Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f1a7df8f-fe77-3492-a5ff-9583675f8a18.roa
File:                     f1a7df8f-fe77-3492-a5ff-9583675f8a18.roa (raw, json)
Hash identifier:          h55bF+VyydF+nVRFY5BPXc0fwBRZbH7Q1tjr//BKpHE=
Subject key identifier:   4C:37:95:C0:71:2F:E3:BA:A0:6B:B5:EB:CD:98:15:60:AC:77:EA:6F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B120A16DAB296B651DB2300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f1a7df8f-fe77-3492-a5ff-9583675f8a18.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     7122
IP address blocks:        216.81.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:0a:16:da:b2:96:b6:51:db:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=86713e10-72d1-4229-ba62-108bafc60530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:a8:39:a2:6f:b5:13:05:fd:a4:09:41:c7:
                    13:2e:8b:70:82:a8:0c:cb:2a:76:09:f3:06:d3:d2:
                    ee:33:50:5a:14:04:7b:27:41:11:07:d9:85:52:9d:
                    ba:33:ad:a7:8d:cb:63:5d:7b:fc:a3:7b:b3:96:31:
                    f2:8d:81:2d:e3:c9:6d:b4:0a:45:09:92:f2:74:39:
                    14:0c:76:1e:10:a5:ea:90:82:fc:8d:02:b4:c3:f5:
                    73:8d:c8:e1:38:a6:a4:1e:41:9d:70:41:ad:81:31:
                    1a:5c:f6:a0:96:a9:2c:c8:a9:67:c2:06:d6:78:19:
                    41:9a:63:18:b1:aa:6d:15:8c:e4:b0:78:d7:40:5a:
                    1a:36:f2:23:14:d8:d7:c8:81:29:b6:2c:b7:52:42:
                    28:b3:61:20:13:10:e6:95:d0:80:84:86:7f:1e:c4:
                    89:24:1a:6f:e3:1e:3a:e6:38:fa:f5:7b:4b:2d:e9:
                    76:16:fe:d5:b2:f0:3c:f1:6c:3b:1d:20:e2:cf:94:
                    8b:94:af:01:a3:3d:15:a9:b9:ec:77:5b:01:d1:b3:
                    cd:06:b5:7b:f4:52:de:0a:ab:08:e1:e2:46:94:72:
                    1d:48:f2:9d:e0:d3:d5:4d:34:a5:a3:03:7e:ab:8a:
                    b2:2c:78:22:5f:c2:fd:6a:3a:73:1a:11:60:5c:7d:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:37:95:C0:71:2F:E3:BA:A0:6B:B5:EB:CD:98:15:60:AC:77:EA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f1a7df8f-fe77-3492-a5ff-9583675f8a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.81.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:9f:4b:c5:c8:36:d2:f9:91:f0:14:1c:cc:22:ce:74:4b:
         24:e5:be:46:fb:28:7e:a7:8a:06:47:a9:12:78:4f:26:dc:ad:
         1b:d4:4e:77:37:c5:5e:b2:b2:8e:18:f1:1a:e0:b5:c9:68:32:
         9e:94:da:63:42:74:33:e5:5e:e1:41:a4:f9:99:e3:88:24:6a:
         5c:cf:e6:63:51:c5:26:36:f2:ee:e8:44:a6:c2:51:4f:49:68:
         d9:39:74:44:2b:52:93:a4:11:39:f1:0d:6f:67:18:96:19:df:
         f5:f9:e1:96:91:7f:d6:6a:35:a9:c6:cd:fc:33:51:9f:20:f6:
         49:92:bb:a2:0e:37:86:ac:6b:db:a3:c3:26:85:f6:6a:c1:c6:
         78:26:e0:67:50:2b:1b:07:cf:1a:a2:fc:7c:b7:06:3f:11:57:
         e6:b8:f8:c3:46:c6:53:7c:e2:db:06:8c:5b:bd:ab:ab:d1:ab:
         12:51:90:d3:88:1d:cc:5b:2d:59:58:6d:8a:d3:4e:04:dd:31:
         a0:47:fd:10:21:aa:2b:c9:dd:26:86:63:eb:b1:c3:1b:d2:6e:
         a7:fa:df:81:a6:b5:7f:4e:2c:e2:9d:17:02:56:8b:76:0a:26:
         a6:68:85:b1:ab:5c:2e:a5:47:86:7c:3d:81:24:a4:c1:9a:3b:
         db:80:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org