Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d6460ac-6e1a-3137-bb38-ec23a6d30204.roa
File:                     8d6460ac-6e1a-3137-bb38-ec23a6d30204.roa (raw, json)
Hash identifier:          ub+jL2fUE/dDLxr64tAdivTReYCJ+eYWHRTbwAVAB70=
Subject key identifier:   08:C9:F4:47:C6:10:C7:4E:82:BB:A1:0C:84:0E:36:56:E5:4C:65:6F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA14BA0DFA2B5A134D3C6F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d6460ac-6e1a-3137-bb38-ec23a6d30204.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:ba:0d:fa:2b:5a:13:4d:3c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=bad4ca7f-116f-49d3-814d-0c0c0d77a855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:ba:e5:5d:c8:57:66:a8:6f:c9:2e:30:44:
                    70:5a:19:1d:1c:74:53:67:af:83:6b:81:e1:9c:00:
                    e0:35:5c:55:76:09:b4:d0:70:13:89:f6:89:bf:51:
                    cc:55:5a:85:85:c6:cd:bd:59:d6:cb:6b:ab:87:41:
                    0a:ed:3d:d6:e2:07:7b:c6:65:0b:8d:0c:bc:98:7c:
                    1d:0b:e5:70:f8:20:0d:1c:e7:f1:27:c1:4b:b3:15:
                    70:c9:9d:1a:7f:f8:d6:aa:0a:73:08:20:27:45:66:
                    9d:0b:8f:bf:53:96:bc:d9:18:a2:16:6a:67:c3:15:
                    fb:6d:6a:6a:82:48:4f:3c:7b:b7:2b:2b:ca:69:bf:
                    cb:07:d7:f5:1e:ad:bc:85:77:3e:1c:fa:1f:23:5a:
                    57:fe:18:ca:ac:99:a2:0f:6d:8c:28:7d:f4:90:86:
                    91:0a:ca:f5:20:80:82:85:bc:31:48:72:0b:e4:87:
                    bf:a2:43:de:84:ba:47:54:b5:f2:ef:b1:37:dd:95:
                    18:af:b1:77:44:30:21:c1:1c:a1:c9:3b:8d:e1:cd:
                    df:aa:2b:93:ce:a6:aa:f1:87:71:c9:ba:2a:5f:5a:
                    96:00:93:c1:c7:49:33:1f:ef:3f:b8:57:6d:db:63:
                    dc:8e:a3:56:18:01:85:21:5d:fb:05:80:57:dc:ef:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C9:F4:47:C6:10:C7:4E:82:BB:A1:0C:84:0E:36:56:E5:4C:65:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8d6460ac-6e1a-3137-bb38-ec23a6d30204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:b8:f5:de:57:55:17:04:d6:f4:f9:13:39:03:ec:ed:e7:
         41:78:ab:56:99:07:30:b8:07:e5:87:2f:48:f2:5f:05:f8:1b:
         05:92:40:d9:64:fc:f4:f8:1e:86:04:fe:1c:97:c0:04:a3:a6:
         70:4d:32:97:07:a4:af:74:7f:7f:c6:55:33:ae:db:6e:38:79:
         6d:3e:21:4c:a0:39:10:7a:bd:66:69:2b:cf:d5:9c:36:f8:ab:
         83:25:de:c3:c3:a2:42:41:71:eb:f7:2a:db:81:ce:4e:88:56:
         68:65:0e:44:c2:f7:f4:22:1c:4c:de:db:e9:47:65:0f:92:fa:
         54:88:88:09:57:c3:ff:dc:f8:8a:a6:aa:3d:62:d7:26:0d:7f:
         25:58:88:5d:43:9b:69:f9:a1:fa:ea:a7:d8:4a:b4:03:b1:81:
         2a:9b:48:72:1f:70:dc:2d:d8:02:2a:d9:c9:54:81:09:a7:02:
         52:0a:ee:d4:52:a6:a5:16:a9:0d:ae:47:a1:4a:20:73:d5:c3:
         62:09:60:21:17:55:4b:54:58:f6:42:76:84:f5:bf:c5:2b:3f:
         aa:3b:da:08:c0:f2:2e:42:ad:8c:78:b7:23:29:e9:4b:0a:cc:
         f1:81:c3:62:0d:15:8b:6c:f6:86:ed:6f:80:03:45:e7:7a:ec:
         15:d8:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org