Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/197ad7c3-cbbd-3afa-8218-41808f0d8070.roa
File:                     197ad7c3-cbbd-3afa-8218-41808f0d8070.roa (raw, json)
Hash identifier:          LFir2DRqqWm6Ac9CaxQE3r+VvBpq3SlPNhTnhpP2luo=
Subject key identifier:   21:C8:63:02:84:E4:3C:2E:C9:63:40:40:25:4D:06:FF:19:40:9C:1F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B124897865343AEBC9FBC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/197ad7c3-cbbd-3afa-8218-41808f0d8070.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        216.209.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:48:97:86:53:43:ae:bc:9f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=8028c789-399f-4542-a9b6-37bede7ff7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:0b:a2:e1:8b:f1:33:2c:ef:e2:fb:5d:01:
                    0c:1a:50:b3:7d:64:16:6c:bd:0b:e3:d9:f3:84:7b:
                    86:0c:48:15:eb:71:22:e8:55:d0:fc:63:b9:53:95:
                    ac:39:34:55:a9:ae:b3:31:ce:1e:bc:7b:af:a7:0b:
                    a9:6a:28:89:bb:95:18:87:78:4b:14:30:d0:13:08:
                    61:ad:fc:30:49:a6:37:bd:ec:e8:8f:8e:97:b8:76:
                    ad:0e:f9:25:ec:1b:6e:ff:d3:ac:78:e4:02:f8:56:
                    92:09:46:11:d7:73:88:12:55:b0:d1:2d:16:75:dc:
                    6e:12:57:0a:3e:d7:90:21:cf:20:49:1d:13:71:a3:
                    2b:ba:f2:57:87:ce:29:fd:5c:63:89:bd:3d:94:ca:
                    e3:14:91:3a:8f:59:95:8b:78:85:c4:d2:2a:db:65:
                    64:9a:b5:9a:09:eb:b4:fa:f7:1f:9a:09:e0:95:ab:
                    27:08:0e:41:6c:1a:65:01:02:23:bd:17:c6:e4:60:
                    0d:52:eb:bc:ae:3d:9a:4e:19:80:00:08:69:58:42:
                    7f:7c:7a:f3:32:18:6b:c6:e9:2a:d3:bf:69:81:05:
                    0b:f4:b0:67:c6:13:f1:a3:77:ac:02:84:58:63:0c:
                    40:ae:ff:ae:87:18:68:28:92:a8:ed:a4:a4:7f:3a:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:63:02:84:E4:3C:2E:C9:63:40:40:25:4D:06:FF:19:40:9C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/197ad7c3-cbbd-3afa-8218-41808f0d8070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:30:e0:81:bf:a2:68:6f:3a:e1:ff:e3:0b:e7:89:21:b0:06:
         46:ed:f7:c8:77:b7:74:87:6d:c0:6b:a9:d9:02:1e:11:a1:ae:
         5f:28:14:2d:8d:c6:d9:47:db:b5:dc:e6:38:10:8b:9f:4d:89:
         aa:c5:4a:ad:18:b7:cd:ff:d1:c9:85:05:53:a8:c1:b9:6a:9a:
         f9:a9:80:2d:bb:ef:11:44:f4:9d:25:cb:95:68:c9:d6:be:71:
         d3:29:b9:ef:c0:d9:83:f5:c4:4d:c0:45:56:08:99:89:c6:25:
         d0:ba:a6:09:81:73:b8:f9:46:09:bd:8d:33:b1:13:fc:c0:ba:
         fe:c4:1f:1a:97:b2:0f:19:00:0b:f0:cb:d8:18:9c:a2:f3:38:
         ca:6e:36:28:4c:1d:5c:a0:ab:8d:b6:32:6a:a1:99:0a:5b:af:
         63:bb:d7:dc:9d:d2:f1:c5:4c:37:93:e0:b6:a4:85:74:60:28:
         c6:64:f1:a0:bb:0e:e9:22:a4:09:e3:ae:cb:09:e2:45:a4:07:
         d2:b1:ce:fc:70:f4:68:f4:61:d3:45:0d:ec:33:3c:59:ca:bf:
         b5:dc:1e:ff:96:59:8e:70:1b:80:b3:62:17:4e:d9:ed:f7:57:
         1c:62:5a:6a:9d:79:e7:40:81:d8:dd:42:9b:37:63:35:24:71:
         05:da:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org