Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/617fe620-d3a4-3f5b-826c-926819e6edc9.roa
File:                     617fe620-d3a4-3f5b-826c-926819e6edc9.roa (raw, json)
Hash identifier:          KqGKFILn7XrUBlsQE4ov5+e44eBHzK/14xTcsbRWNvE=
Subject key identifier:   F3:C7:0C:72:8F:CB:79:D5:68:21:26:F2:82:89:75:CC:43:AD:E6:26
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FE57A8C2C877D95827440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/617fe620-d3a4-3f5b-826c-926819e6edc9.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     16487
IP address blocks:        204.101.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:e5:7a:8c:2c:87:7d:95:82:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=8b8edfbd-fe08-42a4-8b18-727a33ea3f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:e5:c5:11:8d:ba:1a:b9:44:19:00:24:48:
                    e7:86:6f:40:ab:18:a0:d3:97:33:31:db:e7:c5:dd:
                    8a:4f:6a:77:25:31:f0:09:1d:59:13:05:9b:b0:5d:
                    c3:02:47:19:eb:43:eb:9e:e1:86:6a:89:7f:b8:3c:
                    b2:55:14:09:da:de:6a:07:ff:57:10:46:33:a4:59:
                    c0:3d:73:6f:ac:95:92:e0:e8:76:3e:7a:08:77:d1:
                    1b:c5:cb:59:32:41:00:06:af:52:1e:ee:11:35:c6:
                    46:88:81:ea:c5:e9:df:6f:4c:8d:af:d6:f0:79:e6:
                    e6:d8:96:08:23:f3:ad:0c:e2:0d:74:6a:fc:24:d6:
                    fc:4f:90:fb:da:0f:28:8d:5c:72:76:d4:9c:fc:1e:
                    40:3c:32:73:9f:6c:f1:ea:a6:04:9d:bd:1f:97:03:
                    40:a5:f1:e3:a2:f0:bf:f5:a5:68:71:59:2a:e0:78:
                    a3:43:33:5a:b6:f1:c3:72:b4:ae:05:18:a9:da:a5:
                    0c:7c:8c:7a:d6:93:bd:17:ad:e1:95:7f:a5:d7:e9:
                    41:66:30:40:b4:be:76:64:8e:cd:dd:6d:72:ae:e5:
                    1d:ef:32:3d:0e:f5:d0:8a:3f:1f:e6:a2:36:74:5f:
                    54:f5:c5:f0:b1:1f:f1:fe:a5:86:f5:22:4b:0f:d7:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C7:0C:72:8F:CB:79:D5:68:21:26:F2:82:89:75:CC:43:AD:E6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/617fe620-d3a4-3f5b-826c-926819e6edc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ed:7c:c0:21:c9:13:4e:60:0c:f4:79:a2:52:ee:39:bc:a8:
         a7:ae:a5:2a:a1:d2:ef:e4:b7:2e:3d:d8:99:8e:92:93:40:14:
         ad:c9:95:5d:71:26:b4:0b:a6:d6:22:b9:a1:7c:95:c3:0a:ab:
         e1:04:59:ed:e2:fe:ff:09:6b:25:8a:9d:76:ec:fc:51:b5:1b:
         57:9a:fb:ab:b4:b7:24:58:53:54:1c:8c:95:4f:b2:fc:0a:41:
         8a:59:0b:48:ee:95:9f:6f:db:11:46:10:6a:b8:a9:96:86:bf:
         8a:74:0c:c0:c0:02:19:bf:42:98:1f:f9:ea:c3:09:09:3c:fe:
         f8:f8:59:8f:9e:94:2c:00:70:a8:18:6d:e5:89:12:57:2c:b6:
         70:5c:d9:c3:59:90:df:de:27:8e:ad:c7:ca:fc:92:c6:50:98:
         10:d2:ac:b9:63:56:48:d8:ef:d9:92:6b:3b:47:56:9e:9e:7a:
         8f:65:a9:89:f2:fa:ac:2e:fc:89:d3:f4:fd:11:40:c1:90:07:
         0c:29:a1:76:c3:55:d9:a8:ab:cb:a3:8a:d4:bf:e8:ca:f4:bb:
         87:c1:60:0d:66:e3:db:9a:ce:fd:38:f0:ad:10:c8:8a:1d:3b:
         e6:eb:2e:f0:37:3d:22:50:e0:61:da:dd:fa:4c:6a:fa:d3:5b:
         1b:89:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org