Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/717fd711-49f0-31f9-b0a3-aba7fbe24434.roa
File:                     717fd711-49f0-31f9-b0a3-aba7fbe24434.roa (raw, json)
Hash identifier:          vvmC2KUhMy1A/a6mIkFiikwV5b9H1AtpFyFRqvfJPkQ=
Subject key identifier:   DF:EC:C7:91:65:4C:D3:D3:C6:6D:9F:90:2D:EF:69:79:6B:D0:AC:99
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA14AD2D6B286A078FAD0860
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/717fd711-49f0-31f9-b0a3-aba7fbe24434.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:ad:2d:6b:28:6a:07:8f:ad:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=dfe7eecb-f70c-4acf-a86b-2b73b640ba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:51:ce:c3:a6:f1:d7:0b:82:ea:b5:1f:c3:
                    f4:a1:84:28:c9:ed:d5:44:12:a2:4a:53:07:5e:5b:
                    c9:ac:d0:bc:b6:bb:b7:37:97:24:18:c0:b5:a1:b9:
                    9e:b7:50:f3:8a:0e:12:a6:18:6f:6e:40:bc:1f:e6:
                    51:32:04:da:6a:fe:d2:13:76:40:26:7f:b0:6e:aa:
                    89:05:81:5f:0b:5d:a6:2e:98:fd:f0:f0:b4:a2:c9:
                    e7:06:f8:53:3f:78:12:50:23:fa:df:09:90:9d:50:
                    ee:3e:91:14:16:20:f1:27:6a:a4:f7:df:d2:df:e8:
                    6a:75:67:6c:c5:b1:19:f9:ab:18:22:eb:2a:e4:e1:
                    cc:1d:f1:a0:9b:95:ea:0e:57:bb:9e:63:86:0a:69:
                    51:94:81:61:cc:c7:4a:2f:0a:d0:30:80:ff:46:7e:
                    cf:6f:b7:91:91:8c:bc:27:6e:db:c3:21:d6:ee:d9:
                    7d:d2:e3:0b:75:45:f8:f8:bb:4f:11:79:be:2e:2b:
                    9a:55:33:d3:ab:9f:e5:36:5e:19:1d:0d:19:0d:cf:
                    3f:60:53:6a:9a:f2:cd:bd:00:f6:65:ba:24:10:65:
                    ad:af:ca:27:d6:0a:9e:63:da:de:9d:58:73:85:ef:
                    94:fc:99:49:6a:a6:64:85:6e:ed:fc:fb:41:62:53:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EC:C7:91:65:4C:D3:D3:C6:6D:9F:90:2D:EF:69:79:6B:D0:AC:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/717fd711-49f0-31f9-b0a3-aba7fbe24434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:49:db:5b:51:1d:77:f2:89:9b:9c:ae:aa:b7:33:02:e1:5b:
         3d:ec:3b:6c:f0:7c:c9:e1:bb:9c:ab:a5:66:0c:c7:fb:ba:92:
         4d:6f:bc:25:63:62:a9:6d:35:41:d8:bc:62:82:9d:e6:54:a5:
         fd:88:a9:8a:39:7a:bd:69:86:65:c8:f8:1b:68:04:ed:ff:5a:
         de:1b:41:1b:92:ff:72:cd:f9:ba:3b:87:b8:9d:a6:c1:db:e1:
         89:f1:4e:9a:4d:27:9f:36:4c:84:50:82:68:c0:99:cc:a1:92:
         6f:c7:72:b4:ea:5e:6f:ce:da:20:f6:2a:ee:3a:fe:c3:f7:b2:
         b0:92:3d:42:3f:47:cc:bf:6d:ee:b9:f5:6d:a6:b8:7b:0a:a6:
         48:9b:a1:65:a8:a2:07:00:a3:2b:76:6d:7f:41:2c:82:c2:16:
         71:ca:9c:b9:70:62:e8:69:19:d6:10:19:0d:e8:ab:3d:7a:8d:
         de:a8:ac:1e:7c:c0:6b:ec:eb:8f:49:51:06:4b:58:37:72:33:
         fe:42:da:50:04:45:05:fa:b4:06:38:e6:46:d0:d4:1d:9f:ae:
         d3:12:34:75:a6:60:e6:c2:7c:ef:0d:96:d3:a4:85:1d:c7:1b:
         8f:c7:9c:07:77:2b:53:88:28:6d:f5:42:14:b3:e5:9b:85:3c:
         0b:a4:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org