Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d521490b-06de-3d37-bbc1-d71c9e75ff0e.roa
File:                     d521490b-06de-3d37-bbc1-d71c9e75ff0e.roa (raw, json)
Hash identifier:          SjNSMEgtKEkcS4BqB1WLeAMnCrP0GJoL0utCsrlCNLM=
Subject key identifier:   87:3D:BB:6A:38:C2:83:75:79:75:6B:EB:91:48:B2:9E:00:64:FD:64
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B109998995683070FEDF000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d521490b-06de-3d37-bbc1-d71c9e75ff0e.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     25946
IP address blocks:        206.47.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:99:98:99:56:83:07:0f:ed:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=8f809286-8fa5-4b41-82a0-c10ed2c2608c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:f1:42:cd:21:48:76:00:c4:5b:10:94:99:
                    5b:bd:4e:fc:0f:d0:9e:66:d3:f9:b3:f2:7d:58:06:
                    32:d5:1f:56:ec:7d:4e:42:b5:be:6e:8b:88:dd:12:
                    3d:d9:65:ee:0a:0c:2d:22:12:69:ce:25:9b:4a:b4:
                    39:9b:6c:ec:4f:dd:73:68:68:8f:da:f9:a8:cf:c4:
                    26:ba:fb:62:d6:04:ce:ff:ad:5f:ab:b6:5f:6f:94:
                    60:d6:25:29:8c:22:54:e1:6a:88:31:b2:34:7c:70:
                    3f:20:56:40:18:80:e2:98:4a:29:6f:f5:5f:0c:21:
                    b8:99:b2:29:2d:3e:3e:a1:ba:ac:79:b3:51:64:df:
                    31:08:cc:20:a6:a0:62:86:81:7e:d0:ba:6b:1c:ee:
                    fc:88:22:b3:9e:63:6e:88:cd:b9:43:1c:ac:e0:a9:
                    53:4f:54:42:d6:d5:a3:03:49:7a:f3:13:d3:46:7b:
                    99:55:f8:06:d4:7a:a7:bf:df:28:5a:d4:a9:91:82:
                    05:60:e1:96:f8:f3:e5:3f:67:94:3c:3e:0e:df:c0:
                    fa:d1:e1:3f:d4:f2:e2:a1:3c:d1:03:69:a0:b1:98:
                    93:93:ab:92:f4:ce:93:e9:e5:ce:64:72:a7:64:e8:
                    b5:a7:81:7c:67:5f:20:f9:1b:62:b3:68:56:0c:8c:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3D:BB:6A:38:C2:83:75:79:75:6B:EB:91:48:B2:9E:00:64:FD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d521490b-06de-3d37-bbc1-d71c9e75ff0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:78:96:2c:98:19:b8:fd:ac:b5:de:e2:7e:d8:82:94:c1:15:
         3c:28:a6:f3:41:84:d4:fd:8e:c0:07:6c:cb:58:b4:66:98:31:
         5f:4f:df:5a:d6:19:56:6d:83:35:1b:31:e8:6b:e5:e5:8c:b8:
         de:68:0c:f5:cc:4a:20:44:d5:f5:ec:62:8f:57:6a:06:be:a0:
         0e:9a:1d:fa:fa:93:14:9b:95:7d:b6:b2:b1:f4:8d:2c:22:1b:
         86:43:60:b6:a6:db:4c:10:60:ac:c0:f5:fe:7d:de:3c:59:66:
         d5:ce:ff:e1:9d:a1:c4:ae:f2:0b:d3:0b:b0:c2:a5:91:99:24:
         cd:e7:87:7a:ec:85:b6:f2:a6:ae:a1:a9:ed:0e:03:0f:22:5e:
         09:40:c4:5f:91:0c:9d:98:55:0e:be:94:f0:b6:d8:b0:a5:49:
         6b:1c:10:89:e8:ed:f9:1b:6d:c9:38:6c:7f:6f:00:ea:34:36:
         a7:62:7f:8e:70:43:9e:53:34:47:69:b4:3c:44:1d:a7:0a:d8:
         1f:22:3c:14:6e:10:99:7e:1a:59:75:8d:ae:b1:44:e1:78:b5:
         9d:dc:f8:b3:26:cf:8c:fd:c0:ea:af:6e:f3:f6:28:c6:fb:b3:
         ef:cd:3d:0f:47:0d:5c:3f:ad:8a:85:c5:a5:77:e3:c2:68:df:
         7e:24:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org