Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2787fb2a-2d47-30f2-aa99-0434b7ecb7af.roa
File:                     2787fb2a-2d47-30f2-aa99-0434b7ecb7af.roa (raw, json)
Hash identifier:          Z+1fZCTsQjjawD5LKIEajCYYQgT4VUgrf4bk5U8kB7c=
Subject key identifier:   B6:CA:82:49:04:81:CA:CB:30:05:BF:8D:57:7C:00:F6:54:93:E0:08
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D29EF92623743A28B3036C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2787fb2a-2d47-30f2-aa99-0434b7ecb7af.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:ef:92:62:37:43:a2:8b:30:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=34f32722-9482-4efe-809f-280da68232b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:a0:49:3f:18:88:33:c4:8c:99:35:a1:3b:
                    a3:99:de:20:61:28:5d:59:50:f9:46:f8:6d:38:a3:
                    5d:35:eb:67:1b:f6:fd:f1:6c:c7:ce:10:94:28:fd:
                    26:f6:83:7f:81:b4:46:c6:bb:ef:58:d0:42:c8:fe:
                    94:16:c5:98:2e:4b:ad:0e:d9:89:d5:44:37:4d:12:
                    f8:76:31:57:42:f6:86:61:56:6d:cd:d1:ce:77:c3:
                    c6:7d:c7:f3:26:22:ab:84:1e:72:d3:12:4f:89:60:
                    f1:69:16:d4:52:04:6f:44:87:df:5a:42:45:48:43:
                    1c:24:b5:a7:40:f4:40:5a:5e:4c:15:36:51:8f:54:
                    c6:bd:d0:ee:c5:a6:ad:d4:f9:6a:ea:0a:3e:cf:5b:
                    2d:62:8c:ef:3c:65:3e:8a:06:f5:e3:5b:19:29:0d:
                    ea:7a:52:78:b5:71:32:07:ef:77:84:5f:08:70:be:
                    c0:e4:75:55:1e:26:99:aa:af:22:ba:e4:ce:f0:e4:
                    27:91:e9:31:90:12:eb:fd:86:d6:42:bf:8f:4e:a2:
                    8f:44:24:97:0b:95:ae:68:1d:4f:94:08:d8:cf:2d:
                    08:69:69:39:70:b6:a8:ce:f8:fe:f6:f4:62:67:88:
                    64:d0:77:49:95:54:d4:9c:e5:74:d2:ee:ba:5f:50:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CA:82:49:04:81:CA:CB:30:05:BF:8D:57:7C:00:F6:54:93:E0:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2787fb2a-2d47-30f2-aa99-0434b7ecb7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4b:07:b7:bb:1b:57:e6:56:43:92:21:03:60:9e:56:03:b8:
         0a:1a:76:20:03:86:c8:b4:9d:e7:6f:72:80:a3:5c:22:05:85:
         05:d7:38:0a:13:6d:4e:46:0f:e8:ee:fd:0a:dc:44:7b:63:69:
         4f:ef:a9:68:73:81:28:ab:18:8f:c4:17:fa:f3:9a:a1:7a:ac:
         18:78:c5:e7:9b:a9:35:73:72:e2:a2:52:e3:97:84:de:b1:5d:
         a0:cf:d7:1f:af:a6:f3:62:59:a8:c6:92:6f:c3:49:98:53:bf:
         52:0c:64:19:af:1d:77:3a:39:76:0c:c4:4f:0a:04:f1:2e:2d:
         13:1c:1f:8e:69:25:17:7f:14:b2:5d:0a:57:14:52:0d:91:de:
         5c:fd:46:01:22:27:db:59:7a:7f:91:be:b1:10:63:d9:b4:24:
         9a:76:86:f3:d9:3b:52:3c:17:25:19:63:52:2e:f6:d9:53:71:
         0f:17:81:d9:6b:47:3f:8a:ba:45:07:cc:b3:6d:e4:f3:6a:58:
         9e:d5:b0:74:f8:6f:82:ab:73:60:4d:3b:b5:56:54:98:cd:db:
         aa:9b:7b:ec:e8:3d:85:72:fa:c4:59:65:fc:b3:f1:62:bb:a3:
         94:7b:27:14:cd:ea:e8:28:b9:43:02:54:fb:b5:ce:bb:2e:38:
         c4:36:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:48 2024 by rpki-client on console-fra.rpki-client.org