Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d49fac8c-96bc-316a-9d05-7d972e000724.roa
File:                     d49fac8c-96bc-316a-9d05-7d972e000724.roa (raw, json)
Hash identifier:          UxxOyPDanzUouRmk8b9nr//r3jqmhAJWJwc23p4o6ZY=
Subject key identifier:   AC:9A:9C:68:31:E2:0F:C3:DC:C3:4E:64:90:EE:AB:3E:A4:3C:55:94
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B109C6767B1F9EE4C148B40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d49fac8c-96bc-316a-9d05-7d972e000724.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     35911
IP address blocks:        206.47.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:9c:67:67:b1:f9:ee:4c:14:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=046ac4c0-c101-40c6-a550-b74e6ac6b01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:a8:7a:5c:90:1f:c0:fa:d9:35:d2:b0:02:
                    8c:e4:fb:8f:7c:7c:ca:2a:ed:92:11:17:d0:1b:22:
                    53:11:e2:75:f2:51:00:52:4a:f2:d1:ac:5d:23:2b:
                    d4:49:13:f5:5e:84:72:06:0e:a2:72:9e:0d:50:d7:
                    0c:26:50:a4:58:80:1c:44:b5:40:de:7d:f4:6c:90:
                    2e:4e:1f:36:86:af:f0:36:81:aa:b1:d4:82:60:83:
                    8a:39:03:46:fa:da:9f:13:b1:60:56:7a:0f:02:5a:
                    4b:7c:d5:0b:d2:b0:8f:75:5e:76:31:8c:e7:23:30:
                    3b:39:ec:11:c7:0f:74:c5:a6:a2:5a:91:19:96:7b:
                    fa:49:aa:f0:ac:a4:39:e1:72:8f:b5:d7:be:f9:0b:
                    0f:3e:02:9d:21:16:c5:6a:94:57:4e:50:1d:48:34:
                    f1:32:bc:b7:a9:60:f9:97:4b:b5:80:a5:e3:67:f0:
                    ea:68:81:a6:ca:06:86:c5:61:f3:7a:06:1b:cc:1b:
                    c2:66:0d:74:23:f2:12:a1:9f:90:e3:19:31:94:d8:
                    09:bc:9a:bd:c1:66:2d:05:29:85:57:ff:94:a8:b8:
                    b0:cd:fc:f7:e7:e5:d5:55:36:93:8b:22:6a:83:5b:
                    70:e1:b9:68:91:0c:e6:3c:a6:a0:53:3a:14:5c:25:
                    27:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9A:9C:68:31:E2:0F:C3:DC:C3:4E:64:90:EE:AB:3E:A4:3C:55:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d49fac8c-96bc-316a-9d05-7d972e000724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:d4:5f:75:be:04:90:ad:e9:86:e9:b2:48:22:17:5f:b5:
         0f:e0:cb:4f:fe:21:3e:7b:09:72:33:eb:52:23:ce:55:29:cc:
         46:07:75:a1:10:41:7b:7c:f6:a8:7c:9d:ee:7a:c9:7e:73:54:
         fa:26:30:01:a9:f2:bb:d8:c9:97:87:5f:69:30:11:42:e9:de:
         d1:3f:60:41:e0:13:f7:f3:6b:c3:08:82:c9:48:46:f9:ec:f3:
         9d:58:10:a4:30:6c:92:2a:3c:6b:4d:e8:da:f7:bf:5b:02:f7:
         63:a0:1b:4c:83:d4:c0:42:79:f3:d5:01:9e:f0:ae:ee:97:9a:
         20:c3:fa:8f:4a:ba:d6:46:64:35:7d:36:d5:09:4d:9e:56:6e:
         46:e5:b3:85:fc:b5:4f:75:a6:78:8b:a8:db:b6:30:b6:37:d7:
         d7:61:91:45:6d:74:ef:a3:92:43:6c:dd:4b:8d:5a:c8:ac:03:
         c6:23:ec:a7:9e:fc:44:bb:ea:36:80:b6:d9:ef:16:3d:10:7d:
         9e:4c:18:19:07:e2:38:a3:4d:92:ed:f1:96:79:05:9f:f4:f6:
         7d:ca:89:2f:c3:6c:9c:f4:5a:01:da:f1:e0:18:14:4c:f4:03:
         f5:7f:ae:bd:0d:46:ec:97:03:65:f5:f4:a9:36:ae:f0:66:4b:
         43:a2:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org