Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b669f745-62bc-3184-8111-9c80ac1c5eaf.roa
File:                     b669f745-62bc-3184-8111-9c80ac1c5eaf.roa (raw, json)
Hash identifier:          mQE7Sts8h5UUV6R9zlap4GYdpGPfht0cIXKQI9KY6U4=
Subject key identifier:   22:1F:F7:CE:95:57:86:F2:6D:91:73:5C:22:22:51:F8:46:51:2C:C1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10C35340A49085C412F000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b669f745-62bc-3184-8111-9c80ac1c5eaf.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     19842
IP address blocks:        207.35.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:c3:53:40:a4:90:85:c4:12:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=93523480-5759-4ea1-a9cf-474f2c6770c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:b3:c1:79:92:21:0c:09:40:d8:e1:b3:7d:
                    df:79:2c:39:f8:f1:40:60:27:f2:80:7f:21:72:b0:
                    d0:3f:3c:f3:85:8d:bc:0c:37:a6:3d:51:df:da:06:
                    f6:60:09:6f:ae:f5:68:c8:97:a1:d1:bc:1f:07:f3:
                    1d:a2:0d:1d:29:65:95:58:2b:01:a8:6d:85:21:bf:
                    e6:83:d3:d6:50:94:d1:c1:60:6f:44:c6:01:2b:0e:
                    14:b0:ae:0b:bf:46:72:9b:6e:bd:0e:2f:35:18:a7:
                    c3:31:31:58:5f:7a:14:fd:f3:1a:02:e4:6b:76:31:
                    82:27:c6:19:e2:82:d8:70:9e:9b:3d:56:22:1a:e5:
                    d9:fc:95:84:75:dc:02:3c:e0:b0:a9:a5:9a:3c:11:
                    3a:60:2b:6a:f9:be:2a:06:73:76:bd:60:4b:47:18:
                    0f:2b:59:7a:a0:69:f7:4e:1e:0d:c7:24:b6:ed:ba:
                    ae:29:e6:ca:41:eb:aa:7d:9e:76:70:3d:c3:7a:59:
                    c8:87:c7:50:d3:e7:3e:0b:b8:c3:9a:b5:34:64:cb:
                    2a:63:dc:8f:6a:92:8c:5e:ce:4e:6c:d4:1e:05:b8:
                    65:39:a4:18:d6:f4:21:46:85:d5:85:32:23:17:44:
                    b7:1d:74:43:ee:e3:0b:1f:fa:9a:40:a2:54:1d:f4:
                    6d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1F:F7:CE:95:57:86:F2:6D:91:73:5C:22:22:51:F8:46:51:2C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b669f745-62bc-3184-8111-9c80ac1c5eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:16:c7:6a:31:81:83:2d:73:38:aa:3c:5b:7e:9f:b9:c9:f7:
         0a:3f:ca:c3:a7:c1:51:b5:49:72:28:03:18:6e:3b:21:e7:71:
         88:8e:11:4f:4d:70:83:8d:af:29:a8:54:0a:79:90:6b:29:35:
         a4:ed:db:7d:94:34:3c:25:bf:81:ea:8c:5b:70:3e:03:27:9d:
         78:6a:79:76:b0:3a:66:27:a9:95:cb:ad:8c:16:70:a4:5b:12:
         96:d1:d7:f9:32:a1:93:47:5b:6b:fc:e2:c7:a1:3a:ca:07:b4:
         ff:5e:18:b3:00:17:63:39:6c:da:6a:3a:72:52:2a:c2:91:98:
         6d:80:7e:10:80:c0:02:f7:f6:fa:0d:a9:a0:01:06:f7:79:da:
         39:34:40:30:b3:2d:68:0b:34:11:98:64:3a:3f:41:08:e3:b9:
         89:0a:ac:41:67:b9:58:39:36:91:f9:30:8b:d6:c3:7c:c4:08:
         36:1d:43:27:8b:97:94:e2:d8:d5:f0:33:fd:60:8c:77:71:4e:
         8e:f4:da:b7:2e:0e:43:90:8d:c6:b9:9e:e8:d3:fe:26:d1:5a:
         a4:e8:65:00:f9:2a:3c:80:42:5d:7e:6a:9d:60:31:54:91:e7:
         e4:d5:3d:17:bb:f9:e2:d3:6e:c0:5c:26:cc:88:52:21:10:26:
         d3:fb:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:10 2024 by rpki-client on console-fra.rpki-client.org