Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b55fb8d-5bcd-388a-8b8b-a9df6904ab7d.roa
File:                     8b55fb8d-5bcd-388a-8b8b-a9df6904ab7d.roa (raw, json)
Hash identifier:          F7Fb/LTXx8WhSq1Ss7hSlbWD6N/79J0kz84mAtEMcAk=
Subject key identifier:   36:A6:F3:BB:80:6D:FA:93:9E:12:8F:EB:41:F1:6D:EE:49:E6:26:FB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1034051CA8B3E4F1172980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b55fb8d-5bcd-388a-8b8b-a9df6904ab7d.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        204.101.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:34:05:1c:a8:b3:e4:f1:17:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=c7b66621-1dfa-42b9-badd-83650bd545ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:cf:9d:71:24:a3:b1:17:32:8f:4e:25:1a:
                    22:c8:39:f2:79:97:ed:a2:5d:81:b0:00:cb:fd:16:
                    b5:db:9c:f4:17:4d:a4:64:78:5b:5c:61:2d:0e:75:
                    f7:89:fa:af:59:d3:4a:28:fd:98:b5:f9:6f:c5:c3:
                    0c:80:25:f3:aa:d5:00:12:2f:38:6e:bd:8b:d8:99:
                    80:82:b3:e6:99:0c:70:6b:d8:93:d7:c5:5f:0a:3a:
                    5f:be:12:a3:50:3e:d9:a1:3f:6b:27:95:35:e2:42:
                    38:e0:49:ac:74:3a:e6:34:17:f6:ee:73:99:07:cc:
                    3b:b6:b7:fc:15:75:1a:66:de:54:7a:92:91:12:e5:
                    08:a5:3b:ab:e0:f8:7c:8c:c7:2e:d2:8a:ae:7e:fa:
                    38:23:a3:39:13:bb:a6:fe:52:ee:81:ab:b4:e0:9d:
                    e3:04:f4:d8:99:9c:68:85:c9:6b:65:41:12:96:97:
                    96:5e:ec:30:eb:20:a6:8b:b0:91:53:44:db:df:d3:
                    e5:cf:c7:03:ad:39:cd:3b:8c:2d:ce:ae:ed:ad:78:
                    c6:dd:b1:0f:6c:f5:c3:7f:b9:98:7d:42:a7:87:60:
                    7c:bd:18:c9:50:97:a2:62:88:98:57:b6:c2:13:d1:
                    5d:1e:07:ce:4e:08:12:17:a5:24:f9:c1:8c:b4:a1:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A6:F3:BB:80:6D:FA:93:9E:12:8F:EB:41:F1:6D:EE:49:E6:26:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b55fb8d-5bcd-388a-8b8b-a9df6904ab7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:61:57:46:82:2c:50:2a:77:31:7a:fd:3d:13:58:aa:dc:d5:
         74:55:0a:6f:02:b8:3c:a2:db:5a:0c:54:88:f6:8e:d2:3b:34:
         6a:ef:08:df:ec:b9:e8:1c:ba:be:23:8f:d9:33:2a:05:13:16:
         ca:60:8c:21:16:ae:8f:4d:53:e0:eb:d8:05:03:0c:3f:b4:17:
         b5:e6:60:10:f1:83:ac:81:94:34:27:ba:cc:bb:ac:b0:f6:fa:
         b2:58:d4:0f:12:8a:ea:f9:6a:eb:ed:20:0f:8a:e9:b2:7a:6b:
         cd:f8:9f:20:a6:40:00:12:e4:43:4b:51:36:9a:60:55:8d:52:
         70:02:85:de:9a:ab:21:61:61:31:c0:72:b0:a2:f8:15:7e:91:
         8a:df:28:ab:ec:27:da:44:1f:ae:99:25:f8:1c:b7:cf:61:c9:
         73:45:3c:ee:3f:31:e5:4b:5e:bc:ee:6d:9a:2e:d8:05:0f:6d:
         a3:6a:a1:20:f8:27:0e:71:20:b5:83:63:73:7d:42:cb:53:15:
         dc:5e:dd:a3:d5:06:e9:ff:90:da:a1:09:fd:83:1b:2f:5c:c3:
         c9:4d:06:fe:92:80:9a:d1:2c:fd:8b:12:26:dc:ca:d7:45:10:
         c9:b3:a7:c1:96:d3:0a:4f:7f:7b:da:58:1a:86:33:e7:34:66:
         64:50:75:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:59 2024 by rpki-client on console-ams.rpki-client.org