Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/745c1108-3581-3d30-93b2-8548edd0d17d.roa
File:                     745c1108-3581-3d30-93b2-8548edd0d17d.roa (raw, json)
Hash identifier:          Ut2QWQVHlpzfNoCgcH1JCYSoFrHtKxsnLTH+LorFF6w=
Subject key identifier:   98:81:7F:26:0D:24:3F:3B:BB:80:EC:4E:76:64:95:D3:1F:B1:C5:36
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B117292FEDAFBBF1EF9B900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/745c1108-3581-3d30-93b2-8548edd0d17d.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        207.236.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:72:92:fe:da:fb:bf:1e:f9:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=025c1e06-418b-425e-b5e4-af5b7ebee30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:f0:f5:9a:28:e9:cd:5f:0b:ff:30:be:d9:
                    79:20:8a:af:a0:32:1a:2b:53:1c:9b:29:5a:bb:d9:
                    35:a2:80:5d:19:34:f7:3d:23:3e:3c:ac:b6:af:b2:
                    2a:ff:95:54:ed:45:a5:55:85:43:47:8b:76:0f:31:
                    e4:0d:d5:c8:fd:6f:75:b0:08:1e:a8:26:3d:70:c4:
                    12:ae:54:9d:12:74:57:f0:bc:d8:fd:e9:f4:8b:7d:
                    96:77:29:e5:cb:62:2a:93:e1:9f:7a:8e:ab:84:6a:
                    7e:39:66:c0:70:95:9b:87:99:3c:aa:8c:6d:0e:6f:
                    27:e6:08:db:6a:2d:e8:ac:d7:80:10:0d:ff:85:1b:
                    23:73:fc:23:e9:78:64:4d:87:3b:aa:c7:f2:76:16:
                    e5:eb:43:ec:76:ef:59:79:99:0b:bb:19:2f:9e:34:
                    39:ea:f3:c7:e3:f0:fd:9f:71:ec:97:d0:f8:e5:87:
                    2c:fe:bc:ee:ca:4e:93:96:af:25:22:57:32:25:f8:
                    da:f4:74:71:96:e9:7d:0d:68:63:67:cd:d5:71:04:
                    ef:5f:16:bf:ce:62:c4:7c:7e:6f:7e:3a:f8:76:f8:
                    1d:6a:f4:de:3f:bf:d2:0d:99:fe:b3:3b:5e:3b:63:
                    85:00:30:9e:3f:ae:10:a4:3e:50:51:4c:11:29:5c:
                    44:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:81:7F:26:0D:24:3F:3B:BB:80:EC:4E:76:64:95:D3:1F:B1:C5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/745c1108-3581-3d30-93b2-8548edd0d17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:87:1a:88:00:5b:e2:a3:f2:9a:cc:20:3d:af:a2:6e:06:
         dc:37:3f:05:86:a2:d6:d4:fd:f5:ba:bb:e9:01:b8:4f:78:96:
         9d:a6:57:73:1d:aa:19:02:04:11:2d:74:5f:77:44:43:f2:8f:
         28:e4:92:83:65:1c:00:ee:50:79:97:29:1d:e9:83:ea:2b:e6:
         29:58:b6:89:f0:21:28:a5:79:64:8d:fb:d0:32:2d:8d:fe:9e:
         c6:f6:4e:94:05:94:16:0c:e8:6f:38:10:c2:7c:b3:da:7a:a8:
         df:ee:ba:64:fa:8f:0d:dd:94:65:46:a1:d9:a3:51:cc:ae:76:
         e1:a7:30:43:f4:a1:f4:0a:75:9a:17:6a:56:30:a0:c0:b6:ac:
         3c:65:b9:da:2b:78:f7:6a:de:ca:0d:54:74:1a:ee:02:6c:5c:
         56:7f:09:3a:4e:f3:d8:13:4a:85:ac:ae:c6:a2:6c:dd:e0:96:
         75:7e:90:68:c3:92:f0:01:3c:fe:ad:18:c7:20:a3:ce:2b:12:
         84:3d:3a:97:f9:4f:5b:57:f0:f7:93:39:81:26:7b:a3:0a:d4:
         4e:df:47:f2:29:47:85:e3:c2:61:2b:c6:40:6d:22:12:b2:d8:
         97:1c:f4:17:ee:73:e8:1d:ac:08:bc:d2:75:b6:74:7d:f6:e7:
         49:ee:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org