Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1692641f-2b1b-3e63-800a-e9041264d159.roa
File:                     1692641f-2b1b-3e63-800a-e9041264d159.roa (raw, json)
Hash identifier:          89vRCxkIxxE9zxKTCMnOu7PtnukfME6cNCvgAtT8yIc=
Subject key identifier:   68:74:4A:74:14:06:D3:BF:D4:F6:EF:A7:8C:90:6A:7F:AF:AF:BA:6A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11925563D1A4692831E070
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1692641f-2b1b-3e63-800a-e9041264d159.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     30336
IP address blocks:        207.236.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:92:55:63:d1:a4:69:28:31:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=68a16553-8356-4ffc-b413-3a9b4c722833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:e1:d9:65:7e:24:df:79:61:3a:b3:68:da:
                    09:12:69:e9:c0:cc:f8:e6:42:ec:d0:a7:b1:57:52:
                    52:47:f2:29:b1:04:fa:1d:4c:f9:a6:95:90:71:99:
                    a1:5b:48:28:b0:b7:a2:6d:4a:cd:bc:8e:64:93:13:
                    c0:ae:48:97:e9:aa:ce:aa:6e:31:52:41:d7:9e:6b:
                    e2:0e:b1:c9:a4:af:07:16:80:cb:20:8a:23:d4:dd:
                    61:3b:af:c6:1f:d2:db:84:9e:72:8f:74:ff:f1:83:
                    01:fb:cf:d7:d8:9c:a9:9b:0f:85:95:b5:91:89:56:
                    c9:67:16:cb:98:ee:07:03:d0:7a:59:c4:86:b4:00:
                    cf:4e:74:8c:ca:a0:06:68:e1:0a:77:04:64:ab:ee:
                    d3:08:8a:ee:d1:5d:78:00:5b:63:dd:8a:c6:31:2b:
                    c1:2f:4a:c1:ae:44:07:f0:70:2e:a5:ee:ff:42:77:
                    fe:81:92:2e:9b:02:ad:8a:f9:2a:ed:72:28:c6:87:
                    fe:93:cb:b8:89:b7:58:27:70:bf:62:51:c4:b8:04:
                    c6:a1:76:e1:8f:0d:a3:02:17:2a:52:93:7a:38:f1:
                    8c:81:4e:f8:c5:0c:f0:0e:7d:c7:8e:23:50:85:64:
                    05:d3:14:d7:d7:16:b1:22:18:d8:b5:b8:81:6c:43:
                    86:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:4A:74:14:06:D3:BF:D4:F6:EF:A7:8C:90:6A:7F:AF:AF:BA:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1692641f-2b1b-3e63-800a-e9041264d159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:30:d0:d1:14:cb:b6:51:2e:99:d6:83:de:9c:69:d0:0a:1f:
         35:51:72:15:f9:93:21:26:b7:26:86:08:30:60:08:c9:05:52:
         60:ba:be:73:bb:48:f2:ef:aa:bf:df:96:c4:22:dc:29:e2:ab:
         2c:4a:9f:0a:52:2f:4b:8b:c0:e3:da:98:98:8c:99:84:4f:db:
         6e:6c:01:d0:c6:48:f3:8b:51:f5:8e:bf:28:43:c6:2d:32:ac:
         c1:5b:78:51:8e:50:f4:9b:84:95:56:41:1d:84:8e:2c:56:f5:
         3e:bc:fc:b2:f2:e4:d4:67:fa:0b:62:13:e7:bd:98:20:05:f1:
         f5:54:4d:20:0c:f8:f7:f7:ec:35:32:31:94:fb:8c:bd:47:2b:
         11:90:2c:73:4c:7b:71:24:2e:fb:0f:ff:b3:13:99:71:89:65:
         24:9e:09:4a:a8:ca:37:59:33:a9:0e:64:51:26:45:82:67:7c:
         80:93:85:34:48:95:6f:ce:43:56:71:36:05:3a:a7:49:49:83:
         63:d8:1a:01:5a:92:fb:c5:5d:02:d0:61:19:18:b4:99:e8:2a:
         6a:e9:4e:d3:93:8f:dd:28:60:4b:2c:b9:89:15:1e:23:d8:a8:
         43:68:97:a2:c3:1b:7e:06:62:01:6f:e9:8a:7f:4c:09:b0:77:
         14:b8:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org