Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dc25cba-024c-318e-ba2e-5605baad9d0c.roa
File:                     9dc25cba-024c-318e-ba2e-5605baad9d0c.roa (raw, json)
Hash identifier:          4Xpswbq3BzhDDIebdsnx2fd8FawAXE/sz6MqWyMRRhg=
Subject key identifier:   DE:05:E8:F4:E1:D7:93:17:FD:46:68:20:62:A8:4C:6E:B8:BB:98:F5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B15DABB9C71C35D4E1780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dc25cba-024c-318e-ba2e-5605baad9d0c.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     11831
IP address blocks:        209.17.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:15:da:bb:9c:71:c3:5d:4e:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=6507c08f-bf25-4009-af46-806326c6dca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:2e:96:36:66:1b:0c:b1:71:7a:76:ee:da:
                    06:d0:23:62:dd:ae:9d:35:ed:8d:80:0c:32:92:a4:
                    6c:e4:16:0e:28:e3:8f:8b:7a:8e:d9:c8:ad:38:1b:
                    ae:70:1d:08:3a:22:71:cd:1f:f0:d1:c8:ff:02:77:
                    92:09:04:2f:2e:ac:b9:7f:76:c1:1c:e1:91:9e:12:
                    14:dc:15:50:5c:c1:15:98:2d:27:06:42:52:6f:74:
                    6b:22:2e:24:22:d6:12:9c:e4:62:c4:09:49:2b:9f:
                    dc:68:83:23:79:90:e1:0b:31:b7:fe:6d:88:d5:f4:
                    f3:d6:80:7a:33:08:ab:2b:10:1b:4a:91:7f:ef:75:
                    f4:0f:a0:30:ec:64:66:5f:0f:a3:47:56:15:aa:c8:
                    ae:0a:7e:79:ed:52:25:53:ab:2c:25:b2:49:cd:ad:
                    8e:9e:96:75:aa:7d:c0:44:27:7b:b1:8e:33:56:3a:
                    ca:1e:ea:af:b4:10:c4:aa:5f:11:05:d1:59:13:ac:
                    f8:a0:c9:c6:b9:cd:35:97:52:0b:f2:f9:ae:d4:c5:
                    97:04:38:2e:92:7a:bb:b9:f5:53:b9:d0:ac:a4:fc:
                    b7:23:26:fc:a7:c9:5a:db:34:d8:fa:c7:d2:28:99:
                    30:23:b4:46:13:e8:be:8c:15:24:95:b5:fd:14:d7:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:E8:F4:E1:D7:93:17:FD:46:68:20:62:A8:4C:6E:B8:BB:98:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9dc25cba-024c-318e-ba2e-5605baad9d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:6f:d7:8f:97:cc:5d:53:0b:c6:3b:f0:9a:e5:a5:94:12:
         71:78:2f:0c:27:d9:06:23:5b:f0:a2:71:6a:2e:4e:3c:8b:d5:
         d1:1d:84:97:a3:aa:ff:1e:d8:26:f0:51:08:9e:d1:52:d4:22:
         c8:df:24:61:65:97:80:4d:c2:a6:0a:73:5e:ad:85:c4:bd:8e:
         5a:f3:2e:26:e4:17:c0:6e:55:1c:ba:5a:3a:70:88:d6:3d:d5:
         95:64:af:88:de:81:90:1a:57:2c:bd:d5:ce:32:0d:83:a2:5e:
         b4:d3:09:96:80:33:db:b2:85:c5:4c:1d:0f:82:ab:93:8d:9e:
         06:97:34:dc:87:77:72:6a:48:42:81:b8:06:db:b0:89:64:bf:
         da:83:10:2e:1a:ed:a9:22:38:57:98:c4:ea:09:e5:4b:c8:f9:
         35:43:3f:5f:b6:7c:84:99:47:14:d4:cf:41:11:20:97:7e:d5:
         64:27:de:0a:57:d9:6c:d5:9d:5c:45:16:41:dd:82:ff:83:21:
         21:b1:35:76:60:db:fc:97:8e:c5:a7:01:3f:8b:25:3a:6a:8a:
         37:f6:34:cc:f4:03:ca:38:2d:37:b2:8f:52:40:d0:11:74:8d:
         ef:a3:9e:1b:5a:29:9b:6a:b5:07:9b:09:37:57:41:62:02:20:
         59:13:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:12:09 2024 by rpki-client on console-ams.rpki-client.org