Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/66a67942-db94-38ff-8185-c3a09af73339.roa
File:                     66a67942-db94-38ff-8185-c3a09af73339.roa (raw, json)
Hash identifier:          YVaWcFUcD2LGA3nnCNlSjeurgy0DZrXSz5m6MWh3Pnk=
Subject key identifier:   76:1B:93:BD:6D:0E:3F:FF:54:19:15:9D:1F:95:6D:85:C3:31:93:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11823C5680EC6ECB9623A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/66a67942-db94-38ff-8185-c3a09af73339.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        207.236.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:82:3c:56:80:ec:6e:cb:96:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=29c67f6a-6526-4efd-9417-b10e710c776b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:de:00:ba:c1:2c:c9:ff:e7:ce:23:ea:cd:
                    2e:72:5f:f5:49:bf:e8:13:86:4e:25:98:03:7a:1c:
                    5c:b4:f3:a0:fd:43:61:1c:4d:67:66:5d:09:c8:47:
                    e6:75:c4:e8:01:67:7f:77:f4:e4:f3:ae:96:a6:21:
                    5e:05:d8:17:62:14:03:a4:4f:37:c3:33:d3:90:71:
                    10:dc:03:cf:36:d3:cd:9a:76:30:0d:ba:0a:0c:e0:
                    c6:55:b5:91:10:b0:84:b6:40:b0:bc:94:34:8d:f1:
                    fe:e6:8f:ed:93:f4:f3:a7:77:3a:45:0d:71:0d:3b:
                    51:85:75:46:90:59:d6:b8:4b:76:97:59:ad:04:60:
                    dd:cc:49:79:4d:5d:49:41:fa:58:15:f0:cd:3f:6f:
                    2a:3a:8c:ae:dd:32:7d:2b:f3:16:61:59:64:4e:2b:
                    0f:14:cc:fb:d8:7b:79:f7:48:f5:d0:f6:ec:2f:6b:
                    fa:7a:10:dd:2b:87:99:45:6b:51:83:47:27:d9:91:
                    17:e5:2d:7b:b4:1e:b1:2f:a8:66:c6:93:63:70:d7:
                    5f:01:8d:23:6d:8b:e0:6f:29:99:39:05:72:5a:85:
                    9a:c9:90:b0:9e:6a:f3:54:4c:3e:0c:49:39:32:c1:
                    67:8d:53:68:67:e5:56:bb:12:04:9d:34:c9:ec:f9:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1B:93:BD:6D:0E:3F:FF:54:19:15:9D:1F:95:6D:85:C3:31:93:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/66a67942-db94-38ff-8185-c3a09af73339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e3:87:a5:b1:d2:52:89:08:59:df:7a:c3:0d:64:dc:3a:30:
         39:49:79:64:86:c7:94:5e:f4:90:5d:9c:79:d0:8a:27:27:01:
         d1:9e:8a:86:c5:a6:d7:85:f7:38:6a:7f:6a:49:aa:1a:00:d7:
         a7:63:92:3b:f5:b3:25:14:a7:7b:a0:f8:b6:8e:ed:1f:28:fb:
         0c:5d:7f:b9:f3:37:df:93:38:7d:46:1f:23:45:cd:e5:9e:04:
         6f:ba:ba:d3:23:74:89:d6:b8:30:86:d3:37:8c:9b:d7:cd:0c:
         73:93:25:5d:15:5f:30:c3:61:d2:1b:d8:69:db:62:c6:78:08:
         b9:06:1a:8b:52:39:4a:13:e8:1f:bf:10:63:52:44:64:cc:09:
         f3:f7:ac:ee:df:a9:21:04:25:d6:58:40:3c:da:a6:be:ab:e6:
         14:58:72:43:c8:bd:a0:ed:5f:fa:a4:93:88:ba:8a:61:07:17:
         20:c7:98:96:cb:ff:ef:21:63:bc:3f:53:50:ed:6f:87:09:af:
         fe:2d:75:02:e1:af:f2:57:f7:3d:7e:67:3c:13:48:4d:59:53:
         12:13:47:2c:47:68:2f:02:f2:44:d0:e5:f5:28:eb:e8:5e:d8:
         87:23:ea:f0:06:72:22:40:25:04:91:91:3e:18:f0:01:9f:29:
         1b:32:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org