Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/81a3359d-a56d-3435-9622-f0b9d3d5147e.roa
File:                     81a3359d-a56d-3435-9622-f0b9d3d5147e.roa (raw, json)
Hash identifier:          8iIVQozdqZGm0FVNCNDtrU8IIDd2BkrfLnvVZ/4Ia2M=
Subject key identifier:   22:A9:4A:18:94:15:1F:B4:AD:01:57:73:7E:AC:77:09:AC:07:09:63
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4974D9353C137AFAD17C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/81a3359d-a56d-3435-9622-f0b9d3d5147e.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     397168
IP address blocks:        206.47.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:97:4d:93:53:c1:37:af:ad:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=58cb570c-52ee-476a-bb24-2a1c633ecd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:ba:13:81:33:76:93:65:cc:7d:af:a5:dc:
                    e9:cf:71:03:6b:81:4d:6d:70:5a:9a:ff:54:aa:ec:
                    f5:26:56:4b:51:0f:b9:16:bd:5d:7c:3c:7e:31:6e:
                    40:e7:24:80:ef:4c:f0:fd:a8:77:fd:e2:be:77:75:
                    e7:fc:dd:29:9c:98:01:ca:13:60:65:f8:cd:08:1f:
                    47:24:5e:61:c1:1b:1d:9d:e0:21:0e:3c:24:eb:22:
                    f2:07:11:ab:ed:36:1d:2d:f0:66:a9:fa:b8:03:b3:
                    31:c8:6c:68:c0:fd:31:46:44:65:2e:d7:e0:78:32:
                    ca:d9:23:bb:6c:e3:41:d6:48:d6:d6:5e:2e:d8:91:
                    8c:56:c8:2a:b2:15:ae:06:6d:29:39:b1:95:5b:3c:
                    7b:8c:9e:07:19:50:ad:67:2b:17:2e:4c:c0:a4:a8:
                    91:e4:bb:e8:0c:aa:dd:e0:a4:23:79:c1:83:62:a4:
                    d0:fc:bf:ef:44:90:0f:ad:66:85:7f:d3:f9:90:89:
                    32:9b:9a:0b:c3:81:3e:6b:66:91:5a:09:ff:f5:28:
                    cf:66:2b:e3:0d:b7:42:c7:54:d5:20:55:64:af:0b:
                    9e:d8:cb:21:a4:76:7b:e1:13:91:c5:bc:bf:8d:32:
                    03:bd:34:d4:ee:87:99:d3:21:6b:88:04:aa:10:ce:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A9:4A:18:94:15:1F:B4:AD:01:57:73:7E:AC:77:09:AC:07:09:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/81a3359d-a56d-3435-9622-f0b9d3d5147e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:33:bf:d4:fd:f8:f5:70:af:74:1f:dc:31:dc:79:c7:fd:f9:
         46:da:38:ad:d0:0d:3d:2f:0e:ff:47:7f:77:a6:62:55:8a:05:
         fc:d0:9a:ba:78:cf:d8:ed:9e:87:81:fe:39:4f:d8:73:96:c4:
         df:ae:fd:2b:3c:f5:89:5e:c6:5a:31:72:c0:39:10:aa:df:01:
         a1:52:68:eb:e3:52:d9:39:84:7d:f4:e4:ae:6f:0d:a9:61:34:
         1d:72:8e:5f:a6:f8:fc:75:5c:c0:bf:b6:e0:d2:c5:ed:c8:f6:
         0f:13:f5:12:a8:0b:f6:d3:76:71:79:fb:82:cf:2e:5c:3a:56:
         97:1e:25:94:a5:c3:b0:bf:a9:91:18:f6:99:70:59:fb:dd:0f:
         55:21:6d:f2:5a:93:11:02:b0:77:63:96:8b:3a:e6:ea:a1:00:
         fd:e1:0f:4e:5f:f6:f5:b7:38:ec:27:61:88:c6:f6:88:75:44:
         72:81:8c:bc:09:0e:09:5a:ad:cf:20:ef:16:98:35:e2:f6:9b:
         ee:fe:cd:8d:8f:58:29:db:67:55:db:b5:e6:00:c1:e0:54:0a:
         55:5d:72:45:0a:bf:b3:31:ba:d2:aa:62:ab:cd:13:37:43:05:
         ff:99:70:08:70:c9:93:d5:43:a0:8c:27:57:65:f3:0c:44:5d:
         c4:bd:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:52:13 2024 by rpki-client on console-ams.rpki-client.org