Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d522d422-8297-3f87-bef4-b9d108c9ba02.roa
File:                     d522d422-8297-3f87-bef4-b9d108c9ba02.roa (raw, json)
Hash identifier:          iNXzXYEYofBBw63rXQt2XOPDb1sUNt0y/bhiAjOQ6y4=
Subject key identifier:   FA:92:B7:BD:7A:97:07:C4:00:5D:FF:03:2B:15:C9:AF:21:4D:07:17
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11E31557AF9B1BAF055F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d522d422-8297-3f87-bef4-b9d108c9ba02.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     30336
IP address blocks:        209.226.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:e3:15:57:af:9b:1b:af:05:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=9b5aac4f-5434-4451-bef5-6ab3e521c6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:a0:30:36:bf:ad:20:fb:27:47:5f:4b:8d:
                    54:bc:07:ec:72:55:45:1b:3b:2e:22:8e:37:e3:fa:
                    66:ab:a2:e7:a3:21:91:aa:49:07:1f:d8:d8:bb:0d:
                    8c:71:6b:6c:1e:b7:62:1a:40:c4:51:70:dc:3a:a7:
                    1f:02:c2:26:06:10:25:b4:6d:f4:66:c8:b1:4b:87:
                    65:76:dd:98:9c:06:d8:32:ed:14:5a:0b:77:12:52:
                    52:44:14:8c:28:52:32:1c:4b:08:8d:60:4f:96:61:
                    d3:4c:8f:40:98:9d:05:ce:0d:04:63:39:61:9c:98:
                    a7:0b:d9:da:2b:53:95:fb:54:e3:43:4a:2f:a6:aa:
                    ee:e6:58:17:24:4a:0f:50:41:5b:1a:6b:80:04:84:
                    2b:cc:99:0c:68:cf:0d:3a:c9:90:fd:74:5e:25:f6:
                    fe:2c:6b:16:69:88:04:08:b1:08:db:c0:20:92:84:
                    91:12:3d:28:19:d6:50:bf:da:86:ea:d4:46:fd:5e:
                    0b:c1:e7:b4:15:b9:ee:ee:48:64:73:54:f4:32:08:
                    9a:11:28:99:74:73:27:75:47:8b:21:49:34:7d:a5:
                    b0:9c:1c:c7:72:27:c6:42:20:8e:6f:a8:8f:54:d4:
                    a3:c9:5c:d7:fe:b3:38:9c:19:d3:78:b8:24:db:ed:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:B7:BD:7A:97:07:C4:00:5D:FF:03:2B:15:C9:AF:21:4D:07:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d522d422-8297-3f87-bef4-b9d108c9ba02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:db:31:e8:ba:70:c8:11:e0:ec:cc:14:3a:1d:a6:9c:30:f3:
         60:58:04:b6:1f:d2:54:0d:ef:2a:13:d0:30:d3:5e:7f:14:1d:
         76:35:74:35:55:31:1d:1a:1c:43:ac:67:50:11:8e:87:69:38:
         6f:4e:c7:12:21:54:39:e2:d1:19:d8:01:2d:d5:15:c4:57:6a:
         35:80:9f:dc:45:70:ba:23:1d:dd:c6:00:fe:9b:7a:e7:6c:89:
         ba:61:33:4a:9e:70:47:f4:91:5d:de:9d:9b:6d:e7:c6:2f:b0:
         50:27:e9:e9:0d:a7:4c:43:e3:30:f5:3e:0a:47:f2:cb:ca:c8:
         20:69:2a:3a:51:5a:2f:80:eb:ab:9e:42:11:42:cf:71:fb:0e:
         57:b0:18:a4:4a:f8:28:05:9a:8c:42:db:8a:6d:97:ea:4e:7b:
         8c:c6:7d:fc:7e:30:51:ab:c7:0c:d7:c8:d2:2a:08:d0:58:ed:
         84:47:aa:b7:ee:86:68:3d:a7:f3:8f:78:10:31:9c:2b:d6:65:
         85:c3:37:b6:ab:46:32:13:62:df:95:32:f2:82:62:31:29:0b:
         32:5b:73:64:69:86:72:43:a0:20:fd:cb:ff:f6:b2:c7:33:45:
         7a:45:5a:5b:79:8c:b0:c0:d3:90:b3:38:90:07:02:a8:c9:0f:
         06:16:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org