Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c92e699-ee10-337b-9702-6ff4ae49a11e.roa
File:                     1c92e699-ee10-337b-9702-6ff4ae49a11e.roa (raw, json)
Hash identifier:          rLytAsOZIAiCBdsGs4e78Edx2pMtw61wD+bqOeCWk/Q=
Subject key identifier:   1D:81:B6:CA:E9:C2:06:E7:32:58:78:8D:24:B4:F6:61:08:05:B8:BF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B462A27502324FD63B8640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c92e699-ee10-337b-9702-6ff4ae49a11e.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:62:a2:75:02:32:4f:d6:3b:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=8edbb177-9596-4314-acc1-e6cda93ee8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:d9:08:48:0a:9b:5c:ad:37:40:1a:e6:ba:
                    8d:20:38:5f:16:e1:17:d8:9c:0d:48:1b:cc:4b:c3:
                    be:57:52:57:b8:be:67:47:42:a9:64:a0:18:35:ad:
                    55:4e:c5:b8:1a:6d:cc:80:e7:9e:41:44:96:e3:76:
                    4f:fc:c0:bb:47:bb:0c:a3:23:2a:10:c0:21:c6:83:
                    86:e2:4b:7d:8f:63:db:2e:9e:2a:30:87:9e:ed:19:
                    ac:f7:d3:54:02:4c:25:8a:9d:30:68:c9:84:74:2e:
                    2d:3c:30:07:25:a7:5e:5c:e9:40:c7:33:95:25:76:
                    44:90:d6:ed:ac:d6:6b:02:0c:b7:07:6c:12:8e:74:
                    ec:f3:8a:98:1f:03:89:2c:c9:71:3e:66:f7:16:c6:
                    f9:8c:60:2b:b2:f0:a6:76:b0:59:3c:19:1f:4c:0b:
                    51:2e:67:9e:4c:9c:ee:b9:7e:36:76:77:23:45:bb:
                    12:38:f0:cf:fc:39:05:85:85:3c:9b:86:e8:b4:65:
                    d4:cd:51:03:dd:21:4a:05:3c:77:1c:ef:96:ba:45:
                    72:40:95:17:78:3e:37:53:16:67:ff:34:7f:91:0c:
                    36:77:2d:f0:5a:b8:b0:e3:73:ad:10:05:ce:3f:7a:
                    38:25:a0:06:97:e4:65:30:e8:4a:77:da:16:65:87:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:81:B6:CA:E9:C2:06:E7:32:58:78:8D:24:B4:F6:61:08:05:B8:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1c92e699-ee10-337b-9702-6ff4ae49a11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:86:66:44:24:07:d1:77:68:7b:56:b0:93:96:a7:38:d2:
         14:5f:9d:83:75:08:ec:12:5e:2b:a4:4d:82:8f:6b:ce:cb:e2:
         6e:15:9d:80:18:9e:1a:bf:e1:b9:58:f6:4f:b3:aa:4b:b6:84:
         a7:8a:0b:8e:d8:77:f1:48:27:cc:5a:aa:52:64:3e:6e:7c:3f:
         84:cc:3d:c1:69:f8:3a:f3:ea:55:70:2d:ab:dc:91:5c:03:24:
         c8:d2:19:d6:7a:18:c3:9c:e2:a0:cc:44:26:97:08:87:2a:73:
         c6:a6:ce:f5:56:a1:45:07:57:0d:e0:81:c9:f8:0f:9f:38:0e:
         e1:aa:71:0a:3c:32:92:2c:e5:6c:92:02:52:3e:7f:60:5e:32:
         cc:ec:2e:ec:2e:d9:e9:14:d3:83:8d:71:7e:7e:3b:a5:98:94:
         33:21:82:70:5b:1d:c7:01:74:ad:e9:9f:d2:1e:f3:00:dc:89:
         0e:d6:82:4f:96:7a:48:5b:7c:b0:e9:7d:23:1b:61:69:b6:c8:
         3f:a3:f1:c6:03:9d:e5:7a:2e:7b:5e:94:62:d1:80:3b:4a:8d:
         bf:13:0d:86:8b:f3:86:c3:87:20:e0:36:b5:a7:c5:92:1b:2f:
         99:da:33:95:65:c8:4a:f0:86:55:2a:24:3e:0b:f6:67:73:f8:
         fa:95:3a:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtGKidQIyT9Y7hkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
OGVkYmIxNzctOTU5Ni00MzE0LWFjYzEtZTZjZGE5M2VlOGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC7ZCEgKm1ytN0Aa5rqNIDhfFuEX2JwNSBvM
S8O+V1JXuL5nR0KpZKAYNa1VTsW4Gm3MgOeeQUSW43ZP/MC7R7sMoyMqEMAhxoOG
4kt9j2PbLp4qMIee7Rms99NUAkwlip0waMmEdC4tPDAHJadeXOlAxzOVJXZEkNbt
rNZrAgy3B2wSjnTs84qYHwOJLMlxPmb3Fsb5jGArsvCmdrBZPBkfTAtRLmeeTJzu
uX42dncjRbsSOPDP/DkFhYU8m4botGXUzVED3SFKBTx3HO+WukVyQJUXeD43UxZn
/zR/kQw2dy3wWriw43OtEAXOP3o4JaAGl+RlMOhKd9oWZYdU2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB2BtsrpwgbnMlh4jSS09mEIBbi/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWM5MmU2OTktZWUxMC0z
MzdiLTk3MDItNmZmNGFlNDlhMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSPhmZEJAfRd2h7VrCTlqc40hRfnYN1COwSXiukTYKPa87L4m4VnYAY
nhq/4blY9k+zqku2hKeKC47Yd/FIJ8xaqlJkPm58P4TMPcFp+Drz6lVwLavckVwD
JMjSGdZ6GMOc4qDMRCaXCIcqc8amzvVWoUUHVw3ggcn4D584DuGqcQo8MpIs5WyS
AlI+f2BeMszsLuwu2ekU04ONcX5+O6WYlDMhgnBbHccBdK3pn9Ie8wDciQ7Wgk+W
ekhbfLDpfSMbYWm2yD+j8cYDneV6LntelGLRgDtKjb8TDYaL84bDhyDgNrWnxZIb
L5naM5VlyErwhlUqJD4L9mdz+PqVOo8=
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:36 2024 by rpki-client on console-fra.rpki-client.org