Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d95d46f8-2747-3185-816d-a8a7b343a022.roa
File:                     d95d46f8-2747-3185-816d-a8a7b343a022.roa (raw, json)
Hash identifier:          4EgeCl6pAQ4/9sx/ieY1+2Yk2oOjFBPNp6kZMRojJx8=
Subject key identifier:   BB:25:E7:A5:D2:F3:0F:BB:9B:38:BA:A3:00:3B:85:A7:CF:66:A8:F4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10686CFDA8068887C1F320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d95d46f8-2747-3185-816d-a8a7b343a022.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21723
IP address blocks:        206.47.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:68:6c:fd:a8:06:88:87:c1:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3fa34adb-7f7f-41d3-b0ea-07a5889ab8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:62:e1:25:d2:4a:3b:0f:14:8c:6a:cf:9f:
                    22:68:b5:82:41:62:68:1b:ba:a8:9e:b9:d0:bb:89:
                    9f:ae:d9:8d:e9:bd:8a:13:44:8b:0c:0b:ca:fa:bd:
                    86:b6:1d:cc:85:de:ff:c9:36:de:64:3a:f7:22:69:
                    2a:54:c7:0a:ea:c4:37:08:6c:39:da:58:90:e3:dd:
                    63:8f:65:46:04:db:2d:47:55:21:35:e0:80:f4:e5:
                    8b:7c:af:fe:84:0c:ab:3d:ce:1d:14:6d:bb:25:9a:
                    a3:ef:43:e9:77:74:bb:c3:e8:ed:52:61:51:a2:b6:
                    a6:38:a1:01:7a:7d:b8:5f:68:47:16:62:ce:c3:06:
                    a3:f8:ab:75:26:f5:89:be:8a:e0:ae:7a:2b:d1:0b:
                    02:f5:bf:fd:33:18:01:14:1f:f5:f5:a9:67:6b:3a:
                    fa:c4:1f:cf:b0:fb:a4:db:de:5c:d9:0a:c0:f2:90:
                    f0:65:7e:2e:1c:c0:01:c0:09:b9:7d:9b:77:ab:c8:
                    51:41:50:22:d9:13:98:ed:fd:84:bb:9a:42:bb:31:
                    ff:a0:f6:75:a5:cf:8e:ff:6e:c0:2f:eb:20:44:cc:
                    1e:16:9c:3c:4c:22:99:60:f4:02:cb:e7:ae:2c:ed:
                    1a:98:a6:55:b5:92:e6:6c:20:46:95:1d:90:e6:9f:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:25:E7:A5:D2:F3:0F:BB:9B:38:BA:A3:00:3B:85:A7:CF:66:A8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d95d46f8-2747-3185-816d-a8a7b343a022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:bd:c9:8f:df:b0:26:3d:50:e7:1d:13:d4:6f:b0:5e:9f:
         e6:9d:d6:b5:03:ce:32:05:89:c4:4f:39:db:e9:92:79:bb:5d:
         8b:6d:61:bc:81:17:e6:35:08:dd:b0:de:47:97:dc:d8:7c:4c:
         20:a1:6c:1f:7c:74:0c:02:5e:cd:ee:27:98:e2:94:4f:e6:89:
         5e:53:39:8b:f9:1d:21:4c:de:a5:67:86:08:12:7a:25:d5:c0:
         22:7c:25:25:0c:2d:16:20:ae:16:45:7f:ca:47:21:5e:91:75:
         6c:39:7a:0a:f9:fd:c3:d9:fd:07:2d:0c:7f:d9:2b:09:33:c0:
         8e:92:ee:99:2d:cd:02:0c:51:51:8c:2d:b9:47:e4:62:3e:e2:
         9a:2f:ce:c8:dd:6c:d9:21:7f:af:82:3a:23:c4:39:aa:92:a0:
         c8:af:21:a3:54:6e:ea:8f:e6:13:da:49:c6:f8:4b:3c:10:74:
         2a:5b:5c:dc:2a:4d:ef:18:11:1e:d5:54:29:4a:a6:aa:b0:eb:
         4c:f3:39:09:2f:23:30:93:33:cc:4d:e7:69:43:34:16:4c:fa:
         41:bc:2a:ba:34:ca:dc:00:60:be:73:32:68:0d:fe:e3:9b:dd:
         ac:39:2e:0b:24:72:7f:bb:3f:fa:e4:9f:af:bf:16:c2:82:62:
         47:4a:f7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org