Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53c12ff3-d639-3aa3-be09-dba634f44447.roa
File:                     53c12ff3-d639-3aa3-be09-dba634f44447.roa (raw, json)
Hash identifier:          Uyxu8uxZSzbpijl8bcY3mneJ2oyvDPQ/Ri91dx7ourY=
Subject key identifier:   B0:15:37:6E:12:1D:73:AC:91:02:8F:3E:77:CC:7D:51:4F:9A:A4:7D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FD1EF7BAA5051AE228460
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53c12ff3-d639-3aa3-be09-dba634f44447.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21723
IP address blocks:        204.101.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:d1:ef:7b:aa:50:51:ae:22:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=a21fe6e1-0fd4-449e-a5d3-0d036d504938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:89:3a:9d:ba:fc:90:e2:4b:37:9f:61:2d:
                    b9:c0:58:58:90:08:3d:99:db:36:69:44:5b:a7:b7:
                    e1:ea:b5:03:fe:e3:d9:f8:7b:71:36:99:18:91:67:
                    a2:2b:75:7d:d6:0d:ab:9b:f4:fc:82:fc:58:d9:1a:
                    23:2c:67:e7:70:b8:1a:d4:16:fd:df:72:63:cb:64:
                    7d:4b:69:14:f2:b2:87:a2:2f:ab:63:08:5d:a1:6b:
                    ad:da:84:d3:8f:56:2f:d1:f1:25:86:62:15:37:c0:
                    bb:72:86:b4:65:06:a1:cd:74:46:b1:29:7b:3b:d5:
                    a5:cc:86:42:fc:1b:5d:3d:d1:51:2d:86:9a:66:43:
                    81:81:2f:ec:3f:1d:12:a5:10:0f:6b:7e:c7:fe:93:
                    e3:a3:a2:11:8c:f5:2f:ba:52:bf:ce:ec:3c:1d:59:
                    02:f7:24:11:dd:ce:ea:a2:bd:64:db:b5:5a:6f:20:
                    77:18:41:15:79:44:10:e0:27:48:a8:9c:e0:3e:cf:
                    08:10:fa:34:87:40:cb:20:01:93:e3:2e:5b:45:82:
                    21:8b:76:ea:51:41:2a:e5:d4:76:1e:c0:d4:e2:33:
                    a3:00:3d:05:ce:09:08:bc:43:31:30:4e:17:06:e9:
                    38:ae:2a:bc:9e:73:77:82:39:95:67:7d:f5:6a:48:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:15:37:6E:12:1D:73:AC:91:02:8F:3E:77:CC:7D:51:4F:9A:A4:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/53c12ff3-d639-3aa3-be09-dba634f44447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:23:dd:f3:e0:ba:a5:32:c2:bb:9d:11:84:5f:a0:ba:47:db:
         fc:8f:32:56:82:f6:54:3e:07:d9:71:25:30:cb:71:cd:5f:4c:
         03:cd:4d:05:68:56:65:eb:76:9b:7d:12:48:95:ff:11:b9:a4:
         c1:51:d5:53:6b:68:58:c3:a4:b4:25:1a:b1:46:c5:31:e9:b1:
         45:04:92:3d:b4:63:79:a9:a5:57:87:d2:6b:75:3f:00:d0:43:
         10:e5:a3:9d:4e:72:f0:b8:92:74:5f:c2:62:57:f8:7c:b9:bd:
         0a:8e:ce:49:ca:84:ef:54:64:84:78:c3:84:14:92:52:8c:01:
         ef:3d:a2:f0:ff:1b:db:27:c0:b8:92:b5:e7:6c:d7:7e:bd:09:
         b2:f6:08:ed:8c:01:26:6a:8a:37:9b:d4:b5:ea:e1:d7:ca:49:
         fb:36:de:db:c1:4b:e4:d3:fa:45:76:84:6c:e8:be:a1:03:d8:
         76:16:8d:28:2b:a5:ba:9b:1f:ec:93:31:00:d8:00:c4:4b:48:
         95:75:e5:29:81:92:20:f2:9e:70:cb:6e:97:76:03:f4:2d:c6:
         5a:5f:6a:6a:62:e7:87:50:2e:5d:a3:03:af:a5:a2:86:74:c6:
         ab:2c:e9:1a:5f:53:9b:bd:a8:22:ae:1b:31:85:cb:d0:65:96:
         dd:d6:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org