Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/587538cf-66cb-3041-985b-3ac37e043666.roa
File:                     587538cf-66cb-3041-985b-3ac37e043666.roa (raw, json)
Hash identifier:          HMN+6yihdh9pMpCqzwtA+gnA5hcQ0LynXwlXeg1kAjg=
Subject key identifier:   60:E4:7D:99:28:F4:CD:B9:BB:34:3C:28:12:FD:24:75:08:3F:7D:6B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11E482BF988D7D6D610F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/587538cf-66cb-3041-985b-3ac37e043666.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     30336
IP address blocks:        209.226.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:e4:82:bf:98:8d:7d:6d:61:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=2f23cc75-b6a1-47f1-9cd8-46f51500d74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:fd:66:70:33:86:a1:b1:8b:cb:a5:d7:a7:
                    15:43:92:e3:5b:9b:11:ac:e2:6b:96:07:bf:ab:4e:
                    21:25:5c:4f:2c:66:de:62:4d:67:9b:8c:cc:09:cc:
                    a1:63:38:95:5b:67:84:17:82:a5:2b:9e:e4:19:2a:
                    91:22:d2:39:96:e6:72:cb:2d:0b:d3:cb:45:c1:f1:
                    a7:a6:82:ba:f4:a5:37:98:b8:23:22:49:ed:f5:fd:
                    97:aa:30:a4:18:c0:a2:eb:a8:33:dc:72:14:09:c7:
                    f9:c1:8c:5a:4c:49:d8:ec:a2:74:46:2d:25:30:8e:
                    3e:bc:9a:cd:31:88:7e:bc:0a:c9:df:ea:bc:4f:de:
                    49:98:23:a6:39:c0:b2:e1:bd:df:59:7e:46:bd:3c:
                    97:b9:f5:5b:b7:c8:b5:60:fa:55:21:2e:22:f0:a6:
                    90:60:7a:d3:de:4e:ca:aa:6c:12:31:bb:eb:f1:7b:
                    03:52:93:0a:04:aa:3d:f5:cc:d3:95:d2:d5:0f:05:
                    c0:3c:d5:20:2f:e9:ef:37:98:0b:e4:ac:6a:17:e0:
                    2d:49:93:f0:5f:bb:50:7b:d5:27:23:ec:81:03:e7:
                    a9:f0:5b:7f:fe:c6:55:c4:39:83:df:89:71:c4:3b:
                    f1:b5:c9:4e:73:7f:27:2e:6c:a3:a7:34:6c:23:a6:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E4:7D:99:28:F4:CD:B9:BB:34:3C:28:12:FD:24:75:08:3F:7D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/587538cf-66cb-3041-985b-3ac37e043666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:45:43:da:d9:9b:4d:d5:78:c5:e4:87:97:e2:7d:94:e7:
         48:95:60:60:d1:a2:2f:39:41:cb:e8:59:c7:61:fa:2d:9b:4d:
         2e:6a:ba:ca:b1:0f:0d:55:2b:d1:ec:ca:5c:5e:37:aa:f0:3e:
         cf:8b:95:6a:8d:d3:1f:b8:8b:2a:a6:8b:f0:83:33:a8:ab:74:
         0e:0f:2a:5c:ff:17:be:cb:f8:4f:a0:69:19:1e:e5:79:4a:09:
         56:39:78:80:1d:21:27:77:d6:4c:e4:ca:06:03:f1:a9:1f:df:
         83:15:b9:54:91:12:b1:cd:10:33:1c:5c:bd:c9:5d:de:ac:c1:
         a2:04:4f:30:c3:d8:e6:23:9d:f3:fd:e8:95:a4:b8:ec:fa:0b:
         72:72:8a:4d:2a:db:65:8d:95:f9:5b:2b:3f:89:0d:e1:2d:5b:
         13:0c:d8:cc:d7:5e:5c:b0:e0:67:74:d7:a3:b0:1b:79:23:84:
         e5:25:15:c0:c4:2f:a7:64:a6:dc:6d:9b:d8:22:eb:b1:fe:48:
         8a:c4:f6:34:ef:64:08:55:f4:5f:e4:63:0e:28:7f:58:2f:20:
         b2:fb:2f:04:ce:38:7b:7b:f6:be:d0:63:31:fc:74:48:e7:fc:
         4c:5b:2b:4f:fc:c2:71:a4:97:c7:b2:1f:fc:2d:0c:7c:2b:b8:
         1f:e6:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org