Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6c72626f-ac1e-30d8-9bd8-9b0bd55dd63b.roa
File:                     6c72626f-ac1e-30d8-9bd8-9b0bd55dd63b.roa (raw, json)
Hash identifier:          2wDnKFSYLrlY2EGw6wGSAzZEf84FyLlZKhcJYw3I8Kw=
Subject key identifier:   D5:C9:98:0C:6C:71:1B:30:52:0C:62:87:EC:CC:79:C5:C1:02:DF:E6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10C08581E2301DF47C1E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6c72626f-ac1e-30d8-9bd8-9b0bd55dd63b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     18814
IP address blocks:        207.34.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:c0:85:81:e2:30:1d:f4:7c:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=0cd7be30-bcfa-4a4e-b477-17146eee476c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:cf:c2:40:2b:fd:00:90:6e:2f:e8:14:d9:
                    39:0d:43:90:70:a0:15:98:e6:9b:0e:b3:bd:9c:1d:
                    7a:02:d8:fa:94:c5:7d:8e:b3:a7:a8:bd:98:b3:dd:
                    23:d3:a1:ed:93:29:fa:1b:bd:14:fb:06:93:f7:ba:
                    f0:fa:72:ab:75:f0:67:ba:89:0e:11:38:12:1c:17:
                    6a:16:0d:be:08:8f:39:3e:39:6c:80:4f:b4:32:0d:
                    e7:14:c8:ac:25:10:34:42:9a:1a:54:ba:6e:e4:c7:
                    f5:69:0c:23:dc:59:5d:42:ed:32:8a:de:09:39:83:
                    bf:7d:36:85:bc:b9:fe:4e:1d:8b:38:10:04:fe:a4:
                    da:1d:8c:de:fc:c4:c2:7d:b3:ae:e3:61:91:5a:74:
                    b2:53:5f:e7:94:fa:82:ea:9a:a9:9d:0c:d9:71:5c:
                    ad:35:52:b5:23:7b:76:09:d6:a6:1b:0e:47:83:4b:
                    d9:20:ed:b8:b6:f8:fd:eb:88:8a:d4:a0:78:27:d7:
                    45:60:7a:88:cb:9e:f3:db:16:20:29:60:4d:ed:3b:
                    41:9b:a3:f6:80:7a:c1:6e:b3:13:3a:6b:c1:e5:ef:
                    81:32:91:8d:7c:34:4d:fd:00:4f:8e:95:52:d8:d3:
                    b6:f0:8b:87:77:f9:ae:b3:dd:bb:55:69:08:ae:b8:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C9:98:0C:6C:71:1B:30:52:0C:62:87:EC:CC:79:C5:C1:02:DF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6c72626f-ac1e-30d8-9bd8-9b0bd55dd63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:f9:20:13:15:3b:5b:6c:b0:c3:23:5b:0b:eb:ea:46:ec:
         d7:5b:2a:cc:d6:79:d4:53:a7:7a:d8:d8:b7:56:91:39:23:fb:
         ec:e5:4b:2d:78:ba:02:49:bf:cd:b7:9b:a4:9f:03:e7:20:21:
         17:5a:a1:27:ba:d8:a5:f1:fc:98:85:b7:3a:be:c4:a9:90:70:
         7b:40:44:c9:f9:36:fa:d1:ba:ca:c3:df:82:97:00:45:cc:2a:
         60:ae:e7:1b:a8:c2:a9:1a:87:56:2a:7b:93:9c:cd:fd:23:57:
         cd:d0:cd:7d:2c:91:04:37:e4:f2:e8:29:1e:02:bc:29:24:a3:
         c5:14:e7:34:1b:1f:ec:bb:92:e0:52:fe:5a:51:6e:a6:2f:ad:
         05:b5:dd:c5:de:ec:c7:94:fe:de:1a:9b:1d:4b:ba:1c:b4:02:
         c6:6a:7b:a8:1e:3f:dc:fc:fc:69:49:d9:8c:df:89:4c:02:0c:
         38:79:1f:f7:1a:77:13:4c:51:79:0d:9a:29:a0:0b:4f:bc:e1:
         fe:d3:59:df:ab:71:ee:eb:45:03:99:67:d6:23:c8:54:54:32:
         63:f0:4c:16:ba:0c:47:a3:eb:21:5a:50:2a:02:67:f1:d6:ba:
         f8:b4:d8:8f:b8:e9:f0:7f:85:d0:13:b2:c2:90:87:79:07:38:
         8f:32:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org