec:c6:7c:fd:a1:93:23:5e:c9:
                    20:7b:7a:cd:fd:13:d2:2e:8c:9f:0f:aa:45:62:de:
                    64:e9:da:69:72:35:df:1b:25:f7:c3:36:06:94:c3:
                    50:f6:3b:3e:51:4b:85:b6:92:b5:1e:24:87:12:52:
                    2c:5c:d7:d4:a2:8c:4a:b5:ee:e8:6e:5f:a0:75:34:
                    ce:88:72:30:40:88:25:c3:54:3b:00:3f:aa:65:34:
                    3e:37:24:6d:db:23:d0:71:15:59:7c:61:13:b1:55:
                    8c:ab:3a:a6:7d:c5:b0:ce:af:62:c3:86:0e:c0:58:
                    8b:6e:cc:92:29:3d:f8:fd:d2:53:5b:6c:bd:4b:46:
                    80:bc:85:e4:7f:0c:6f:4e:ae:c2:be:f2:ca:8a:13:
                    4e:10:1e:9d:55:7c:d6:7f:3b:fb:5a:12:06:5c:f5:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:89:B4:D9:F3:8D:59:39:91:57:E9:93:F7:3A:ED:0A:F8:F2:B1:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4a18fb5a-6d07-38a9-96b1-0300120a9659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:0c:9b:b5:0b:31:07:72:9e:36:34:31:15:b9:94:df:6f:0c:
         94:76:9c:f5:6a:39:44:d2:9a:20:db:85:4f:aa:37:7f:b0:9a:
         a8:b4:57:28:76:9e:1d:9c:ae:4f:83:dd:29:3a:60:87:d6:f0:
         2f:0b:a4:4a:77:67:ec:1c:e3:e4:0a:1c:5b:b2:9f:80:8f:75:
         91:19:e4:dc:4a:b7:ee:fe:44:e1:1b:a8:04:19:e6:ec:e8:af:
         9f:0c:86:7e:5c:5b:ea:b4:b4:6f:b0:af:d9:d6:75:31:a4:09:
         b6:dd:7a:b5:d3:cc:73:4b:6d:5e:44:bc:c7:9c:a6:f6:5d:60:
         69:ca:83:f6:9a:fa:82:68:a1:72:0e:a2:5c:8a:9d:79:99:96:
         d8:d2:a1:51:1c:5b:80:ba:c8:9c:40:e7:ce:c8:bf:51:ab:90:
         8e:70:90:e7:fb:5f:65:ae:3d:d0:2b:12:7d:ec:e3:f9:9f:c9:
         73:85:a5:e1:80:76:22:86:0b:df:dc:b3:c7:2f:cf:dd:8a:e7:
         2b:97:ef:44:9d:74:25:74:6f:fa:c6:30:32:a6:57:bc:af:3b:
         a6:a2:28:5f:5f:80:12:b9:fb:49:fc:b4:1a:91:15:1f:2f:93:
         61:8e:70:4a:5e:aa:72:6f:49:e9:d2:70:cf:85:1f:0a:35:1b:
         f6:ef:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org