Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba40e9c2-bd56-30b9-a43e-7841267673d2.roa
File:                     ba40e9c2-bd56-30b9-a43e-7841267673d2.roa (raw, json)
Hash identifier:          lBQHRsPQGNTimBSM72T7ly6l5sEhSLQYm0DKzY2YTKE=
Subject key identifier:   12:35:C7:DB:4E:C4:36:F4:16:29:1B:D3:50:28:3C:91:F8:A8:1C:96
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10EDA9FF01756E712663C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba40e9c2-bd56-30b9-a43e-7841267673d2.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     19842
IP address blocks:        207.61.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:ed:a9:ff:01:75:6e:71:26:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=8221ac2d-54da-4eac-995b-13d5ddf61083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:fa:9e:80:d7:4c:76:30:75:78:bc:f1:bd:
                    eb:79:b1:c4:da:85:29:e0:8a:c3:88:32:3f:8f:73:
                    30:3a:12:ee:fb:1f:c7:71:aa:82:18:d4:35:c3:1f:
                    3d:91:c2:40:ce:42:e7:2e:18:98:50:81:02:46:0e:
                    c5:f5:01:ac:ee:49:ef:47:36:64:bf:04:bf:9a:b4:
                    41:7e:d8:fb:77:88:bd:78:4d:4a:22:fb:dd:3e:2e:
                    18:45:50:21:e8:68:d6:87:f4:48:1e:58:41:d4:7f:
                    09:18:57:f5:05:4c:f5:8e:bd:16:3d:47:c8:d1:2a:
                    07:c4:39:f9:a5:d4:ae:f2:0a:43:44:fc:cf:cd:82:
                    26:dc:84:d9:ff:6e:18:bc:6b:cd:9f:ff:49:c3:be:
                    a0:67:4a:6f:8f:5c:9a:60:01:73:7f:a1:8e:a0:76:
                    93:84:5e:31:1f:aa:f1:fb:c3:82:16:27:1c:72:70:
                    cb:85:a8:5b:b1:a1:6a:e4:a4:81:e5:c8:7c:5f:33:
                    f4:90:7a:f7:10:eb:91:b8:50:93:25:cd:ed:23:62:
                    53:5f:17:75:54:cd:09:9e:8c:09:18:ed:c0:dd:dd:
                    79:ec:a2:ac:e0:9d:55:8d:3a:9e:0e:54:63:9a:1f:
                    ec:e8:dc:d7:80:de:ff:21:7c:ab:b9:16:9c:66:bb:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:35:C7:DB:4E:C4:36:F4:16:29:1B:D3:50:28:3C:91:F8:A8:1C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba40e9c2-bd56-30b9-a43e-7841267673d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cc:dd:6a:ec:3f:93:eb:a6:12:36:15:9e:a7:8c:36:a2:bd:
         b3:45:73:ac:36:97:ef:91:95:9b:1b:13:92:5d:96:27:c1:df:
         92:09:1b:2f:fc:29:80:ca:cf:f9:c9:0d:a1:49:17:6d:b8:e0:
         fe:21:fe:26:0e:22:96:ee:b6:86:68:c5:ec:fb:26:96:7e:83:
         4e:8b:61:ea:4e:30:8d:3e:24:9d:f9:ea:76:a8:d5:29:5e:96:
         eb:fe:3d:82:cf:22:b9:a2:fe:39:0e:98:6b:2f:03:51:9b:31:
         04:8b:48:8e:9c:1a:3f:d8:ce:06:6c:ad:fd:37:b9:c8:d4:e3:
         54:ad:dd:aa:c9:f5:ed:49:02:82:cd:57:80:c0:b3:11:77:af:
         14:dc:0c:6d:6d:92:20:0c:83:1c:c7:42:7e:0c:1e:51:31:f5:
         ee:f8:7a:fe:48:e4:2b:38:5f:f9:75:05:2f:0b:e3:a0:aa:1d:
         a1:f5:85:5a:54:63:ce:9b:0e:c4:c7:35:e6:a6:85:93:79:8d:
         db:0b:a9:50:a3:3f:a9:04:1f:d4:83:c5:db:6c:1a:7c:b6:67:
         f8:ca:33:d5:e1:9c:ef:d5:5c:09:77:1b:b1:80:47:0e:29:70:
         b7:ef:f3:b1:2d:f7:22:67:42:9e:58:2b:84:ff:fb:c2:30:95:
         9e:e6:49:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org