Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d689eb88-d780-34c7-8325-a963b8e4e75b.roa
File:                     d689eb88-d780-34c7-8325-a963b8e4e75b.roa (raw, json)
Hash identifier:          aSRzRH09CcDcLC70As5DFsQnv6ONmn1poh4TSACK8Fg=
Subject key identifier:   E7:8C:20:61:78:0C:82:92:C9:5A:15:23:49:D2:4D:43:D0:8F:A3:AD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B089A449BE127F867D500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d689eb88-d780-34c7-8325-a963b8e4e75b.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     30336
IP address blocks:        207.236.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:08:9a:44:9b:e1:27:f8:67:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=13425701-6724-4346-86a3-d47945c0ae00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:9f:28:23:bd:a4:3c:6f:6b:c1:2a:62:4c:
                    48:60:2a:e5:be:ae:de:9b:44:15:8f:1f:ff:ed:0c:
                    67:bf:7c:eb:a8:f3:6c:24:08:26:67:5f:a7:2c:8a:
                    c2:ac:15:b7:20:e1:fb:f1:ca:7a:cc:d2:16:05:f6:
                    46:f4:f2:ba:8f:49:7d:fc:8d:08:88:9f:6c:bd:f7:
                    6b:30:9f:0d:4d:5a:cf:de:99:ef:2d:cf:13:08:bb:
                    99:a8:72:ec:5d:16:3c:e7:09:45:f1:6d:f7:54:37:
                    34:0b:a6:ae:76:17:b1:44:46:53:fd:5d:84:28:ef:
                    94:7a:e6:c9:d6:a5:bf:4f:26:a9:fd:55:4f:ff:83:
                    17:44:07:3f:d0:80:c2:bf:23:9f:60:68:d3:df:35:
                    84:a0:27:08:19:b4:2f:f5:95:fa:8c:69:75:ad:84:
                    21:e6:66:17:db:7b:0b:7e:a5:21:1b:14:36:a0:46:
                    b1:5c:b8:51:7d:4c:cf:ff:0d:41:d3:c8:9a:dc:b1:
                    f8:f7:de:16:f7:22:83:50:3e:b1:58:a0:a6:3d:5d:
                    22:02:5d:f1:60:90:aa:82:f1:6f:e2:f7:83:55:6b:
                    91:28:87:3d:99:d4:7e:23:39:c2:c0:dd:70:75:5e:
                    eb:f2:76:72:d2:5d:5a:1a:1a:23:33:a8:28:5d:52:
                    54:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8C:20:61:78:0C:82:92:C9:5A:15:23:49:D2:4D:43:D0:8F:A3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d689eb88-d780-34c7-8325-a963b8e4e75b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:b8:e1:84:45:c8:46:eb:6e:75:cb:6e:5d:76:c8:ff:93:
         5e:e5:ac:7a:56:74:e2:e1:c0:c5:39:7a:ce:f7:3d:56:23:67:
         a7:10:91:45:49:89:eb:49:29:76:f0:71:9b:44:9d:93:50:6a:
         7a:3d:df:d7:58:07:ae:e8:2b:51:8f:0c:3e:49:2b:31:a2:8c:
         d5:72:f6:92:64:01:86:05:d4:33:04:39:0a:e9:0f:c5:27:ed:
         19:03:7e:4a:af:65:c2:30:17:c6:b8:11:f9:25:36:b7:5a:9b:
         72:86:c7:51:a7:0f:0c:3d:d3:19:e5:65:ca:63:91:eb:0b:6e:
         03:47:9f:d1:88:53:76:22:45:e2:bf:14:ab:c1:c2:b3:6d:d2:
         0a:b1:ae:9b:ce:bc:45:06:d9:fc:fd:ec:55:a1:1e:57:1f:5b:
         d0:89:8a:0b:97:15:88:53:08:ac:6e:f2:59:e5:23:28:54:fc:
         d7:7c:7f:71:c6:23:4e:d3:ab:1e:84:e7:3c:dc:5a:08:77:7f:
         4e:3e:89:ca:78:e7:de:ed:de:32:b7:87:bd:ec:d7:d5:f1:44:
         1b:d0:3e:37:12:2d:18:99:8f:e6:4a:2d:b0:14:90:ff:24:a9:
         8c:04:3e:80:19:2e:14:a8:86:34:ab:9e:5b:18:34:14:ca:ad:
         ac:b3:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:12:09 2024 by rpki-client on console-ams.rpki-client.org