Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09d4927e-3439-3acd-82d8-2a7a1b2b4b45.roa
File:                     09d4927e-3439-3acd-82d8-2a7a1b2b4b45.roa (raw, json)
Hash identifier:          AeQEAbSMI2bzGJQRyU76cJ/HyH1WcM6qhctPwBEEZUs=
Subject key identifier:   EC:5E:2C:35:F4:CD:81:68:7B:F8:FA:BB:B6:59:08:3C:51:8D:5C:B3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1189709CD3D89455C39E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09d4927e-3439-3acd-82d8-2a7a1b2b4b45.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     30336
IP address blocks:        207.236.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:89:70:9c:d3:d8:94:55:c3:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=f1c6f05d-a429-480d-bf8d-faa6fd8eee95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:77:36:28:96:da:c9:33:e7:5d:f0:9f:54:
                    ca:88:09:de:34:7d:ce:4b:f0:d1:e3:73:12:d4:6c:
                    0d:f4:64:06:92:bf:ac:b1:e1:1c:fb:b7:12:86:10:
                    19:77:19:ac:bc:65:14:dc:9f:c6:31:23:b1:ad:2d:
                    17:ad:74:c6:87:63:05:5e:f5:ee:2b:30:d3:e5:19:
                    d9:38:26:97:19:27:9e:68:a6:2f:38:d0:8c:cd:1a:
                    16:49:ff:74:b1:d0:41:6e:8b:5a:9b:4c:0b:08:57:
                    69:da:84:57:13:09:d9:21:40:30:88:8d:e7:e1:c3:
                    f4:60:29:fc:ee:87:84:cb:0b:ad:56:b0:59:56:e4:
                    8b:b7:2b:0e:ef:b1:26:7d:91:c0:46:8c:13:7e:98:
                    eb:a7:cf:61:98:bd:4f:4c:71:44:2c:e2:60:9a:19:
                    e9:25:2e:18:60:c5:41:4e:44:e4:87:b9:04:e9:53:
                    75:d8:3d:69:48:b0:73:68:03:c3:d6:87:17:fe:9f:
                    3f:64:71:d8:ac:18:c7:ef:d9:cb:36:1d:a7:4b:57:
                    d2:b8:c7:31:77:6b:35:4c:4a:1a:0d:24:00:a1:94:
                    51:72:b6:48:09:7b:60:ff:6c:3b:c5:56:88:de:2b:
                    93:33:64:ee:4e:f5:f7:6a:f2:95:0c:a8:2c:21:02:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:2C:35:F4:CD:81:68:7B:F8:FA:BB:B6:59:08:3C:51:8D:5C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/09d4927e-3439-3acd-82d8-2a7a1b2b4b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:cb:35:8e:0d:fe:f1:93:d1:8c:eb:bb:71:47:e3:a0:97:
         f6:3c:36:ba:36:e3:4b:8e:bd:ec:6f:95:06:46:b2:bb:8f:d9:
         bf:74:3d:d0:78:3f:62:d4:f4:4b:b1:22:45:29:b3:9a:aa:f6:
         72:7c:9c:e2:4b:93:ff:a9:1a:16:61:ba:74:35:52:a2:35:1e:
         c2:86:35:c4:8b:70:b1:7a:05:66:0c:13:f3:dd:ad:05:f5:b4:
         f9:42:6f:b3:ca:d7:66:57:ef:e4:d9:f3:82:a3:94:cf:53:4e:
         06:d0:06:79:ec:62:6d:1d:0a:be:51:ec:77:97:94:89:95:2a:
         ec:b6:a9:14:8c:ae:56:f0:dd:01:96:cb:3a:48:0b:32:5a:4b:
         1c:78:b2:af:ef:f3:0b:6b:80:87:ec:c5:0a:fa:a5:6b:92:11:
         e0:db:00:d6:cc:e3:41:d8:f3:15:c2:0e:7f:61:cf:85:80:18:
         96:3a:58:b3:60:c5:58:5a:4d:fb:6d:01:3b:37:dd:c7:6d:f8:
         ff:30:a9:fa:86:fa:a9:a5:0a:5b:33:c2:73:6e:01:d7:51:bb:
         a3:cc:58:eb:94:ef:91:c4:2e:67:96:ed:f4:dc:5c:1e:da:52:
         df:f2:7d:a1:30:0a:8e:89:a1:fa:46:f2:27:1c:56:09:da:e0:
         9d:d0:fc:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEYlwnNPYlFXDnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZjFjNmYwNWQtYTQyOS00ODBkLWJmOGQtZmFhNmZkOGVlZTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXZ3NiiW2skz513wn1TKiAneNH3OS/DR43MS
1GwN9GQGkr+sseEc+7cShhAZdxmsvGUU3J/GMSOxrS0XrXTGh2MFXvXuKzDT5RnZ
OCaXGSeeaKYvONCMzRoWSf90sdBBbotam0wLCFdp2oRXEwnZIUAwiI3n4cP0YCn8
7oeEywutVrBZVuSLtysO77EmfZHARowTfpjrp89hmL1PTHFELOJgmhnpJS4YYMVB
TkTkh7kE6VN12D1pSLBzaAPD1ocX/p8/ZHHYrBjH79nLNh2nS1fSuMcxd2s1TEoa
DSQAoZRRcrZICXtg/2w7xVaI3iuTM2TuTvX3avKVDKgsIQKfGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxeLDX0zYFoe/j6u7ZZCDxRjVyzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDlkNDkyN2UtMzQzOS0z
YWNkLTgyZDgtMmE3YTFiMmI0YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+zoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGgyzWODf7xk9GM67txR+Ogl/Y8Nro240uOvexvlQZGsruP2b90PdB4
P2LU9EuxIkUps5qq9nJ8nOJLk/+pGhZhunQ1UqI1HsKGNcSLcLF6BWYME/PdrQX1
tPlCb7PK12ZX7+TZ84KjlM9TTgbQBnnsYm0dCr5R7HeXlImVKuy2qRSMrlbw3QGW
yzpICzJaSxx4sq/v8wtrgIfsxQr6pWuSEeDbANbM40HY8xXCDn9hz4WAGJY6WLNg
xVhaTfttATs33cdt+P8wqfqG+qmlClszwnNuAddRu6PMWOuU75HELmeW7fTcXB7a
Ut/yfaEwCo6JofpG8iccVgna4J3Q/JE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org