Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d00d476-0efd-356f-84bd-514aa50f9b77.roa
File:                     0d00d476-0efd-356f-84bd-514aa50f9b77.roa (raw, json)
Hash identifier:          HRNx3sfdoitVOLSjk5rOJvY4zRRLZ5hypemjHxo5QeA=
Subject key identifier:   6E:DF:86:19:5C:A3:1F:5D:F0:0B:EC:EF:38:65:F9:D9:D0:82:21:BE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10608D7BBC566721B65500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d00d476-0efd-356f-84bd-514aa50f9b77.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        206.47.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:60:8d:7b:bc:56:67:21:b6:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=be50165b-1731-4331-b565-a2ef58ea9043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:d6:53:99:b5:87:27:3d:02:e1:8b:7a:70:
                    18:9f:a7:5b:5b:26:f1:75:ea:6e:d7:77:da:cc:77:
                    4c:42:56:a0:76:b0:ad:7a:d9:68:e5:ab:e3:45:a1:
                    2e:bf:93:72:9b:f7:b7:b9:e1:57:fc:27:ff:41:f4:
                    d1:0d:97:cf:72:f4:de:bb:27:aa:7c:43:ba:14:1e:
                    ba:88:58:a2:17:38:9d:69:a0:5c:a0:25:19:20:d3:
                    36:97:d0:1e:b1:73:31:50:c6:f7:3d:75:12:dd:39:
                    5d:fd:86:d5:31:4f:34:80:8e:cf:6a:3f:4d:42:54:
                    b1:d5:03:fd:bc:a6:dc:cb:ce:fb:c7:1c:6a:98:42:
                    32:15:67:28:f8:a6:ee:56:6c:e4:b2:ac:f9:ce:b7:
                    14:06:62:c6:50:93:52:62:6d:96:04:bc:b2:a8:89:
                    2c:12:a3:8b:cf:ec:e3:13:d6:d8:f8:81:17:42:f4:
                    24:73:ce:04:7f:1d:74:de:c3:69:fa:25:a2:f4:7c:
                    7c:81:f7:65:7f:d6:ac:15:4d:18:d9:3b:a8:5c:90:
                    5f:68:f9:8d:73:17:e3:ba:42:6f:36:f6:c4:1d:18:
                    ba:5a:d7:ad:fc:e6:da:29:e4:96:7f:b5:17:db:e5:
                    17:4c:6c:66:da:4e:d7:39:99:ef:53:90:06:a4:68:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:86:19:5C:A3:1F:5D:F0:0B:EC:EF:38:65:F9:D9:D0:82:21:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d00d476-0efd-356f-84bd-514aa50f9b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:2b:91:c4:ca:75:c0:b3:5a:0c:46:b3:17:7c:ee:54:df:
         e1:15:1b:2b:00:d4:42:3e:19:f0:bd:00:02:3f:42:a7:35:df:
         3a:55:04:34:b4:bd:e0:68:65:16:7e:58:8b:ee:af:b0:96:d1:
         69:f1:53:0c:e7:59:b9:d9:a3:68:46:a2:46:cb:3e:25:a1:f9:
         03:ba:68:f6:81:8b:fa:11:ef:b1:80:7c:69:9b:22:f9:a1:fd:
         d7:cf:57:75:9f:2c:f0:4f:7a:65:69:f4:98:c6:3b:0f:65:19:
         60:4a:c9:81:34:17:4a:8d:28:a6:40:50:4b:dd:43:dd:d4:6a:
         b9:49:64:0e:1d:4d:42:c1:a2:04:76:d0:5e:26:46:1c:2d:6f:
         2b:04:27:16:75:f3:1a:d9:58:f9:5f:87:69:62:08:a5:89:b7:
         df:29:af:51:51:50:eb:b7:47:55:79:63:71:a8:f9:bd:5c:89:
         a7:0d:a4:f5:5b:70:e3:31:27:2b:68:61:76:85:5b:76:df:93:
         b3:43:ae:a0:56:61:39:75:ec:df:da:3e:33:59:f8:98:a2:a4:
         6d:1f:e4:a6:8e:e3:9b:65:eb:63:c4:2b:21:9d:85:44:70:13:
         32:15:cc:56:69:b3:ef:46:bb:9c:67:a8:de:56:9a:ab:87:1f:
         bb:69:e2:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEGCNe7xWZyG2VQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
YmU1MDE2NWItMTczMS00MzMxLWI1NjUtYTJlZjU4ZWE5MDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs3WU5m1hyc9AuGLenAYn6dbWybxdepu13fa
zHdMQlagdrCtetlo5avjRaEuv5Nym/e3ueFX/Cf/QfTRDZfPcvTeuyeqfEO6FB66
iFiiFzidaaBcoCUZINM2l9AesXMxUMb3PXUS3Tld/YbVMU80gI7Paj9NQlSx1QP9
vKbcy877xxxqmEIyFWco+KbuVmzksqz5zrcUBmLGUJNSYm2WBLyyqIksEqOLz+zj
E9bY+IEXQvQkc84Efx103sNp+iWi9Hx8gfdlf9asFU0Y2TuoXJBfaPmNcxfjukJv
NvbEHRi6Wtet/ObaKeSWf7UX2+UXTGxm2k7XOZnvU5AGpGjmwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7fhhlcox9d8Avs7zhl+dnQgiG+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGQwMGQ0NzYtMGVmZC0z
NTZmLTg0YmQtNTE0YWE1MGY5Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi8VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAfK5HEynXAs1oMRrMXfO5U3+EVGysA1EI+GfC9AAI/Qqc13zpVBDS0
veBoZRZ+WIvur7CW0WnxUwznWbnZo2hGokbLPiWh+QO6aPaBi/oR77GAfGmbIvmh
/dfPV3WfLPBPemVp9JjGOw9lGWBKyYE0F0qNKKZAUEvdQ93UarlJZA4dTULBogR2
0F4mRhwtbysEJxZ18xrZWPlfh2liCKWJt98pr1FRUOu3R1V5Y3Go+b1ciacNpPVb
cOMxJytoYXaFW3bfk7NDrqBWYTl17N/aPjNZ+JiipG0f5KaO45tl62PEKyGdhURw
EzIVzFZps+9Gu5xnqN5WmquHH7tp4sQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org