Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43fd8e2a-327b-30b2-9cec-3251b89edbdf.roa
File:                     43fd8e2a-327b-30b2-9cec-3251b89edbdf.roa (raw, json)
Hash identifier:          xBye0lM6irXNuqqndr3sA5aT/S7+jwR373EJXMwk2nQ=
Subject key identifier:   7A:6F:0A:1F:09:D1:BE:F7:6C:F8:B5:6E:4A:52:F8:D9:B5:19:C0:ED
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B439D28B6BF466F5D00B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43fd8e2a-327b-30b2-9cec-3251b89edbdf.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     10264
IP address blocks:        204.101.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:39:d2:8b:6b:f4:66:f5:d0:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=0f363593-b736-4a3f-afa9-041915ddaf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:e1:83:e4:35:86:c5:31:9b:d6:89:e3:ff:
                    ea:bf:59:79:3d:6b:74:8e:c1:33:ad:26:26:a9:10:
                    f4:b1:41:21:8f:8e:74:78:3c:88:92:f7:96:62:7c:
                    ab:65:05:6d:db:ed:66:7e:69:7b:3a:24:bb:02:fc:
                    cd:70:b2:f2:d0:98:53:f8:29:62:73:28:5c:f1:0c:
                    5b:dd:88:b3:85:3e:eb:02:55:b3:b4:1e:f9:79:7e:
                    cb:99:c5:1d:82:18:c1:52:c2:1f:20:92:48:ce:e2:
                    20:3a:8d:ad:b1:d2:8a:c7:2b:76:5f:e3:8c:90:81:
                    cf:1f:fa:09:21:1d:29:ed:8f:5e:67:6c:f2:9c:5e:
                    55:d2:e3:a4:bf:b4:b8:15:0b:69:9a:b1:34:a0:5c:
                    d0:43:60:8d:66:89:65:0b:14:71:28:6c:57:ad:ef:
                    06:38:f1:4f:b7:ed:3e:7f:3b:fd:4a:e6:63:91:08:
                    b5:cc:dc:c3:ea:2a:cf:90:b2:da:ac:e7:f0:9c:c7:
                    5d:a5:28:f5:4b:8f:22:c6:3b:5b:8a:53:b9:98:90:
                    7e:f6:5f:2c:4c:3a:9d:5a:86:6b:c0:15:84:57:85:
                    f7:a6:65:86:da:00:2a:be:ae:1a:f5:e9:d0:be:7c:
                    f8:f8:ff:17:c6:f1:ff:89:d4:43:4a:ac:7c:72:46:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6F:0A:1F:09:D1:BE:F7:6C:F8:B5:6E:4A:52:F8:D9:B5:19:C0:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43fd8e2a-327b-30b2-9cec-3251b89edbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:28:0a:c2:21:40:06:46:7d:91:13:5d:19:b4:a4:ef:ab:
         e0:90:f4:0a:55:40:30:8f:04:f7:45:d1:ea:81:06:09:d3:8c:
         60:ea:ea:86:c3:bb:f8:ba:05:aa:c7:13:e5:c5:1a:7b:f1:aa:
         bf:c6:6f:b5:86:bd:59:57:53:4f:e1:c7:ef:5f:b9:29:eb:f6:
         6a:d2:cc:a7:d2:e1:ca:53:92:eb:84:8b:b3:91:0a:45:b3:ce:
         0c:af:21:06:b2:6d:e9:62:7c:4a:2b:28:0a:5e:5b:72:04:12:
         bb:b3:09:d3:fe:24:dc:b6:f6:9c:3a:fc:b1:f9:4e:36:15:7d:
         32:9a:ae:92:d4:c2:45:75:80:e1:3e:e8:c4:f3:27:30:0e:f7:
         74:8a:b1:73:7f:e4:6d:5b:bf:9d:42:2d:72:5d:4c:46:0f:16:
         44:37:21:0b:58:5e:c6:2c:28:44:72:80:0d:bd:02:dd:31:36:
         73:68:05:27:b1:93:05:7c:0a:24:7c:93:d9:43:d6:a6:79:58:
         15:7b:c2:ca:fb:69:2a:d4:42:d3:61:1c:6d:17:bf:2f:f1:44:
         1e:32:06:51:26:f7:60:ea:d4:6f:62:ac:17:df:67:bd:cb:6f:
         3c:7a:cd:65:b0:55:a1:0c:a1:8f:eb:16:9d:9e:56:e2:6b:34:
         0b:85:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:53 2024 by rpki-client on console-fra.rpki-client.org