Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d8a1733-bd5b-331f-a500-ff80e28ab3fe.roa
File:                     2d8a1733-bd5b-331f-a500-ff80e28ab3fe.roa (raw, json)
Hash identifier:          Ix3pBIigmyr5zdyJuwla4G0isJUCwNxCBO4S8nFWK78=
Subject key identifier:   87:31:8E:68:7E:94:A1:D8:25:AE:1F:5B:62:17:B1:2C:B8:34:07:5E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2AD6B1FEFEF1558C773AA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d8a1733-bd5b-331f-a500-ff80e28ab3fe.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.164.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:d6:b1:fe:fe:f1:55:8c:77:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=17e38ea5-a834-432b-994a-1dc47aefac73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:bd:20:b6:f4:40:60:20:72:f6:82:a0:d0:
                    a6:ce:46:c2:f6:e9:8c:96:5f:0f:fe:b8:42:f6:ad:
                    14:bd:10:bf:69:03:a3:01:aa:47:99:5c:e4:95:bb:
                    f9:51:35:0f:5a:81:97:30:c1:fc:9d:73:eb:b7:e8:
                    64:30:d6:57:d6:ec:b4:76:30:0a:3f:d8:a4:88:c2:
                    ee:8b:a6:da:80:58:ef:9c:ff:eb:33:16:bd:0a:a5:
                    10:ad:7f:9c:78:0b:1a:ac:fd:06:f2:ad:0b:b2:19:
                    03:fe:e8:0a:f7:84:96:db:06:8a:18:20:40:d3:73:
                    9e:aa:d5:e2:ed:ca:d1:f4:97:64:d5:0f:a9:bf:e5:
                    a9:46:32:01:18:4d:ef:dd:5e:7f:49:42:b6:8f:68:
                    03:72:78:1e:a9:e3:bc:e7:52:40:9b:3f:b9:78:2b:
                    c8:ee:75:a9:c8:83:e1:65:d7:a1:15:9a:2e:1f:f0:
                    66:ec:3a:c0:61:83:e8:6f:eb:2b:ed:48:88:8e:f3:
                    91:9d:84:b9:bf:9d:2a:2a:ce:de:55:ec:5a:cf:3d:
                    7b:7b:61:66:a0:26:f5:52:c0:5e:d6:7c:ea:cd:81:
                    d5:17:89:61:af:fe:cc:87:b1:5c:26:47:c6:6d:6e:
                    b3:d9:40:5f:7b:7f:ea:d8:53:ed:90:f7:53:5d:df:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:31:8E:68:7E:94:A1:D8:25:AE:1F:5B:62:17:B1:2C:B8:34:07:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d8a1733-bd5b-331f-a500-ff80e28ab3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:71:11:bb:34:04:ad:3e:3d:00:e9:bd:93:94:c0:e8:e5:16:
         41:f9:b1:cf:3a:72:3b:a4:32:bc:f5:50:71:1d:c7:41:11:93:
         b0:aa:02:d3:c0:9e:12:d3:03:dc:ee:c3:86:d1:1c:cd:27:40:
         b9:77:a9:1a:db:d2:3a:76:7f:7e:e0:3a:8c:a4:ac:f3:03:8e:
         33:0d:9f:80:d0:8b:71:9f:0d:ce:03:cc:b3:84:26:41:39:7a:
         31:40:e5:eb:47:7f:f7:69:9f:4a:bd:95:6a:d2:b7:45:0b:6c:
         ac:24:50:69:be:fd:cd:fe:33:e2:e4:89:1c:c0:94:ac:4c:4a:
         a1:c1:0b:54:40:a6:d8:25:6e:c4:30:8f:62:56:3e:28:ec:e9:
         ec:16:45:3f:b8:54:fe:2e:50:3e:8f:1a:f0:b7:ad:80:ba:b1:
         33:f3:6f:9f:f2:b1:66:5b:95:54:1e:db:84:7a:19:ec:f4:2a:
         d9:01:38:42:8e:c2:16:c6:be:7e:d8:e7:b0:45:03:04:42:1f:
         b9:85:78:cc:5e:f7:cf:cc:da:58:0a:7a:2a:7b:41:94:fa:31:
         7d:e1:63:46:2f:52:7d:01:6e:ed:0d:d8:8f:3c:9e:46:fc:d2:
         2d:c9:64:0f:28:45:20:ed:c6:89:82:ea:cf:32:29:41:07:c6:
         e4:de:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:38:14 2024 by rpki-client on console-fra.rpki-client.org