Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c97fe48e-6ece-33f0-8531-c82613535a42.roa
File:                     c97fe48e-6ece-33f0-8531-c82613535a42.roa (raw, json)
Hash identifier:          Q6GY43hseJ3o7WNbcTbbLfo51cLvf2lTxR9EgU2yUR4=
Subject key identifier:   F4:B8:24:07:C9:2B:AE:E0:FB:2E:FE:DB:6A:41:80:BC:38:49:8F:E9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F36B7839B81260E82DB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c97fe48e-6ece-33f0-8531-c82613535a42.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        156.57.0.0/16 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:36:b7:83:9b:81:26:0e:82:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=e14a2bce-f764-488b-ab03-9e32e44c6536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:5b:5b:28:41:0f:a7:3a:8b:49:d7:64:5d:
                    9a:c6:e4:ba:83:7b:4b:e8:f3:e8:79:79:0b:7a:91:
                    04:b2:d1:73:f9:e2:2d:9b:df:71:16:f5:c6:6b:11:
                    a3:8b:a5:3d:2e:ac:43:5f:e1:25:06:66:e4:e1:f5:
                    0f:46:16:0b:0f:50:7a:73:80:f3:8a:5f:9b:5d:5a:
                    43:8b:61:0a:1d:13:fe:ff:43:23:bb:58:95:ac:a3:
                    41:8d:ce:9b:48:98:f5:3e:ea:c0:a0:eb:65:39:d8:
                    a2:5b:c1:f0:cc:87:73:36:89:15:06:c4:2e:7e:47:
                    e4:65:48:f6:75:c2:6d:35:a0:36:dc:49:ed:01:e1:
                    0c:07:6f:04:ba:1b:2c:04:b1:b4:24:ce:42:b8:98:
                    db:5f:dc:ae:81:17:64:4c:00:e2:d5:e4:bd:59:d8:
                    fc:a0:8d:30:83:df:bc:e3:37:40:60:93:95:7c:54:
                    9b:22:64:7f:7b:14:ea:dd:4b:6f:2d:71:4b:fa:8c:
                    0f:c1:95:f3:d4:26:14:d4:e3:72:af:76:07:ee:41:
                    1d:1c:62:21:a7:e7:d2:e9:48:42:ac:d1:41:ac:77:
                    c0:5b:f7:3f:87:63:e7:92:f9:c0:1f:5c:f3:ac:92:
                    63:3e:f8:3f:8c:e4:3d:fe:e1:fb:b7:34:a3:79:a1:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:24:07:C9:2B:AE:E0:FB:2E:FE:DB:6A:41:80:BC:38:49:8F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c97fe48e-6ece-33f0-8531-c82613535a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:29:71:0b:65:e3:b3:e9:8e:f5:f4:63:f8:c9:30:47:1b:
         37:d3:31:b6:22:0e:44:72:8b:ea:50:31:31:20:fc:d7:19:df:
         a4:04:c9:0a:85:f2:af:c1:91:f6:c5:22:ea:52:d3:6b:1d:29:
         7f:fe:4e:6b:04:b8:07:3e:01:2e:e3:93:73:e1:4e:42:ef:c9:
         ac:39:9c:9f:8b:1a:b8:52:66:34:d6:c8:80:a0:8f:6d:3c:a3:
         18:dd:90:b4:05:b2:67:d3:71:53:09:14:48:6d:a0:da:65:c9:
         4b:31:c1:6e:77:47:59:47:78:bd:10:ff:e3:e2:07:ec:ea:2e:
         cc:e3:13:64:68:3e:e0:5f:49:c5:6a:fb:97:3f:03:13:63:b5:
         fa:3e:e3:ca:64:74:e2:2f:ca:98:25:74:f8:d9:7f:08:7f:2b:
         2b:64:90:a1:9f:99:0a:e1:eb:59:5f:e3:4b:97:b5:d6:bc:a4:
         b4:4e:d9:a3:e4:c2:46:37:d3:f7:68:f3:b8:7f:81:68:18:a6:
         4f:e4:04:0f:de:6a:31:8c:2e:e4:eb:03:60:bf:e7:0d:b2:09:
         c0:f1:25:09:2e:68:95:11:fb:49:21:46:19:79:54:1f:1c:76:
         b6:b8:71:2a:ed:81:83:ae:44:32:b8:8b:7e:15:d2:c2:28:03:
         d2:78:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org