Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01d8fa65-b3ed-3215-b207-37303d9d99f1.roa
File:                     01d8fa65-b3ed-3215-b207-37303d9d99f1.roa (raw, json)
Hash identifier:          srTTt7hS3NhTb/ElUF74E69CTrr0M/CsVS/QpjAmIVA=
Subject key identifier:   BB:89:62:2C:F3:E2:8B:1D:03:C7:88:CC:B8:EC:A0:64:0A:6E:56:C3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B5825791DAC1EBA5C59E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01d8fa65-b3ed-3215-b207-37303d9d99f1.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        209.71.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:82:57:91:da:c1:eb:a5:c5:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=a156d861-105a-42d7-9dfb-5698ce1058b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:de:13:db:08:dd:4c:4d:f9:4d:aa:41:ba:
                    e8:d7:52:b5:3e:16:34:79:a1:c5:3e:07:27:fe:d7:
                    b1:06:13:bb:f3:ea:9e:d8:42:2f:7d:51:9f:33:a3:
                    b8:09:ee:18:22:f4:d4:1d:44:05:f5:ce:ee:09:d8:
                    fa:06:b4:bd:a2:15:4e:3a:31:f6:85:33:df:32:6e:
                    6c:16:c3:c2:31:3c:04:ba:5b:fd:d4:f6:c5:08:b4:
                    e5:d4:64:cc:27:c0:42:2e:23:b0:b1:63:71:17:84:
                    4c:65:24:4c:71:b3:97:1b:cf:61:94:7d:1f:71:33:
                    2f:40:17:31:ab:40:c8:73:64:91:1b:ef:9f:ee:5b:
                    69:9f:80:74:44:b8:9a:36:7d:dc:f8:00:bd:b1:1d:
                    5e:3b:b5:15:c7:a0:e6:b5:7c:4c:31:f2:3e:fd:fb:
                    ff:8e:b8:fa:ed:4c:69:74:cb:55:f9:0a:17:a7:3d:
                    16:e6:cc:f1:75:d4:d9:33:19:2f:48:41:de:9d:74:
                    28:7d:e1:89:e8:11:fa:e3:f9:37:ff:57:cb:71:7f:
                    31:b9:5c:a1:ca:a5:11:4a:3a:16:f0:d4:f8:68:84:
                    d2:84:cd:c7:c0:27:2d:c2:23:2e:ac:50:bc:98:01:
                    11:a7:4c:be:db:8b:01:a0:51:c4:12:f8:29:8e:e2:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:89:62:2C:F3:E2:8B:1D:03:C7:88:CC:B8:EC:A0:64:0A:6E:56:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01d8fa65-b3ed-3215-b207-37303d9d99f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:eb:dd:39:8b:93:30:95:e3:3b:5c:40:ed:2c:33:6a:7a:1c:
         c9:4b:76:fc:36:3b:3a:b9:d3:f0:6f:85:81:f3:91:0d:fa:31:
         70:28:be:f1:1d:ab:22:29:28:b1:d6:c2:9b:c5:f4:5e:9d:bc:
         a3:07:10:12:2d:e4:c0:d0:ab:7d:71:af:9d:6f:b8:29:f1:20:
         24:87:44:c3:cb:38:87:7a:fe:60:b3:49:ef:2a:10:a3:f9:92:
         7c:a5:c8:0d:a5:90:d2:b6:72:c9:50:e7:e3:6e:bb:d4:b8:2d:
         f7:ab:69:1a:3b:6b:e3:c7:d8:47:ad:15:ce:8f:99:d3:eb:a0:
         43:87:83:b3:3e:d1:65:43:63:98:dc:87:dd:29:9b:5d:e7:e3:
         2e:3a:3d:d9:2c:e0:17:a3:ef:c4:96:6a:79:5e:bc:19:74:15:
         cb:20:6a:34:e8:c4:6d:9a:65:2e:fa:3c:d2:34:ab:1d:2d:51:
         64:d5:55:04:76:1c:f4:7f:70:8c:e7:5d:81:28:ed:58:9e:ad:
         bb:d6:5e:5e:6a:b4:be:d2:3d:92:b7:e4:27:6c:04:50:31:b6:
         ce:7f:52:0f:be:21:49:8e:20:fa:9c:2a:9c:4b:cd:31:11:bd:
         04:1c:c6:15:a5:da:a0:55:6b:e6:32:28:5d:85:6f:a5:ac:6b:
         fc:28:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:37:16 2024 by rpki-client on console-fra.rpki-client.org