Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5028488b-cc19-380b-b613-c1887bd00f33.roa
File:                     5028488b-cc19-380b-b613-c1887bd00f33.roa (raw, json)
Hash identifier:          C0+XJu+5hwHp5T6xd8ylB2D88D/H71qxyfcSz0FckF4=
Subject key identifier:   91:E0:C8:C5:56:55:C7:4D:7B:FE:F2:6F:14:90:DA:37:17:82:E4:51
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B59B4B1F308083518F95E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5028488b-cc19-380b-b613-c1887bd00f33.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        209.226.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:9b:4b:1f:30:80:83:51:8f:95:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=89840e8c-d2f7-4c87-98d2-ce55c5d7be0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:ef:12:da:7a:1c:79:7c:b6:04:54:43:8a:
                    2f:b5:21:e6:2c:2c:a1:0c:64:48:19:4d:a9:90:c6:
                    20:7f:ee:e6:0d:1b:92:91:dc:80:0d:e6:8b:0b:0c:
                    48:f6:e5:b9:3d:d8:87:49:4a:6f:81:ec:24:40:c8:
                    37:7a:4c:ca:ab:4e:26:47:bc:36:4d:5b:4b:fd:ad:
                    60:6e:aa:b7:b1:91:2f:50:30:b7:bd:79:a9:e0:e3:
                    3b:89:fe:81:1a:9b:ca:d7:58:c3:61:a4:7f:2e:60:
                    30:94:28:13:12:28:07:88:25:62:04:37:05:0e:f7:
                    a6:c6:e3:d3:cd:7d:64:71:f8:7a:79:fd:c2:d3:fb:
                    ca:1c:b3:08:6d:33:aa:70:41:52:0d:95:4f:bd:07:
                    3e:6d:d2:43:5a:d2:19:f4:a6:c1:3d:d1:d0:e5:44:
                    dd:43:15:cf:14:ab:08:cc:81:99:a3:e4:cd:93:3b:
                    31:59:6f:d0:06:ba:01:c8:7d:b4:97:0f:4a:8f:ae:
                    33:d4:43:76:3d:df:3a:45:58:05:2d:23:4a:09:6b:
                    f5:dd:53:55:d7:9f:f1:00:e3:bc:75:e3:6b:ab:ca:
                    bb:ad:c1:82:94:b4:40:60:a2:7d:2f:1f:2d:04:1f:
                    83:f4:72:56:96:83:23:f2:07:e7:41:7d:7c:35:d9:
                    aa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E0:C8:C5:56:55:C7:4D:7B:FE:F2:6F:14:90:DA:37:17:82:E4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5028488b-cc19-380b-b613-c1887bd00f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c0:a1:3e:62:34:a0:e8:81:38:42:a7:2b:5a:0d:ce:2b:2d:
         90:6a:f5:81:7c:61:c5:93:b8:b9:34:08:97:34:b3:08:67:8a:
         b7:e5:21:48:ca:73:e3:d7:76:1b:d5:75:b8:ea:9d:3c:07:4b:
         1e:9c:a3:0d:6a:26:45:8b:d1:05:12:38:02:c7:8f:7d:7d:34:
         3f:7a:51:cb:23:fd:cf:ff:82:fe:eb:1f:76:b4:8c:40:a8:c2:
         ba:3e:6c:09:30:32:9f:29:5e:4f:70:31:fb:53:52:77:c6:2a:
         9c:d7:f9:b4:79:b2:6d:1e:c8:48:91:cf:9d:28:b2:9e:01:34:
         de:b6:d0:74:bd:70:af:a9:7f:e3:93:05:3b:9e:92:2c:99:ea:
         ff:8f:b9:47:28:72:29:de:74:50:76:02:5c:3d:28:00:db:c2:
         09:38:db:56:29:0b:59:68:81:31:9f:02:da:0a:d5:7b:f6:68:
         72:fe:2b:f9:c9:d7:bb:1a:43:f2:4b:8f:4b:ff:ec:c2:84:81:
         a9:e8:6e:d7:14:15:33:fd:19:36:f5:c1:a9:5e:dc:2c:85:b8:
         ed:1c:81:55:8d:4c:c8:21:a0:c8:34:f6:99:28:97:fe:44:97:
         2a:8d:24:49:f4:54:f1:fe:90:e0:ae:98:4f:47:cf:41:00:6c:
         16:5b:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:40:43 2024 by rpki-client on console-ams.rpki-client.org