Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c4404b2-4d78-3f73-933a-8b7b8e98bade.roa
File:                     8c4404b2-4d78-3f73-933a-8b7b8e98bade.roa (raw, json)
Hash identifier:          uXF+/R2Su2OQYEvG2juv8VG3R/AFZh+DixyC+YH+4Mc=
Subject key identifier:   7B:64:A7:4D:F3:85:DF:43:EB:DD:90:5F:50:E4:FD:B8:90:29:7B:EA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12F16DFB499ACEE5389540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c4404b2-4d78-3f73-933a-8b7b8e98bade.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     3848
IP address blocks:        209.226.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:f1:6d:fb:49:9a:ce:e5:38:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=048366df-1759-44fd-a295-466330b68dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:db:e5:97:60:6b:2a:97:22:52:2e:7c:ce:
                    6f:a5:b6:62:28:f8:65:7d:56:fb:fa:fa:02:7b:11:
                    df:62:46:d1:8d:fc:fd:bf:62:81:24:10:64:14:9a:
                    ea:5c:77:9d:91:1b:c6:1b:52:25:e7:4e:0a:55:b5:
                    ab:bb:1d:5e:9c:91:33:fe:fc:84:62:8b:36:0c:ea:
                    f8:48:5b:eb:19:4d:97:d8:18:f6:29:16:05:9c:99:
                    28:ff:d8:15:d2:f0:b7:fa:10:68:be:51:26:09:43:
                    27:e7:26:22:59:7d:70:40:3c:cb:6b:5d:03:75:d1:
                    3d:8b:f8:13:e5:92:21:10:dd:75:7c:c6:4c:e0:8c:
                    50:20:b3:ca:33:59:62:f8:3f:09:58:05:21:21:e0:
                    e7:95:e3:d5:e6:69:e6:0e:49:4c:c2:66:f0:7e:46:
                    70:14:f2:6b:74:25:07:b4:3c:65:f2:da:a2:48:8a:
                    b9:fc:fd:e7:63:f3:8d:37:1a:9e:c4:f4:40:03:60:
                    ce:5c:57:03:57:4a:fd:00:ce:f0:a8:a4:75:75:cc:
                    e4:30:24:2c:07:53:0e:82:66:10:ef:b6:ed:51:23:
                    43:d4:1b:3b:2d:a6:0d:1b:7a:9b:0a:04:71:22:4a:
                    24:5c:79:73:54:57:b3:ba:e5:28:7d:83:58:5b:f5:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:64:A7:4D:F3:85:DF:43:EB:DD:90:5F:50:E4:FD:B8:90:29:7B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c4404b2-4d78-3f73-933a-8b7b8e98bade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:11:28:dd:5c:8f:4d:b7:4e:8f:bd:d2:fe:db:0e:72:ba:
         63:aa:d1:6e:cd:1d:dd:53:03:a7:d0:08:cc:41:52:db:b5:db:
         23:64:ad:7c:38:78:07:a4:fc:45:ad:e4:35:d4:49:a1:08:5d:
         eb:a7:8a:bc:90:1e:3b:ae:08:a0:86:97:c4:f6:cc:ff:a2:a4:
         93:62:4c:43:d6:9f:9f:18:0a:3b:e0:cb:76:b7:65:4e:db:fe:
         f7:27:1e:7e:38:ff:e7:25:89:29:cb:8a:97:96:40:17:9a:ea:
         50:be:65:69:e0:22:c6:71:8d:a0:4c:72:2f:bf:f0:2a:dd:a1:
         52:18:23:49:19:0d:bc:17:64:01:dc:2e:f2:6c:7b:1e:7c:48:
         4c:87:0e:ed:4d:c1:bd:96:ea:00:c0:e4:cc:49:63:8e:1a:57:
         21:bd:0e:ab:33:3a:1a:1f:52:f6:7f:8c:2b:e1:3f:8a:f2:82:
         05:9d:ec:c4:f2:fe:ac:83:e3:be:b1:8a:64:73:ee:26:52:f5:
         a2:48:c3:90:d1:19:3c:46:5a:99:ab:25:f2:a3:88:56:cd:9d:
         03:e4:75:16:22:7e:33:7d:46:dc:e6:7a:49:61:b4:29:fd:de:
         2c:11:83:37:eb:dc:cf:cb:b6:64:3e:11:c4:3e:09:c3:36:73:
         08:8e:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org