Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f121374f-02bf-309c-b741-d1c0fb5a62db.roa
File:                     f121374f-02bf-309c-b741-d1c0fb5a62db.roa (raw, json)
Hash identifier:          fvkk7h7J9QvkOQTukLYypT/rZUK12ljdZNcwhlb2Ibo=
Subject key identifier:   4F:5F:7D:71:92:D5:A9:90:E0:A5:8E:FA:DF:10:58:21:42:30:A1:21
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11F537EB1E2880398DA000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f121374f-02bf-309c-b741-d1c0fb5a62db.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     35911
IP address blocks:        209.226.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:f5:37:eb:1e:28:80:39:8d:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=82765fd7-d0ca-464e-ba7f-b3e438e79f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:71:41:5e:79:60:a3:c1:61:92:34:2c:1d:
                    a5:2e:ab:e1:c1:d6:12:a0:3b:16:74:6e:8b:20:02:
                    15:1e:b0:37:06:33:9f:5a:0e:c3:ff:e7:f9:5d:21:
                    00:41:58:a3:6b:e0:97:88:57:32:8d:dd:99:ac:ef:
                    8c:c1:a9:bd:8b:f7:27:ec:e8:f0:02:19:8c:09:c8:
                    a4:71:d9:73:54:53:8b:58:fd:6c:62:d5:9a:1b:a2:
                    af:b7:d0:eb:f8:fa:61:1b:3a:d3:e2:36:4f:a6:04:
                    f7:6f:90:bf:82:a7:64:ed:0a:62:98:45:30:33:db:
                    54:ec:69:ac:26:b1:10:3c:62:5a:1a:e6:7a:70:8d:
                    80:85:5d:25:e4:2e:4e:08:dd:2d:8e:78:08:97:c6:
                    9e:08:ab:95:50:3e:c9:ba:19:40:a2:93:5d:1c:a1:
                    a0:4b:ef:ad:a0:d8:68:be:2f:5c:54:64:41:22:dd:
                    c5:d4:be:cd:b3:1f:05:b7:e4:77:28:3b:31:dd:4a:
                    cf:69:48:16:3c:42:0c:85:e2:e3:be:79:6a:2d:8a:
                    54:02:03:26:dd:6d:90:d2:30:a6:86:eb:11:1a:b0:
                    a5:3d:60:1a:2e:a3:29:a6:67:55:e4:60:0a:d3:45:
                    06:1f:a4:0e:2f:c1:9a:44:a4:94:59:9a:d3:64:4d:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5F:7D:71:92:D5:A9:90:E0:A5:8E:FA:DF:10:58:21:42:30:A1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f121374f-02bf-309c-b741-d1c0fb5a62db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:66:b0:96:25:56:bb:44:5d:62:f9:e1:e4:46:94:f0:f7:
         75:59:1d:79:c1:66:49:95:89:a9:a3:db:06:ed:3b:f6:fa:45:
         1e:8b:45:f0:c0:e3:0f:5d:80:b5:60:51:77:23:86:87:6a:ce:
         bf:bb:49:8d:d6:25:a8:91:06:19:d1:50:1f:c2:21:f5:5d:59:
         1b:b0:8e:45:44:8b:20:21:37:2e:6c:17:81:67:ff:07:47:3f:
         a8:55:bf:4d:55:66:14:bb:71:d8:5b:2d:13:6c:35:be:6c:cc:
         10:99:7b:f2:70:ab:27:9b:cc:f6:96:73:58:b8:8e:75:fc:a0:
         de:f7:06:e0:51:83:84:fd:48:7e:82:1f:06:1d:14:be:ce:d6:
         bc:01:64:d2:f3:e5:15:c5:6d:56:be:61:a6:98:58:e4:89:c0:
         3e:af:04:d2:b6:1c:a2:02:4c:2a:51:a9:7f:8e:38:e3:da:df:
         37:95:45:a5:83:be:bf:ed:d0:dd:68:4d:08:a1:8c:2a:bb:32:
         bb:3d:a4:0b:b7:01:c8:4f:29:91:4a:c9:30:83:a8:31:17:5b:
         3d:e8:c9:8c:56:a6:78:e5:bd:03:79:09:e5:75:6c:ca:75:d5:
         62:63:a1:7a:07:5d:73:c5:09:48:25:10:b0:ad:2a:c6:58:1d:
         4a:4d:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org