Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fb72391-f9df-34d9-aa43-62578ac70f75.roa
File:                     6fb72391-f9df-34d9-aa43-62578ac70f75.roa (raw, json)
Hash identifier:          xbWAzS8Rqe4Y7keK68AZr1DCLehCKZ1l/CNO9RV6xwg=
Subject key identifier:   B6:A7:20:58:4E:F0:14:0A:45:76:5A:57:38:2D:BB:6F:B3:AF:5D:02
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10B8364C266BA8A2708980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fb72391-f9df-34d9-aa43-62578ac70f75.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        206.172.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:b8:36:4c:26:6b:a8:a2:70:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=a4d7fd97-16e7-4f43-94e0-bb32bb42bac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:9e:48:00:7f:60:b5:95:9f:f0:f8:f7:60:
                    22:77:98:9a:7e:c1:04:67:a5:39:90:59:f7:e0:c7:
                    dc:af:92:eb:14:5b:70:2e:dc:4a:3e:82:88:73:40:
                    bb:87:d7:54:30:ad:71:46:cd:8f:25:d3:94:bc:4c:
                    0f:7a:47:a3:68:e4:dc:3d:cd:8f:d0:d5:c2:e3:e8:
                    8c:9e:5e:da:1a:0d:e6:e8:bb:f0:b8:e2:16:1b:a1:
                    66:bd:0e:96:79:b6:55:99:0e:c1:0d:0e:f2:bc:67:
                    c9:73:47:d6:59:d6:81:25:5a:dc:7f:94:95:6e:53:
                    d9:10:ff:d1:80:8d:9a:3e:bc:78:7b:44:45:f1:16:
                    20:56:8c:46:c2:ce:d2:b0:fe:a2:a3:22:e2:64:53:
                    a9:72:e3:e1:21:97:f9:64:cf:a9:82:16:f9:1a:38:
                    01:02:18:04:03:45:e0:3c:0c:73:cd:3a:e6:73:62:
                    af:57:d9:b4:23:57:23:fb:a7:31:80:62:94:f2:3c:
                    89:e8:15:3a:19:56:7d:b9:b1:f3:3b:9a:31:c5:f6:
                    dd:79:4a:80:a1:e1:ee:ad:05:f2:e6:ef:26:11:3b:
                    6d:4b:7d:91:6a:fa:a4:73:89:74:e0:c1:4d:e4:c1:
                    86:c2:b8:f3:ed:94:1e:d6:2f:d7:b4:6e:cc:b5:8f:
                    c1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:20:58:4E:F0:14:0A:45:76:5A:57:38:2D:BB:6F:B3:AF:5D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6fb72391-f9df-34d9-aa43-62578ac70f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:31:c5:1f:ad:a5:3c:38:33:7e:e0:f4:c4:99:ef:24:84:
         44:cc:f8:47:1c:30:e8:7a:b7:3a:ee:00:59:1f:d7:ce:e4:cc:
         4c:5e:f3:5c:ea:61:c4:d3:73:dc:4c:f9:4e:58:8a:1e:8b:bc:
         9b:fc:77:96:86:56:35:c3:54:f0:f9:7d:8d:c1:91:a8:a9:0b:
         95:c5:4a:a5:b0:e7:ff:81:19:9b:fe:f3:c3:9e:2c:40:92:33:
         85:b6:90:7d:b1:96:7c:4d:8e:1f:0c:76:fb:cd:5e:2b:61:59:
         73:d6:34:36:59:57:cc:69:26:56:ac:96:e8:66:6b:00:28:c8:
         6a:25:f9:b3:61:40:a8:fb:5b:1f:d2:d0:50:34:a8:ae:12:17:
         a5:57:d5:66:fa:e9:58:78:62:b0:86:aa:e4:41:86:c5:f3:85:
         fb:5b:b0:90:86:d9:22:c2:87:29:cb:6d:8e:6d:d3:c0:57:06:
         ca:71:97:71:4e:49:8c:75:64:7f:c8:56:0c:8c:67:42:d0:ca:
         62:55:76:d3:b8:15:2d:fe:52:06:d4:ba:1d:ef:b4:19:f4:32:
         5d:2b:ca:4c:d6:b3:7d:9f:1b:7a:75:dd:f4:f3:d6:16:4a:91:
         b4:a9:62:b6:01:17:71:1d:a4:94:41:4d:95:a9:d6:23:41:0d:
         ac:43:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org