Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/acfd39c3-8ee7-345c-9000-5c64c4b09c8f.roa
File:                     acfd39c3-8ee7-345c-9000-5c64c4b09c8f.roa (raw, json)
Hash identifier:          tYM8Dbkk0oh8VKOMx0ZKlCz4v4COlPNIL57atXjaPoY=
Subject key identifier:   6A:A0:83:A9:87:C0:31:5D:A5:45:C8:C9:A5:49:8E:D4:DE:C7:0F:72
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1243B70B146F91D5ACC000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/acfd39c3-8ee7-345c-9000-5c64c4b09c8f.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        216.209.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:43:b7:0b:14:6f:91:d5:ac:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=9b005ed8-c4f5-44c4-a88b-3cad341d9417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:fe:25:92:90:05:58:10:8f:34:b0:01:c4:
                    fc:79:b5:6c:40:46:bc:38:9b:49:35:65:04:72:f5:
                    88:de:15:fd:38:3f:57:d3:0d:30:50:cd:5e:00:3b:
                    dd:05:13:00:10:45:0d:cf:9a:d8:9a:dd:9f:4c:94:
                    5d:a6:52:d0:ae:d0:d2:d7:72:c8:3a:21:bf:66:5e:
                    80:d4:da:e3:9c:d4:17:e2:8f:44:93:a0:2f:59:f9:
                    eb:02:bd:2f:a5:e6:0a:7f:7e:45:fe:3c:3a:1a:5c:
                    f7:9a:4a:de:ea:2a:68:1e:7f:6e:f6:68:75:07:27:
                    6a:30:7b:3b:aa:fd:b6:8b:ab:e9:e8:20:0b:39:4e:
                    b8:13:37:e7:fb:12:d7:5b:5f:b4:f2:65:3f:c9:3c:
                    4a:d0:16:34:a7:be:6a:fe:1d:34:db:8f:37:59:bf:
                    4a:c4:9d:75:15:e6:ca:bc:49:ce:a6:25:93:7b:f7:
                    68:c9:97:36:62:c2:3e:56:97:80:fc:5e:19:9e:d5:
                    29:b6:94:5b:60:92:45:fa:06:af:37:7d:11:3e:28:
                    8e:03:92:fd:cb:51:95:c1:82:51:9d:77:cc:a2:80:
                    ff:3f:00:a2:c3:2a:88:44:98:85:ae:6c:c0:d6:50:
                    2c:f2:32:3f:c8:3c:40:c4:ae:b0:ca:19:c5:56:49:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A0:83:A9:87:C0:31:5D:A5:45:C8:C9:A5:49:8E:D4:DE:C7:0F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/acfd39c3-8ee7-345c-9000-5c64c4b09c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:69:45:0e:ea:48:f0:0e:4a:17:4b:d4:05:c0:01:45:6c:c1:
         64:a9:81:04:81:d8:35:7f:4a:1c:43:bd:f4:c3:28:59:31:d7:
         0f:1b:be:90:98:49:45:12:26:fe:76:fe:e1:ae:c5:ef:69:9a:
         b9:30:e5:a9:15:ef:95:1b:9f:0a:db:ff:45:37:e3:2d:b5:f2:
         19:8e:94:cd:d2:23:de:9f:fd:fe:02:3b:e1:53:c1:23:5a:58:
         8e:dd:01:8d:fe:76:5d:2a:82:9d:1d:e3:90:1f:76:ad:b5:39:
         a4:69:85:1b:80:f7:f6:6b:8d:f6:f5:ed:ff:39:f4:ec:3b:87:
         f7:59:5c:a1:33:64:ec:c8:06:4f:8f:52:33:b2:9f:9a:c3:d6:
         59:a8:1f:a5:c8:c2:c7:60:25:78:8c:81:2f:21:78:37:50:f7:
         d3:01:dd:bd:02:4f:30:0b:c8:a7:31:92:47:ce:c9:b4:0f:f3:
         fe:54:c2:4e:06:28:0d:9f:a0:9f:9f:f7:e4:29:4d:f1:5f:1d:
         ce:1c:63:52:6f:1a:fe:0e:64:fa:ef:f5:be:0a:47:64:60:7a:
         d5:21:c5:29:66:1e:6e:e9:a7:39:3e:c8:c4:a0:57:ba:7d:f2:
         cb:0b:7f:bc:94:c4:4a:20:47:9a:05:13:2c:be:ef:5d:93:92:
         7a:ad:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org