Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d35da13-6108-3dad-8981-71598eef2ba6.roa
File:                     5d35da13-6108-3dad-8981-71598eef2ba6.roa (raw, json)
Hash identifier:          QxrndelgPeRvlKQSNGuoStLrRNtA0FBUhBIMGL4tsQk=
Subject key identifier:   66:F5:CE:CB:77:96:87:18:10:3A:79:5D:4A:B8:6D:D1:A5:FA:69:C1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1061EF7B704BDD3FD0AC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d35da13-6108-3dad-8981-71598eef2ba6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     397168
IP address blocks:        206.47.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:61:ef:7b:70:4b:dd:3f:d0:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=c62ec40b-919a-4c61-8ded-d090177fd3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:1e:af:23:e0:21:b8:41:66:20:6b:6f:9d:
                    85:5d:bf:5f:e5:4d:dc:5f:27:dc:9c:8b:63:5b:d4:
                    e4:f1:33:bf:53:f8:9d:79:a0:5d:6a:16:70:db:d5:
                    13:1a:6e:5a:bc:49:ec:e1:e8:ee:2f:86:13:27:0d:
                    3b:28:ad:d5:2c:79:d9:a3:b7:44:d3:b0:70:bc:04:
                    5c:8e:cc:eb:90:41:39:97:f2:ed:66:73:33:a2:4a:
                    96:0d:96:eb:82:35:f7:12:86:4d:5e:7f:85:18:ad:
                    78:b9:c2:b4:b6:d5:8f:0c:ca:c3:d7:60:3f:00:5d:
                    58:a1:66:a4:da:f6:6f:2f:dd:6e:86:e2:11:42:2c:
                    be:c7:64:97:2e:af:31:e1:5a:3e:06:0e:f8:d6:46:
                    eb:c6:e7:51:da:d1:5f:29:b5:28:14:0e:3f:4b:3c:
                    ff:da:5c:3e:03:87:71:cf:e4:22:7d:e1:86:31:73:
                    21:fd:83:7e:50:4c:8f:5b:b8:04:db:f4:01:ad:f3:
                    50:92:c3:63:a3:00:1d:72:23:09:76:d9:60:63:37:
                    a5:ec:96:b1:d2:aa:1a:74:08:9a:8f:be:54:18:57:
                    e4:c0:a0:1b:61:de:d1:e0:0f:07:b3:f0:74:ab:fb:
                    66:4e:5e:af:b5:5e:d6:8c:f6:c3:8c:b1:bf:1e:7f:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F5:CE:CB:77:96:87:18:10:3A:79:5D:4A:B8:6D:D1:A5:FA:69:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d35da13-6108-3dad-8981-71598eef2ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:da:0a:12:fa:39:a1:64:fb:3f:15:8c:af:6b:be:97:ba:af:
         c0:31:f5:c7:9a:82:90:24:0f:2c:35:ab:f8:99:fa:c1:6d:4f:
         76:44:a7:7f:2b:46:da:4e:19:6c:0d:ed:e6:a2:53:ac:2c:7c:
         1a:52:56:20:b5:bb:19:ed:86:f6:c5:27:2e:db:cc:9c:26:42:
         3a:49:e3:7f:62:af:1d:dc:a2:7d:f6:a7:d8:04:3d:13:52:d7:
         3b:cb:40:9b:34:ae:85:2e:ec:a6:f6:fc:04:a3:e0:f1:bc:03:
         bb:18:b3:dc:fc:1f:37:77:5e:30:e6:a5:6c:53:b5:c8:1c:28:
         01:f1:65:61:27:d6:10:53:46:76:08:d3:a0:50:58:65:bf:76:
         ec:6e:69:b5:91:f1:77:83:5d:60:fd:0c:74:63:f1:69:16:b8:
         50:06:90:ba:95:e7:03:3f:36:d5:2d:50:bf:c3:c8:12:6e:db:
         9b:e0:d4:61:5a:ef:e5:42:c7:d9:e4:93:a7:36:fd:7c:82:0e:
         0b:a6:0a:d2:38:a8:cd:52:84:da:f3:6c:13:35:ab:75:c3:59:
         51:57:dd:ef:f2:b7:29:c5:fb:94:38:5a:0e:08:ff:65:b0:39:
         04:88:d4:df:62:54:10:ca:00:d6:2b:e1:e5:1c:46:f7:bf:6b:
         f6:2b:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org