Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3603c1e4-7d80-34d8-89eb-2bd75fc4a8fc.roa
File:                     3603c1e4-7d80-34d8-89eb-2bd75fc4a8fc.roa (raw, json)
Hash identifier:          3ajWdI/J3Raj+RW2CaQU9wY6Vl9DyLGP4GMEwv7xq70=
Subject key identifier:   E0:5E:F0:A5:3B:FA:45:52:B3:8E:F9:E5:E5:73:B4:8E:60:BD:13:55
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10FD8430503AB1AEBADE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3603c1e4-7d80-34d8-89eb-2bd75fc4a8fc.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        207.164.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:fd:84:30:50:3a:b1:ae:ba:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=c31a08b8-51b8-4b21-bdf1-ce4cd9608c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:97:56:20:1d:49:c5:5f:46:55:4d:2c:38:
                    60:ba:c3:f9:76:e5:48:66:b0:c2:49:43:ce:bb:9c:
                    d7:17:ab:48:21:07:56:69:4c:ca:9a:d6:fc:13:0f:
                    4a:86:af:28:67:00:ed:66:bb:60:7e:43:ac:bf:f8:
                    78:36:c2:51:93:be:0a:d6:0f:3a:56:6d:46:15:54:
                    ce:63:ca:31:e0:16:57:1a:a0:37:b5:33:6a:3e:f6:
                    38:d0:5b:0e:33:de:71:5f:2a:42:c3:90:26:2c:2e:
                    96:17:9d:38:ca:9c:1f:36:73:f1:63:53:a2:ff:11:
                    e7:f0:01:16:5b:16:fc:4b:21:33:e2:a6:dd:36:7b:
                    3c:20:1e:ab:34:7a:07:81:d1:11:97:10:ad:e4:fb:
                    fd:8c:40:84:cf:9a:06:95:d4:52:b2:39:ae:7c:11:
                    71:71:29:c5:28:8e:c9:a1:20:42:4a:b5:19:79:f7:
                    6f:d3:42:3e:db:3e:ac:15:b9:40:11:be:c5:19:ab:
                    52:e4:8c:3a:0e:08:6d:83:75:7d:e9:e4:9e:d5:5e:
                    84:1c:60:6e:d5:85:44:ab:5f:71:e1:7f:cb:42:8c:
                    b0:cb:42:a0:bc:65:f9:cb:7a:fb:32:36:52:8d:8b:
                    3e:fa:43:bb:7a:ed:19:75:3c:96:f8:2e:62:04:a1:
                    e3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:F0:A5:3B:FA:45:52:B3:8E:F9:E5:E5:73:B4:8E:60:BD:13:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3603c1e4-7d80-34d8-89eb-2bd75fc4a8fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:b7:b7:ee:33:c5:4d:56:25:af:88:02:f2:48:13:1b:3e:
         23:33:73:99:dd:50:ab:2d:fa:81:d0:b9:20:c3:64:a4:22:14:
         6c:8e:4d:a9:9d:e2:6e:8c:c1:e8:4b:ec:1f:51:2c:5b:11:75:
         9a:d7:28:d8:92:59:b1:fd:08:35:9c:b6:37:5f:5a:3d:ec:f4:
         48:5f:c8:be:46:19:5e:30:21:84:4c:81:9b:0b:eb:5e:85:20:
         c9:08:2e:b4:ff:17:2a:80:5d:ea:84:ca:5b:36:95:5d:53:74:
         2a:c0:87:99:3b:55:1a:67:77:bf:08:66:4b:f6:c6:9e:02:8c:
         c8:99:47:77:40:13:b3:65:8a:7b:02:26:94:f6:86:24:9b:2a:
         7a:da:c9:84:c3:51:f4:e9:0e:c1:14:d1:cc:35:82:91:a8:90:
         be:b0:e3:98:07:45:1b:ee:d5:bc:1b:bc:49:61:b7:b7:63:92:
         eb:fe:b4:41:f3:0c:a6:5a:ea:dd:1e:97:b5:02:00:2e:f4:6c:
         b1:09:97:d8:b4:5d:bd:ba:cd:fb:6a:75:cb:8e:bf:8d:5d:b5:
         ba:10:d4:50:77:5b:e7:ad:15:d6:ae:01:e5:b6:5e:03:90:8b:
         69:fe:9e:68:ff:40:9f:f7:3d:ac:78:5d:e3:42:7c:34:c9:3d:
         e0:6e:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org