Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f70716-26a1-3de1-a893-51433465356c.roa
File:                     f5f70716-26a1-3de1-a893-51433465356c.roa (raw, json)
Hash identifier:          D0mEtU2AcougbhYMLnadmLWkKFt4FR+Ai56Q9obzP+o=
Subject key identifier:   EF:87:66:BB:6F:22:0F:D9:33:23:A2:7C:E9:8D:7C:F3:69:86:B0:F3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FE19970C488A0E428AD00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f70716-26a1-3de1-a893-51433465356c.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        204.101.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:e1:99:70:c4:88:a0:e4:28:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=2b602ef1-288a-4053-aa4e-175badada7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:b4:b2:a4:a5:62:67:12:cf:cd:6a:e2:14:
                    16:0b:d5:33:6d:d4:29:cf:17:1d:98:10:d8:51:9e:
                    4c:58:25:b8:82:f0:b8:3e:99:31:81:e9:40:82:56:
                    f8:29:c8:4f:f6:f2:e3:db:a2:17:b6:fb:47:5e:3c:
                    40:b8:d2:ab:32:20:4c:e2:3f:8d:2b:11:8c:c8:f4:
                    c0:76:aa:9c:53:f7:81:cb:73:63:ba:3b:a6:9d:8d:
                    10:1f:62:96:94:11:8d:8e:aa:61:63:b0:19:f4:87:
                    54:0b:8d:7e:d6:c7:fb:6a:a0:57:dd:fd:73:48:cf:
                    09:75:90:8f:85:ca:22:35:05:ec:4b:b0:b2:45:a4:
                    55:0d:c0:40:4c:ec:7f:52:28:47:df:e4:fb:7e:2a:
                    40:fd:6c:ca:46:27:b7:4d:b3:40:d9:02:4f:cb:c6:
                    9e:7d:d0:c5:8e:e1:56:a8:95:de:3c:0a:43:83:49:
                    bd:7c:90:fd:d0:b4:0f:32:40:a9:2f:ec:f2:31:50:
                    95:d9:ac:61:28:a6:4f:ae:fb:0c:08:e9:5a:62:00:
                    da:a2:01:62:75:4d:a2:5e:e9:24:18:2a:60:91:20:
                    d3:52:58:89:1d:8a:c9:35:7c:39:b2:f6:a7:f9:f5:
                    00:95:2f:bc:fe:b0:32:9e:74:74:2e:87:c2:41:13:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:87:66:BB:6F:22:0F:D9:33:23:A2:7C:E9:8D:7C:F3:69:86:B0:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f5f70716-26a1-3de1-a893-51433465356c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:14:32:ea:56:dc:77:0d:65:e6:7e:b9:36:f0:98:81:cd:bb:
         cd:5c:cb:bf:87:db:1b:fc:64:1b:dc:8b:16:2b:a4:a3:e1:ee:
         de:cb:c7:3c:ca:66:29:ae:2b:a4:17:ae:3c:6b:41:5a:3c:a4:
         c8:94:2f:54:89:b4:c3:fe:06:7c:71:1c:17:78:84:ac:a5:9b:
         b3:86:f4:23:1d:0c:b0:8f:07:8f:fc:91:05:3d:45:ad:4b:a7:
         8b:2b:17:83:50:44:94:e4:86:bc:b9:ef:c1:5f:16:9c:e6:f7:
         2d:e3:e2:03:47:bf:cf:b9:0a:12:f1:fd:da:46:e1:eb:a6:33:
         e0:27:14:d6:34:48:72:ff:0e:d5:a5:41:f8:5e:09:4d:f1:33:
         0d:1e:90:5c:7b:f8:d6:57:dc:c5:1e:2e:06:03:f3:83:4b:65:
         fc:23:a7:8e:74:60:a3:7b:9e:2d:df:1b:06:61:27:a5:e4:0b:
         83:8f:0a:40:fc:fa:85:5d:ee:96:84:a4:e8:cc:78:15:f4:b8:
         cf:22:05:90:68:37:65:e0:dd:78:ad:1c:f0:9e:31:5f:06:6a:
         7d:8c:97:87:8b:fa:cc:79:15:a9:dc:e0:b0:93:52:4c:c5:32:
         8f:96:9e:9f:5b:45:86:12:e2:52:b3:9c:5c:2a:f9:7b:10:a6:
         fd:24:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org