Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b17de045-01f4-3f68-972f-0195af29f998.roa
File:                     b17de045-01f4-3f68-972f-0195af29f998.roa (raw, json)
Hash identifier:          IBoJooWTqd6ydcs+mjnwGw6ypwVfO5GOAl1akkRKbSM=
Subject key identifier:   3F:F6:86:93:E7:77:7B:95:12:26:AA:E6:06:CD:0E:51:2C:FC:BF:97
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B483EBC3347EDB2F758900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b17de045-01f4-3f68-972f-0195af29f998.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     397168
IP address blocks:        206.47.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:83:eb:c3:34:7e:db:2f:75:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=10a7e36b-5407-49e3-ab50-ef285343d7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7d:72:20:83:2d:8e:fe:12:e1:99:63:29:0e:
                    f2:0d:86:09:3c:ea:ac:65:ce:39:4e:88:6f:c7:15:
                    76:03:03:50:4b:46:72:1e:ac:01:76:9e:64:82:54:
                    35:b5:3d:58:9e:b6:ee:5d:ff:87:3a:54:47:17:d2:
                    a8:bc:5e:df:04:e8:8b:24:41:52:8a:01:55:ef:02:
                    a5:09:bb:5a:8f:0e:2c:1f:9e:fc:99:64:63:b6:a3:
                    a3:2b:f1:29:28:38:be:8e:01:7b:62:f2:7c:1a:79:
                    ca:e1:4d:83:dd:6a:1d:fc:41:d4:c1:6b:f6:d7:d7:
                    87:ee:1d:5b:6f:02:6a:61:b8:86:47:f9:9c:29:22:
                    2a:fe:ad:47:43:d3:c6:48:d0:43:b7:b0:40:78:33:
                    39:43:ca:1d:f9:3d:35:92:ac:d4:93:2d:5b:9c:64:
                    95:34:b3:23:43:23:e5:a6:4f:fc:bd:81:db:ce:85:
                    0c:c4:5a:c9:c8:91:b8:da:ed:ea:a5:6f:53:1f:b4:
                    3d:fd:d0:f3:19:d2:7c:0a:19:4d:e5:a4:88:b9:04:
                    ba:58:7d:4e:ae:19:a3:f7:eb:24:02:cb:83:da:bd:
                    87:df:53:ee:bc:ea:65:36:52:8d:68:c7:b9:36:f0:
                    4b:a6:b5:d5:c3:d6:04:72:26:57:f3:6a:a3:c6:00:
                    d7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:86:93:E7:77:7B:95:12:26:AA:E6:06:CD:0E:51:2C:FC:BF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b17de045-01f4-3f68-972f-0195af29f998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:61:3d:d4:23:fb:02:23:c2:de:67:65:b7:a8:8b:9f:34:54:
         52:3f:dc:30:04:8a:e5:29:25:e2:e9:ec:3c:0f:99:c0:32:00:
         3c:23:2b:dc:c5:07:9b:97:0e:fb:d3:81:a7:0f:ac:e9:7a:01:
         92:ad:9f:5c:25:f1:bc:30:02:91:12:88:d8:e3:a8:52:52:cf:
         75:45:2d:4f:55:b6:cf:60:4f:0d:26:f0:0c:25:64:ab:e1:c0:
         37:bf:99:93:ed:39:dc:74:1a:4c:88:95:71:da:fa:7b:07:a3:
         ba:cf:9e:3d:c9:07:5c:ce:26:51:20:1b:af:8e:9a:b2:fb:8d:
         99:33:d6:8a:36:74:52:22:ec:04:4e:70:1d:df:b3:2a:94:87:
         14:93:ed:43:66:b9:b7:12:c8:93:1c:ec:7a:77:20:de:e4:f7:
         39:3f:a6:a7:38:d2:8d:b9:88:a5:61:99:62:0f:4b:5d:97:77:
         32:05:4a:b1:56:db:c8:e6:14:7d:69:a5:5f:74:45:a0:4a:c7:
         76:9e:32:08:44:d6:b3:03:77:3c:ab:2e:b3:85:66:70:86:3d:
         6c:89:0c:44:b5:aa:0a:74:3e:b0:3e:bc:8a:d6:54:77:d6:04:
         83:12:6c:a4:10:f0:4b:96:0e:78:0c:f3:00:6f:e1:e9:ab:6c:
         02:b4:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:56:08 2024 by rpki-client on console-fra.rpki-client.org