Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05400df3-dddc-35df-9a62-2666a3d25fed.roa
File:                     05400df3-dddc-35df-9a62-2666a3d25fed.roa (raw, json)
Hash identifier:          O1ex6i1NQnTNSZ3SrZxBTrB/sWznlu+eZMBpon0OYEg=
Subject key identifier:   9A:03:FF:7F:8C:E8:1F:D0:F7:61:9A:F6:0F:84:88:1E:57:2D:D5:A4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B119DE6E23F8880065B932D
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05400df3-dddc-35df-9a62-2666a3d25fed.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        209.71.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:9d:e6:e2:3f:88:80:06:5b:93:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b76dce97-ed37-4cdb-9aea-3ddc48a07799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:25:1c:fa:d6:bd:23:24:1e:ed:d7:66:49:6a:
                    c7:b9:e9:c4:d9:3d:27:92:0f:37:29:ab:66:78:e1:
                    18:38:45:dc:70:e0:d7:5b:8e:4c:8d:4f:9c:42:d0:
                    2f:fb:02:fb:ef:dc:c2:c7:b0:20:7f:03:71:4d:e8:
                    8b:55:d6:8f:36:b9:f0:16:e1:e2:d3:c5:4e:65:b2:
                    80:b4:c9:fc:ba:53:d5:2f:0c:34:3f:af:20:12:38:
                    6c:59:49:b8:d6:bd:e0:18:7b:4e:c8:06:54:71:83:
                    08:8a:15:48:cf:ac:f8:e5:d3:e4:43:b7:f8:7d:42:
                    be:cf:31:cb:69:20:c9:c5:e7:88:4c:f2:68:c4:19:
                    71:3e:7f:d6:5e:29:9f:2d:56:69:c0:79:c9:f0:e0:
                    52:fe:d0:39:58:1c:ea:fe:fa:e4:cf:33:2a:67:05:
                    3d:9e:7c:0c:a2:97:33:e8:5c:7f:82:8c:a2:6d:66:
                    57:71:7d:43:b7:74:dc:42:a4:a9:a5:6b:6d:bf:5a:
                    fd:58:db:69:8c:6b:c6:07:ce:d2:65:07:7d:2b:d3:
                    ad:0d:ab:be:ff:9b:f4:be:51:1f:b7:ca:ea:fe:66:
                    e2:1b:9e:24:6d:32:9e:dc:5c:d7:07:48:ae:d0:15:
                    43:7f:ce:cd:3b:05:72:3a:5a:4f:c7:e7:17:76:b4:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:FF:7F:8C:E8:1F:D0:F7:61:9A:F6:0F:84:88:1E:57:2D:D5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05400df3-dddc-35df-9a62-2666a3d25fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.71.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:4d:ad:17:10:f6:22:b4:0e:11:67:66:b8:34:de:0b:01:
         32:75:be:f2:6d:d4:b9:25:63:12:21:53:7a:5b:77:49:d0:c6:
         45:b5:ef:63:90:d4:77:dd:de:3c:9b:86:c8:15:f3:71:55:e2:
         9d:92:9c:ed:3b:c7:36:45:5e:63:07:77:bb:84:28:b1:e3:ab:
         35:5e:a2:94:c3:f2:7e:1a:05:db:12:22:2b:9d:af:27:71:af:
         1c:55:cd:9e:86:e8:ae:b8:1a:97:e4:c1:14:4b:cb:c4:be:62:
         61:ff:35:64:26:a9:d5:8e:b0:1a:97:4b:2d:93:09:fc:b7:7b:
         57:a2:bc:35:5e:0e:71:59:20:67:25:46:dd:76:a6:df:27:0e:
         33:cb:22:e4:8d:a7:a5:a5:3d:fa:42:48:02:da:3e:d2:d8:72:
         ef:17:1e:66:ff:fe:f5:1f:8f:2d:a1:c9:09:16:17:22:81:c5:
         6a:b3:e4:29:b8:c3:c7:f2:b0:1b:91:01:0e:11:ca:65:a8:ef:
         ba:ce:01:4c:ec:cf:01:09:d7:1e:10:4e:f5:1b:84:63:3a:4e:
         7e:3b:1a:02:e2:95:71:86:97:eb:56:d5:5a:46:26:aa:d3:eb:
         09:36:0a:8d:50:aa:82:37:2c:46:58:56:4e:a0:e6:af:44:b8:
         0c:63:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org