Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/300adbd0-ee3f-31cb-abc5-07c4bf5470b0.roa
File:                     300adbd0-ee3f-31cb-abc5-07c4bf5470b0.roa (raw, json)
Hash identifier:          EJvHDVRRoqDEhSkZZ0r+8iTxRtZ3bilfuMgLd/NuU9s=
Subject key identifier:   65:E0:96:B1:1D:90:57:D6:82:BD:E0:6B:9C:A7:49:F8:EB:98:15:4F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B40A3818974486B54DA4E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/300adbd0-ee3f-31cb-abc5-07c4bf5470b0.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     32564
IP address blocks:        199.243.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:0a:38:18:97:44:86:b5:4d:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=51a83ebf-37ce-469e-9a51-4e7fa3181e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:82:aa:73:bb:8a:65:c0:72:15:f5:a6:6a:
                    68:e9:d6:12:04:2a:08:35:92:5e:41:72:60:63:83:
                    8b:6b:73:6b:33:be:6c:bf:f2:a7:04:5d:08:97:21:
                    21:7a:7f:bc:3c:c6:8f:3a:b6:a7:ba:43:bd:48:b0:
                    79:68:03:1f:ec:10:44:8a:6e:81:c5:66:79:44:3a:
                    89:e0:70:47:77:d9:03:08:82:f1:32:82:fd:39:94:
                    b0:e6:58:d1:6c:a8:b2:d4:5a:b4:d4:e8:12:b7:33:
                    74:e6:94:94:3d:78:d7:c1:1d:a2:43:70:84:83:fb:
                    c9:a4:f2:b4:82:19:84:7b:34:1d:b4:03:55:3a:d4:
                    ff:3e:d8:6d:bd:fd:15:11:76:b5:2a:3a:e3:72:8f:
                    87:78:c8:a1:3f:d6:bc:88:b9:b3:bc:95:79:94:83:
                    38:1b:97:0e:cf:43:51:38:e2:1e:d1:f2:53:83:b2:
                    f5:7b:32:72:84:14:29:a4:b4:1c:f2:ca:ad:f3:2b:
                    3d:df:74:70:bf:c5:ff:b1:94:1e:83:26:ee:0e:17:
                    f1:b4:f4:b1:78:9e:0c:50:42:c3:ef:1c:bb:3f:0d:
                    ef:dc:32:14:f2:0d:92:f8:bb:d5:54:75:cb:3b:d1:
                    55:0e:44:05:4d:39:c7:16:d4:c8:40:b2:b8:42:e2:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E0:96:B1:1D:90:57:D6:82:BD:E0:6B:9C:A7:49:F8:EB:98:15:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/300adbd0-ee3f-31cb-abc5-07c4bf5470b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:d7:fb:bc:f6:a6:76:24:15:34:ec:b7:a9:24:03:97:54:
         ea:1b:2f:cd:89:c3:a9:58:f3:e8:34:a6:98:a5:99:f5:37:8c:
         3b:ef:8b:df:df:08:c6:9f:1a:3a:37:9e:87:64:b4:24:5d:d5:
         37:b8:6c:8a:33:2f:0d:ed:e5:ba:14:73:25:4a:56:0c:ac:a9:
         23:f6:17:09:b6:d2:86:41:5e:29:61:38:2d:63:a4:36:f5:1c:
         ab:81:7f:05:46:d1:62:ee:2d:9c:65:96:c8:26:68:a8:7e:38:
         ba:03:21:ea:8c:4c:fd:7b:52:20:4e:08:75:2b:cc:02:f5:f8:
         dc:23:37:3d:d9:26:91:ac:1b:a1:b0:f4:9a:2f:5e:75:0a:d9:
         75:1c:96:b3:e7:21:16:15:9d:cf:6b:9c:bf:3a:e9:6c:31:94:
         10:6a:f6:fd:3a:18:e2:07:24:26:ff:93:05:2d:bb:e6:54:f5:
         f2:88:11:cc:33:1c:1b:cc:b9:c3:e2:b0:2e:6c:00:98:f4:58:
         3f:88:54:c4:17:44:f8:cb:3e:fa:d5:15:42:ae:84:fc:15:ad:
         18:40:67:5b:a8:6b:49:d0:00:26:28:e4:65:48:d9:4c:07:9e:
         00:4a:b4:52:94:df:48:d7:3a:d9:03:b8:b8:5d:4a:ee:67:78:
         5d:fe:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:37 2024 by rpki-client on console-fra.rpki-client.org