Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/321ce3fa-424b-3b07-9b60-1a795d7303c0.roa
File:                     321ce3fa-424b-3b07-9b60-1a795d7303c0.roa (raw, json)
Hash identifier:          T+ZT8Y/kMLZLj+Gi0OewMGyAgIK7AJztcGyaomVMfIE=
Subject key identifier:   F2:C8:D8:F9:02:62:F8:82:21:8C:31:92:33:67:E1:93:75:E8:E3:0A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4CE094B415ABBD084C380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/321ce3fa-424b-3b07-9b60-1a795d7303c0.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        206.172.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:ce:09:4b:41:5a:bb:d0:84:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=e1e53f64-5fe0-44e0-9edb-852f679b46ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:b0:60:3c:66:1a:38:47:ab:6c:e6:41:1c:
                    82:11:17:84:e3:1c:11:e6:ee:6e:92:e1:ba:ca:bd:
                    8c:63:83:26:5b:5e:0d:e7:6a:db:94:66:c0:db:a7:
                    dd:a6:4e:02:a7:3f:1b:3a:2d:db:67:4e:76:93:36:
                    8a:d2:d2:af:02:ea:29:35:eb:61:db:1d:4f:5e:cd:
                    23:b6:2d:01:b5:93:5a:e3:3c:0c:1b:78:6d:ca:33:
                    48:24:5e:19:e8:3f:97:b8:6f:8c:7e:f4:94:d5:92:
                    96:ee:06:ec:98:d0:6e:30:b1:d0:6e:06:4d:35:9a:
                    f6:b6:b0:f2:94:60:b5:57:00:81:ca:28:a8:7e:5f:
                    9a:0f:92:f2:58:a2:a5:fc:1d:19:35:d2:4c:74:77:
                    97:aa:bf:66:5d:e0:bf:40:ec:1b:4e:59:99:f0:92:
                    d7:a3:8d:7e:fb:b5:11:e6:f5:fa:7a:36:32:cf:79:
                    71:21:46:83:1c:ec:85:47:14:65:f7:7e:c4:11:69:
                    c5:6c:f8:82:56:c4:50:9c:c5:29:1f:14:83:5c:6a:
                    94:3e:8a:61:0b:3f:fb:bd:8f:7f:94:52:a0:2a:e1:
                    9e:38:e4:6e:11:7a:09:83:89:95:c5:92:cc:49:58:
                    e5:90:31:36:26:58:0f:91:2a:4e:72:04:92:92:dc:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C8:D8:F9:02:62:F8:82:21:8C:31:92:33:67:E1:93:75:E8:E3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/321ce3fa-424b-3b07-9b60-1a795d7303c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:1d:9c:3d:f4:bc:94:1e:67:13:7e:ba:81:11:0e:8e:fa:
         6c:50:00:47:b4:d0:2a:e2:02:1b:4c:c3:b4:8d:26:78:b7:f0:
         0b:e5:8c:04:71:b4:47:df:d7:7a:b8:90:4d:11:b9:39:c3:01:
         0f:04:7c:ac:80:ff:93:12:2c:ed:77:04:d9:45:76:14:56:8c:
         d6:87:93:69:b3:14:56:ca:2d:76:5a:82:94:be:93:a3:35:51:
         cb:13:95:dc:0b:cd:16:34:b7:be:c9:77:d0:c3:96:bf:e8:88:
         52:95:e3:ce:f7:af:d1:38:0a:fb:09:f3:d9:5a:e3:ba:24:14:
         30:23:fc:ab:1c:fb:de:fa:aa:f7:ea:24:f0:dd:b3:f1:4a:fd:
         49:f4:ef:15:e5:31:89:99:0b:ab:69:52:a0:39:4c:d2:52:8f:
         f2:40:3a:04:2b:6d:c1:27:d3:f7:2c:d0:fb:ce:a1:fc:9f:fe:
         84:f9:25:b8:85:8d:d3:68:fe:bd:ef:93:97:5c:b5:86:22:24:
         fc:29:f9:de:ca:7f:90:78:57:92:01:cf:b0:af:f2:71:2d:43:
         8c:b5:4f:69:be:83:75:4b:77:83:76:8b:64:0d:e6:38:9c:2f:
         58:a4:4c:3b:fc:99:ba:4e:a0:0b:3b:ff:84:bb:b5:ab:63:74:
         d7:76:2c:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtM4JS0Fau9CEw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTFlNTNmNjQtNWZlMC00NGUwLTllZGItODUyZjY3OWI0NmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuSwYDxmGjhHq2zmQRyCEReE4xwR5u5ukuG6
yr2MY4MmW14N52rblGbA26fdpk4Cpz8bOi3bZ052kzaK0tKvAuopNeth2x1PXs0j
ti0BtZNa4zwMG3htyjNIJF4Z6D+XuG+MfvSU1ZKW7gbsmNBuMLHQbgZNNZr2trDy
lGC1VwCByiiofl+aD5LyWKKl/B0ZNdJMdHeXqr9mXeC/QOwbTlmZ8JLXo41++7UR
5vX6ejYyz3lxIUaDHOyFRxRl937EEWnFbPiCVsRQnMUpHxSDXGqUPophCz/7vY9/
lFKgKuGeOORuEXoJg4mVxZLMSVjlkDE2JlgPkSpOcgSSktzs5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLI2PkCYviCIYwxkjNn4ZN16OMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzIxY2UzZmEtNDI0Yi0z
YjA3LTliNjAtMWE3OTVkNzMwM2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqwRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqeHZw99LyUHmcTfrqBEQ6O+mxQAEe00CriAhtMw7SNJni38AvljARx
tEff13q4kE0RuTnDAQ8EfKyA/5MSLO13BNlFdhRWjNaHk2mzFFbKLXZagpS+k6M1
UcsTldwLzRY0t77Jd9DDlr/oiFKV4873r9E4CvsJ89la47okFDAj/Ksc+976qvfq
JPDds/FK/Un07xXlMYmZC6tpUqA5TNJSj/JAOgQrbcEn0/cs0PvOofyf/oT5JbiF
jdNo/r3vk5dctYYiJPwp+d7Kf5B4V5IBz7Cv8nEtQ4y1T2m+g3VLd4N2i2QN5jic
L1ikTDv8mbpOoAs7/4S7tatjdNd2LFY=
-----END CERTIFICATE-----
Generated at Fri May 17 02:02:33 2024 by rpki-client on console-ams.rpki-client.org