Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbc38092-c420-33c7-9048-49eb79362657.roa
File:                     cbc38092-c420-33c7-9048-49eb79362657.roa (raw, json)
Hash identifier:          X0YjAZUS7/wdTEtKIZStM5aqiHJUCAv4YI5cfSzWzxY=
Subject key identifier:   92:95:3C:A2:AD:C9:DC:27:36:CF:20:BF:EB:DD:32:7A:AE:EA:26:C0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D29EC5FD3AD1DC8FA51B580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbc38092-c420-33c7-9048-49eb79362657.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:ec:5f:d3:ad:1d:c8:fa:51:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=fe795e39-c45c-4d98-b73f-967400aa304a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:7a:cd:c4:2a:1c:d2:ef:e3:6d:c9:d8:57:
                    64:7e:d4:a0:b5:53:bf:13:07:57:c8:c9:e1:4a:b6:
                    d4:eb:6f:f5:d4:8f:cb:e6:81:14:9c:4e:50:4d:0d:
                    47:d7:36:9e:d9:bc:39:35:9e:4e:33:08:34:3d:32:
                    d2:b6:6f:f9:82:54:b6:e4:02:98:f4:e1:d2:1b:d6:
                    e6:00:4c:f3:a9:21:e2:e2:67:de:6b:fc:c4:79:1c:
                    51:63:89:69:fd:de:73:70:75:94:30:6e:9f:a8:bd:
                    89:14:b6:d3:ec:9f:67:28:e0:e5:a8:53:b2:a0:15:
                    99:e6:cf:8b:89:33:7a:7e:66:db:97:75:28:b4:4e:
                    9b:e9:52:d3:21:73:51:9e:35:f1:0b:17:c2:ea:5b:
                    bf:27:0a:b8:28:a4:a4:f7:9b:fe:43:72:ee:1f:be:
                    bc:0e:69:95:6b:71:bf:ac:93:2b:5a:b4:19:11:7c:
                    cd:98:17:6b:88:3c:93:dd:55:44:3a:ef:f6:5e:b4:
                    dc:9f:d9:d3:d7:f5:a6:c2:1c:88:0a:a7:f3:e1:18:
                    26:d2:1e:90:6f:56:9a:83:fc:e7:36:b7:45:e1:90:
                    1e:e0:3c:95:bf:45:0e:d2:56:07:be:a5:9a:12:ef:
                    63:60:d5:89:97:84:79:8f:2a:5c:4e:64:4c:04:2d:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:3C:A2:AD:C9:DC:27:36:CF:20:BF:EB:DD:32:7A:AE:EA:26:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cbc38092-c420-33c7-9048-49eb79362657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c5:16:f1:a2:72:cf:83:6f:9c:a4:33:be:31:83:05:c2:a0:
         db:45:e6:ce:0d:9e:6d:8e:92:03:2a:9e:66:0e:d7:be:3d:e0:
         c0:7e:a1:56:51:ec:46:17:43:98:ba:4b:98:c2:97:1b:ee:04:
         b0:f8:b6:7e:c9:63:9d:80:af:fd:bc:28:57:75:fb:38:f0:aa:
         c1:19:5e:ae:70:f8:db:5c:ea:2c:11:91:d7:12:b3:8f:8f:b3:
         33:21:60:64:c0:fb:5f:dc:75:56:f4:da:2e:8e:70:d2:a4:f6:
         96:59:4e:91:4f:9f:37:d7:6c:c2:87:b7:c2:7f:49:27:2c:6e:
         26:df:45:6f:d7:78:f8:60:80:92:4a:25:59:1d:5c:f7:2c:4c:
         d2:31:97:b2:58:b3:3a:27:78:ae:cc:4b:43:81:3a:0d:78:3f:
         e2:2f:58:28:30:08:0b:ca:84:10:f9:29:75:96:a3:b0:34:de:
         e2:de:da:07:45:66:e1:16:84:28:45:6e:ad:40:b4:7b:50:f4:
         a5:5e:07:59:66:21:a9:54:f2:82:34:d1:c7:c9:b6:34:18:97:
         70:c0:b9:0d:97:8b:e3:d6:50:ee:8a:cc:ba:3a:bd:55:c7:19:
         3e:f7:a6:ee:84:f5:a6:f8:6f:1c:ac:40:f2:2b:b7:5f:7c:58:
         a6:db:5c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:12:09 2024 by rpki-client on console-ams.rpki-client.org