Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13f8bd4f-901a-376d-a9ed-e0e932e3fde7.roa
File:                     13f8bd4f-901a-376d-a9ed-e0e932e3fde7.roa (raw, json)
Hash identifier:          7o5HwCk6L8eQ+lDLCTiUsh1yum1syAX+r2SRdzEOxwA=
Subject key identifier:   2B:97:A2:96:35:1A:9A:E5:BC:BA:6E:D8:B4:7F:D1:D0:8D:01:59:26
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2A306EF6E1F9A70C2A1300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13f8bd4f-901a-376d-a9ed-e0e932e3fde7.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     397168
IP address blocks:        206.47.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:30:6e:f6:e1:f9:a7:0c:2a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=a6e802ff-3480-4c84-ab07-05cd604c0b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:33:b4:20:07:56:56:16:af:60:45:94:4e:
                    f4:73:e2:36:2d:ee:5a:a7:f0:96:ce:9d:7e:cc:13:
                    57:f8:f8:ed:ee:80:2d:bf:81:37:55:ae:9b:7a:fa:
                    32:2c:02:d2:99:b1:d6:7b:b0:1c:89:4f:92:d7:45:
                    22:c0:b2:c8:43:20:cc:a8:67:4c:2d:07:2e:84:4f:
                    81:35:48:85:9b:2b:9f:a1:1c:1f:b1:07:01:23:fc:
                    bf:a3:f6:00:66:16:ce:a7:0d:ec:44:46:0e:7f:ed:
                    8a:43:8e:fc:3c:a4:c2:14:43:dd:8c:bf:01:27:c6:
                    e7:b3:3c:62:e2:49:0b:10:55:c7:d0:0d:24:ee:74:
                    25:81:7c:2c:a5:9c:8b:82:8c:76:41:f3:de:00:17:
                    46:0b:dc:d0:8d:25:a7:2f:4b:05:cc:d3:18:54:67:
                    0d:e7:4c:c0:e3:06:9e:67:aa:3a:6c:f5:55:37:d4:
                    d2:a5:8b:43:3a:b6:6c:f0:13:30:a0:69:07:6c:da:
                    7c:61:f3:35:c1:ad:02:74:b4:ff:a8:01:b1:99:9e:
                    49:d4:f2:65:27:7d:46:8f:50:60:11:bc:a8:73:90:
                    5f:4c:fa:29:be:90:e3:d9:ac:fe:5c:bf:5e:ec:77:
                    91:37:9e:5b:15:5e:09:7c:01:09:67:9c:0c:cf:d5:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:A2:96:35:1A:9A:E5:BC:BA:6E:D8:B4:7F:D1:D0:8D:01:59:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13f8bd4f-901a-376d-a9ed-e0e932e3fde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:44:2c:9d:d4:60:09:61:04:c6:73:b5:f4:6a:f8:b1:fc:39:
         5d:70:53:24:ea:d9:84:7a:7f:cf:d4:55:51:84:fd:e6:8c:ac:
         70:b5:05:f0:6b:48:b6:7a:c0:f6:9d:ea:d9:f0:25:1e:30:f4:
         8f:8f:37:8c:60:c2:56:89:4f:7a:61:60:f4:69:c5:55:72:d6:
         90:33:ed:67:9f:56:81:d7:82:df:27:14:11:21:c7:8d:4f:f4:
         5c:45:e7:6f:b6:7f:9d:81:c4:8d:d8:f7:df:3e:6b:d5:29:81:
         00:71:1c:3b:13:26:60:7a:bc:41:9e:0b:00:46:b9:59:22:84:
         f8:b3:37:87:72:f3:ec:33:52:3f:71:62:f5:12:be:82:f6:4a:
         23:6a:33:5d:27:1f:c7:fb:c0:a7:72:13:95:84:a2:e0:80:e5:
         86:25:7e:ba:6c:1b:07:d7:d8:cb:62:00:45:55:87:81:49:3b:
         1d:85:d1:2c:21:4b:96:14:b2:7c:a5:ba:90:8f:86:b1:e9:13:
         51:47:5f:17:9b:8a:15:b3:f2:8f:b3:f9:7f:e7:80:37:9a:35:
         f7:32:3f:18:77:d3:9c:65:0f:8b:cc:f8:84:73:1c:31:2c:39:
         5f:9b:df:87:98:cb:36:a0:26:75:c8:76:f2:f7:f3:2b:7a:70:
         c3:10:27:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKjBu9uH5pwwqEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YTZlODAyZmYtMzQ4MC00Yzg0LWFiMDctMDVjZDYwNGMwYjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqMztCAHVlYWr2BFlE70c+I2Le5ap/CWzp1+
zBNX+Pjt7oAtv4E3Va6bevoyLALSmbHWe7AciU+S10UiwLLIQyDMqGdMLQcuhE+B
NUiFmyufoRwfsQcBI/y/o/YAZhbOpw3sREYOf+2KQ478PKTCFEPdjL8BJ8bnszxi
4kkLEFXH0A0k7nQlgXwspZyLgox2QfPeABdGC9zQjSWnL0sFzNMYVGcN50zA4wae
Z6o6bPVVN9TSpYtDOrZs8BMwoGkHbNp8YfM1wa0CdLT/qAGxmZ5J1PJlJ31Gj1Bg
Ebyoc5BfTPopvpDj2az+XL9e7HeRN55bFV4JfAEJZ5wMz9W6SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuXopY1GprlvLpu2LR/0dCNAVkmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTNmOGJkNGYtOTAxYS0z
NzZkLWE5ZWQtZTBlOTMyZTNmZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi9lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFELJ3UYAlhBMZztfRq+LH8OV1wUyTq2YR6f8/UVVGE/eaMrHC1BfBr
SLZ6wPad6tnwJR4w9I+PN4xgwlaJT3phYPRpxVVy1pAz7WefVoHXgt8nFBEhx41P
9FxF52+2f52BxI3Y998+a9UpgQBxHDsTJmB6vEGeCwBGuVkihPizN4dy8+wzUj9x
YvUSvoL2SiNqM10nH8f7wKdyE5WEouCA5YYlfrpsGwfX2MtiAEVVh4FJOx2F0Swh
S5YUsnylupCPhrHpE1FHXxebihWz8o+z+X/ngDeaNfcyPxh305xlD4vM+IRzHDEs
OV+b34eYyzagJnXIdvL38yt6cMMQJ4o=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:47 2024 by rpki-client on console-fra.rpki-client.org