Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/95548e0c-0e4b-3fe7-b0b3-be22e43dfebe.roa
File:                     95548e0c-0e4b-3fe7-b0b3-be22e43dfebe.roa (raw, json)
Hash identifier:          n245z0hgAhXluVERYuEAtellXn//eK+wz5NYRGFf5qE=
Subject key identifier:   4F:F8:2D:0B:0B:E9:C1:2D:79:E5:76:89:E0:6A:DC:09:21:94:D7:0B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11A9094132884033F096F0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/95548e0c-0e4b-3fe7-b0b3-be22e43dfebe.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     40575
IP address blocks:        209.128.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:a9:09:41:32:88:40:33:f0:96:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=cd61baae-9e28-4c94-a9a4-487d09fa030d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:1b:d1:1b:18:e7:f9:96:c4:5a:ce:5b:4a:
                    b7:3e:f8:ca:13:a4:92:6a:85:36:0a:f8:1d:ed:32:
                    f5:ec:7c:36:77:99:81:2e:56:f0:7d:25:11:a7:fe:
                    54:0b:56:cd:c2:e2:45:79:a4:ee:70:bc:f2:da:47:
                    1d:16:cb:e4:6e:29:eb:6e:3d:d9:41:e7:38:37:8c:
                    a8:cc:bc:90:7f:0c:4a:d0:37:89:76:9d:09:04:d8:
                    9d:9f:b3:3d:4a:8d:7a:33:b0:60:a4:1d:9d:39:f6:
                    4a:21:4c:7c:b2:75:fd:d7:6e:2c:05:bb:b6:4a:0b:
                    42:13:ec:72:a1:26:06:80:c7:59:72:f2:c0:d4:8e:
                    73:36:2a:e2:4a:00:91:01:c3:4a:79:df:61:0b:97:
                    a8:35:98:91:81:3c:ee:11:5e:cf:c5:aa:04:24:c9:
                    46:44:ae:79:9f:5a:85:99:da:a4:6e:28:2a:21:9c:
                    1c:83:61:76:74:ce:9c:7d:25:b3:f6:05:7e:74:24:
                    bb:53:f6:e8:e0:3a:88:9e:e8:44:52:f2:7e:33:11:
                    4d:51:f2:70:9c:ad:30:a0:d3:18:5c:bd:21:88:fb:
                    16:07:ba:03:c7:e7:27:12:d7:b6:50:aa:fe:0b:3f:
                    52:a7:7c:79:5f:02:2e:cc:45:0b:ca:7d:9b:77:54:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F8:2D:0B:0B:E9:C1:2D:79:E5:76:89:E0:6A:DC:09:21:94:D7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/95548e0c-0e4b-3fe7-b0b3-be22e43dfebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:a5:ce:80:97:38:7d:26:c5:65:25:b5:8b:4e:29:5f:c5:
         3d:e1:94:56:a5:2e:f3:31:0a:ef:7c:72:17:db:08:b2:80:ae:
         d3:9b:06:e1:76:d9:eb:f0:3a:d6:38:eb:db:eb:42:c1:56:43:
         44:b9:98:00:9b:90:70:6b:b5:87:bb:7a:b0:f0:b8:4a:a2:55:
         e6:71:31:bb:fc:dd:4d:79:f3:e6:7f:60:81:20:22:3a:b7:08:
         57:92:63:ae:58:63:c7:05:97:71:26:ff:19:12:16:18:9d:8c:
         93:b2:db:ce:f0:3f:58:bf:4e:a9:d6:72:2c:dd:fe:b2:1b:43:
         1e:ea:a6:3f:bb:8a:9f:6a:27:80:da:8f:95:6b:8f:a6:89:f3:
         18:e5:a2:99:09:1b:1e:87:2b:55:19:06:09:ac:7f:c5:70:63:
         a5:ed:ea:75:2a:53:e4:3a:1c:80:fa:cd:7b:8d:2c:6a:cf:d5:
         c3:a2:0c:bf:55:ea:ba:b9:cd:20:6e:f8:da:f7:d5:65:f7:68:
         08:f7:09:fd:a8:42:2b:99:e7:d1:f6:e9:63:89:71:c2:41:1d:
         65:c8:b9:ac:2c:5e:10:64:e5:ef:47:f9:60:1a:e7:df:0d:02:
         3a:f7:bb:01:ff:65:45:88:e5:77:62:4e:e0:30:ac:5e:f5:82:
         09:31:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:10 2024 by rpki-client on console-fra.rpki-client.org