Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cebfd6a-b904-3f38-887d-2362f3caa8fa.roa
File:                     9cebfd6a-b904-3f38-887d-2362f3caa8fa.roa (raw, json)
Hash identifier:          Kp+V0fYnQx8IMQLQBTvtwUF7Js+/Sb8bM5CvrwH9lUI=
Subject key identifier:   8A:6B:BE:6D:4C:AD:A1:C3:B1:A3:50:1A:57:C6:D2:C9:BD:DA:7C:26
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B50BD70AF121EA54763240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cebfd6a-b904-3f38-887d-2362f3caa8fa.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.164.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:0b:d7:0a:f1:21:ea:54:76:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=519971a1-3ec0-4b60-a7d1-1f3b5fc714bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:e9:d4:3c:bf:88:8a:2e:4a:85:b9:09:dd:
                    7e:bd:2d:90:98:0a:e9:b0:6d:b7:eb:36:43:11:02:
                    dd:fd:59:cd:5e:f9:c0:52:c7:69:43:20:f5:76:75:
                    d0:87:b8:22:9b:2d:91:eb:20:a8:11:d3:12:d9:b6:
                    9f:8f:57:9a:70:06:b5:b8:28:f7:b1:7c:1d:20:40:
                    38:e7:3a:9f:82:87:06:07:d6:f1:d4:eb:ac:8e:dc:
                    32:f1:34:2f:82:9f:69:0c:91:72:e7:5d:65:c7:c3:
                    2e:2b:1d:c7:e8:34:bf:27:b5:07:65:56:3a:a6:2b:
                    f6:ec:f3:2d:13:b1:53:c9:59:12:24:28:ca:26:b0:
                    73:c6:bb:b7:e2:f8:d6:7c:ff:c6:d6:87:8f:6e:d4:
                    21:8d:f6:7b:ec:4a:bf:25:c2:9a:44:d2:36:25:0d:
                    2a:d9:d4:d1:80:9d:ca:04:78:88:07:02:14:32:14:
                    fd:6e:d1:2a:70:aa:9f:84:40:fa:cb:c6:d6:b0:74:
                    67:70:eb:05:a8:53:24:14:85:01:70:2f:b6:f3:ea:
                    31:d4:60:75:50:83:2d:90:33:9e:b3:2d:b8:8a:b0:
                    9c:37:1e:fa:87:69:04:80:ca:83:58:1e:b8:1d:df:
                    51:89:eb:65:85:cc:85:dc:e3:98:9c:77:ca:5a:95:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:BE:6D:4C:AD:A1:C3:B1:A3:50:1A:57:C6:D2:C9:BD:DA:7C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9cebfd6a-b904-3f38-887d-2362f3caa8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:33:96:c5:95:ca:ee:3d:d9:60:25:e4:a9:cb:c7:a5:96:
         48:6c:7a:13:7c:dc:08:ad:7d:ee:23:5e:97:4c:c5:92:c6:7f:
         a3:7e:bb:cd:51:4e:ef:fe:39:ac:80:51:3d:f2:52:9c:fb:71:
         fd:7e:c5:0f:8a:54:c4:65:a1:d8:54:16:b5:d4:4f:d4:04:8f:
         ea:0a:e2:62:fb:28:2d:06:8e:74:5f:2c:1d:55:61:99:01:be:
         d9:8a:01:5f:b5:78:8e:a0:9c:be:84:fb:07:8b:3a:68:4b:a9:
         d0:1a:3e:21:58:8a:63:af:e8:3c:cb:9d:7a:2e:74:e4:be:df:
         04:26:b5:18:45:5d:ee:e1:d5:3a:96:99:71:d2:b8:ae:a9:67:
         bb:d3:08:b8:a8:29:b0:51:5b:62:7b:2d:1b:7f:fa:01:23:6c:
         57:6b:c5:92:8d:90:88:2a:a9:1b:1d:7f:bf:31:4f:43:1c:1d:
         a8:63:95:32:2f:f9:e6:b4:4c:96:78:39:7f:9e:43:d4:0a:c2:
         76:57:09:d8:d1:e5:af:cd:76:9d:73:1a:91:a7:25:bd:9a:11:
         ad:5e:8f:68:de:95:a9:61:95:5e:6b:51:99:47:e8:c6:2e:cb:
         bd:6e:8d:f5:e6:e0:36:62:d0:37:f5:43:b8:96:a6:a1:b4:fb:
         67:c5:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:34 2024 by rpki-client on console-ams.rpki-client.org