Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40f73a4e-ba5c-3fa9-80d6-669b842e9b11.roa
File:                     40f73a4e-ba5c-3fa9-80d6-669b842e9b11.roa (raw, json)
Hash identifier:          HAB3Erl57TVM7ITMpqdPPFcoWYplGUuuKV8ZvUuEeFo=
Subject key identifier:   45:AB:67:C4:40:79:98:F7:E7:4B:73:D1:14:E8:66:4D:8C:FF:7E:E2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FD599E7D345CCD0984B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40f73a4e-ba5c-3fa9-80d6-669b842e9b11.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21552
IP address blocks:        204.101.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:d5:99:e7:d3:45:cc:d0:98:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=7670a77d-4d4b-41ab-b97f-bdb24c6da32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:0e:86:98:2c:83:d7:c0:c1:70:b3:9f:ec:
                    aa:62:95:9c:c0:28:5e:8d:b9:bc:78:b2:0d:5b:56:
                    2c:15:1e:5b:5d:3e:02:72:a1:03:83:88:04:de:17:
                    7c:c9:63:77:98:b4:81:7f:2d:5c:63:99:b6:c6:9a:
                    66:ab:b1:80:d3:60:b2:5a:80:9c:94:5e:ec:76:8e:
                    d0:fa:4d:de:b5:5b:b3:0e:86:88:eb:f8:58:46:f0:
                    12:af:ae:fc:4c:5e:c8:42:d9:ea:39:f5:ff:90:48:
                    cb:d0:74:b6:47:87:ee:50:b4:53:fc:5f:41:dc:4f:
                    27:02:f6:64:dd:b9:e5:f7:0a:45:e4:31:8e:9c:90:
                    9f:bf:42:00:32:fb:e5:bc:b2:6f:e5:14:ee:45:81:
                    c7:f2:16:6b:25:0b:22:fe:af:13:2d:f4:1a:a9:47:
                    7b:30:c0:eb:ac:90:57:ab:c1:17:d8:3d:22:99:9d:
                    b6:92:78:6f:15:37:61:ed:b9:5a:bc:39:f1:27:d1:
                    ae:9c:09:40:b1:c1:e6:1c:05:4f:31:2e:83:2f:9b:
                    a4:39:b2:8e:59:5e:ff:92:7b:27:f3:7e:49:81:26:
                    5d:4b:52:10:cf:32:68:4c:8f:82:2b:2c:2f:bc:3f:
                    51:fd:20:1b:91:9a:12:3c:30:34:a8:70:27:5d:76:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:67:C4:40:79:98:F7:E7:4B:73:D1:14:E8:66:4D:8C:FF:7E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/40f73a4e-ba5c-3fa9-80d6-669b842e9b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:0b:de:e4:0e:e8:69:49:82:73:09:ac:dd:5d:85:5d:5c:
         2d:97:d0:b1:93:1f:78:18:97:b4:32:1e:e0:f9:cb:9d:a0:81:
         47:c5:42:73:bb:c9:19:1b:04:d3:2b:b7:c3:84:3b:6c:11:13:
         4f:88:64:b6:44:08:43:45:34:93:63:1c:cc:07:16:76:0e:9c:
         d4:f5:ba:ba:03:18:49:21:48:38:4b:ed:74:82:0f:ec:8a:99:
         74:b5:9f:d6:62:b2:fe:97:63:c5:43:c2:d6:e8:33:a4:e0:61:
         0b:42:1d:8e:03:0e:de:53:51:d7:26:c7:73:80:de:dc:66:45:
         dc:97:02:10:2f:ac:af:ce:ab:eb:b2:0c:c5:fe:a6:c4:ed:4b:
         9f:f9:28:97:90:fe:10:67:d8:b2:97:29:cc:d7:b7:88:f6:5e:
         0b:6b:31:ba:c6:5b:5a:98:82:b4:18:f1:c6:a9:4f:59:59:e7:
         a9:5f:38:87:99:51:a4:df:08:eb:cd:96:32:ed:05:12:2a:da:
         ec:31:7f:cc:db:33:c7:8e:24:79:e9:d2:e9:05:a9:71:0e:3c:
         89:7b:72:64:9a:5f:db:26:8c:48:8e:3b:5a:fb:e7:c4:0e:2e:
         b1:86:5b:c8:be:eb:82:c9:a9:8b:67:05:6a:98:e1:75:a6:9f:
         d2:7d:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:16 2024 by rpki-client on console-ams.rpki-client.org