Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5184c335-2c5a-3dd2-8dee-7dbe811400a3.roa
File:                     5184c335-2c5a-3dd2-8dee-7dbe811400a3.roa (raw, json)
Hash identifier:          8ODFeUMCBAhYyPwlrhPNn3/OzlttB/AIYqwA97sahX4=
Subject key identifier:   3B:CD:BA:EC:7F:BD:BF:72:91:09:7D:ED:54:B5:20:80:85:F9:DD:09
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B113B12875F2840E1BE3700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5184c335-2c5a-3dd2-8dee-7dbe811400a3.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        207.164.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:3b:12:87:5f:28:40:e1:be:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=ec905377-96ce-44ea-8adb-8b2708305798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:7c:b6:45:60:22:0f:a4:37:c6:ff:cf:c9:
                    91:58:a3:cc:c9:ad:33:37:22:88:df:b7:7f:c8:55:
                    8d:f4:ba:77:56:33:f2:a6:5c:bd:27:04:66:f7:d5:
                    dc:17:80:f2:c8:fa:ef:03:be:38:27:86:ab:3b:c7:
                    5d:5e:1f:22:39:f1:ea:66:ea:38:5e:64:66:13:b5:
                    ac:e6:b3:4d:7c:0d:b1:33:cc:61:98:c9:a9:c9:18:
                    2a:e0:5d:1d:06:c7:ae:23:14:54:05:6d:1a:1a:67:
                    28:d4:0a:f9:22:df:70:c1:ab:2a:50:04:44:d8:75:
                    e9:93:7f:4b:b9:d5:86:01:8f:40:0f:e5:af:cd:77:
                    3e:e7:fa:78:33:fc:18:4a:70:fd:55:03:d1:8f:a4:
                    a6:5e:5c:b3:e6:bb:d1:6a:7f:7b:03:27:85:74:db:
                    c6:09:02:a9:ad:49:53:df:71:05:f3:49:4b:d0:f6:
                    77:91:29:1b:a0:c3:69:08:02:1a:ca:71:a2:aa:76:
                    38:16:31:76:84:b0:3f:aa:93:a0:97:eb:54:3c:a7:
                    c8:7d:44:06:e8:fc:d7:72:e3:56:e2:c1:46:62:bc:
                    84:73:8a:8c:8f:6a:46:d2:e3:ef:b6:42:b4:f4:2a:
                    95:1f:eb:b7:7b:28:8e:7e:0c:fd:d4:ff:69:14:18:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CD:BA:EC:7F:BD:BF:72:91:09:7D:ED:54:B5:20:80:85:F9:DD:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5184c335-2c5a-3dd2-8dee-7dbe811400a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:0f:dc:cb:23:8d:38:1a:1f:a5:43:d4:cd:37:48:13:82:
         f1:d7:69:02:aa:2a:c6:6a:2a:58:04:3e:18:94:12:f1:68:93:
         fd:07:f7:d4:23:f2:dd:02:eb:82:00:6e:c1:cd:fd:bf:03:78:
         ee:0b:6f:b2:81:30:13:da:9a:31:c6:fe:b6:57:df:89:ad:ec:
         ae:8d:c6:14:04:66:7a:d1:d8:32:5f:0f:9f:41:00:9d:77:37:
         c6:72:44:0d:3c:cc:92:e1:38:3d:be:bc:d1:6a:ec:65:4e:9e:
         e6:48:30:c2:1f:f6:dc:85:af:8d:15:48:98:ef:58:fe:60:a9:
         d8:d6:ad:02:b5:3f:af:3d:03:b8:74:c8:4b:81:28:f7:01:3e:
         d0:60:fc:30:e4:a8:19:66:1a:38:a4:e7:13:6c:de:14:72:bb:
         90:a7:0a:0b:f1:91:69:51:a8:da:91:39:af:ab:b9:b5:71:98:
         6f:08:fb:77:9c:d6:03:5b:2d:cb:5d:e4:e4:14:84:3d:6d:3e:
         de:11:32:00:78:86:9a:e5:03:b2:ea:81:02:44:81:82:16:3e:
         f0:b8:11:80:86:87:d3:7b:a5:45:3f:69:80:3a:fc:2e:48:a7:
         c9:e4:17:ae:fc:f0:6b:21:a9:84:30:f1:73:53:84:bc:64:57:
         0b:8b:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org