Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc6b3e59-06bb-3e0c-8630-fbdb5ff979d6.roa
File:                     dc6b3e59-06bb-3e0c-8630-fbdb5ff979d6.roa (raw, json)
Hash identifier:          zkf3WfxOmFy9C5YTfRBMlUyYXDEo9pXbwT/siPeTH8M=
Subject key identifier:   7E:B1:85:04:F9:17:E9:BA:F6:CC:01:F2:48:6A:B2:51:95:A3:D5:A9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B121669DFADF8D40D815700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc6b3e59-06bb-3e0c-8630-fbdb5ff979d6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     3848
IP address blocks:        216.208.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:16:69:df:ad:f8:d4:0d:81:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=a2795735-9c61-427d-9fb2-776548ced072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:98:75:e5:5f:32:0d:84:92:a5:16:f4:f3:
                    5a:05:4b:6a:e7:6d:ff:f2:da:08:a0:b2:ec:cd:29:
                    97:f6:36:a0:f3:3c:9b:44:33:b5:a9:bd:2e:98:b7:
                    af:bf:6f:22:43:06:f8:47:50:b4:81:b0:85:b6:25:
                    10:24:8f:8d:f4:d1:a7:55:64:d1:68:bb:86:71:7c:
                    df:f7:9a:f0:71:6f:52:d8:5a:8a:f6:1e:69:a9:b0:
                    61:40:02:f9:43:e6:56:96:f0:28:d4:87:09:47:76:
                    28:96:41:a3:8f:5b:bb:8f:20:5f:70:0b:42:bc:f6:
                    17:26:f7:ce:b2:d5:f6:fa:12:c8:c8:c7:b1:e2:4b:
                    4a:34:51:4b:38:2e:3a:3c:5f:6c:c8:18:f5:0f:c3:
                    75:3f:ac:4d:48:cd:39:a0:db:d9:03:9c:10:24:bb:
                    3b:aa:a0:7b:04:ca:2a:34:c8:93:53:bb:ab:42:bd:
                    ca:f1:cd:d1:6c:a4:77:7e:ba:c5:86:37:16:69:ff:
                    c7:f4:e4:6c:bd:ec:e2:83:bb:2e:74:bf:f6:d2:47:
                    74:f8:ae:b4:20:26:21:0e:38:6c:99:d5:92:b6:89:
                    91:47:5a:82:07:00:e6:ef:ce:e6:89:9c:63:36:2b:
                    4a:67:3c:e5:90:85:c2:9f:6b:80:66:39:bd:90:7c:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:85:04:F9:17:E9:BA:F6:CC:01:F2:48:6A:B2:51:95:A3:D5:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dc6b3e59-06bb-3e0c-8630-fbdb5ff979d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:27:34:02:48:d5:c2:cb:05:af:f5:fe:b9:8d:8c:28:3a:0f:
         b7:ba:8d:e9:92:b1:b7:2f:d4:7b:72:df:a8:56:6c:96:10:31:
         c3:6f:2d:25:61:5f:24:8e:2b:6d:dd:07:61:4b:8e:0a:1e:28:
         ff:c9:e3:f9:8e:1a:d4:a9:17:f8:b3:fe:9f:1d:e4:f1:8a:50:
         9e:4b:e4:96:e3:02:27:d8:fd:9d:ca:f5:a0:c0:8b:ce:22:44:
         99:6d:31:6d:ef:5b:ff:37:5f:1e:91:00:d0:ac:10:a7:a4:26:
         8b:2c:ea:1a:a2:5a:2c:07:46:76:cb:28:72:f5:ca:17:05:56:
         77:72:d8:68:d5:bc:14:75:17:0e:49:6f:f2:9d:0a:5e:6c:09:
         e4:4d:6a:96:91:72:6f:63:95:34:23:55:79:19:95:a3:3a:d4:
         2b:b4:60:9e:0e:de:96:4b:d9:e2:00:31:1c:47:18:08:b7:4b:
         ae:ad:af:b5:fb:39:e2:8b:ba:b9:0b:f7:bd:91:33:3f:99:83:
         0f:c8:fa:15:e3:93:f0:c2:e8:d3:e9:7f:6a:74:c2:ce:e2:0f:
         d9:ae:dd:31:ce:e8:92:b5:e2:8c:99:4a:1c:1e:67:e3:79:6e:
         a3:cd:de:1c:61:ce:47:d0:80:0f:dd:0c:43:e6:6e:55:57:d0:
         33:78:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org