Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8410ae02-8087-3664-adea-1a77cf2c8091.roa
File:                     8410ae02-8087-3664-adea-1a77cf2c8091.roa (raw, json)
Hash identifier:          Yb+GaE4w3vMYa2MNbHUSsSA8gCYt0kIIOODfqpf4dG8=
Subject key identifier:   A9:0F:24:6B:1E:33:D4:2D:D5:1B:79:A1:E5:E1:B1:0D:4E:42:CF:B4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B31CFFC53A346E69389F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8410ae02-8087-3664-adea-1a77cf2c8091.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     14116
IP address blocks:        69.156.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:1c:ff:c5:3a:34:6e:69:38:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=a54da657-99a3-492b-82a7-5594eade0ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:9f:b2:9b:7e:27:c7:05:97:7f:95:bb:be:
                    26:f6:79:7e:6f:ab:de:88:63:ba:6d:2d:ad:01:da:
                    6b:68:58:29:65:1f:1c:81:b6:8f:35:f0:e7:b0:d7:
                    bf:38:e1:79:cd:3a:9d:90:5a:98:11:63:97:70:49:
                    d5:c5:a4:b5:ca:f8:1d:5a:e3:b4:ba:62:60:f5:25:
                    61:a3:60:4f:4f:30:41:b6:38:07:42:4d:6b:2c:82:
                    c5:a1:4a:de:06:c1:56:9e:00:30:93:ba:e2:25:a2:
                    3f:62:1d:94:1f:77:7a:5a:ec:84:92:ea:b0:72:80:
                    1a:f4:6f:14:9d:10:89:c5:c6:27:a1:38:42:bc:40:
                    57:48:85:cb:23:fe:23:49:0e:0d:eb:d1:e9:61:23:
                    64:fa:50:91:3e:db:af:47:1e:b1:f7:a3:73:1a:cd:
                    e1:6b:a0:49:c4:b1:90:fd:cf:8b:ea:2e:00:e9:40:
                    bf:9e:f1:b3:78:bb:69:00:d9:5e:fe:1a:24:ce:72:
                    96:8f:8b:bf:d6:9b:9e:a1:2f:c0:2f:b1:ef:4c:c6:
                    bc:f9:ac:d3:dd:c4:cb:db:3a:2c:a9:77:91:99:59:
                    4e:77:46:bf:6c:2b:ab:5a:38:6a:f9:d0:e6:2d:67:
                    d2:6f:4b:97:48:aa:d1:49:a9:97:ae:cf:d6:a9:ea:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0F:24:6B:1E:33:D4:2D:D5:1B:79:A1:E5:E1:B1:0D:4E:42:CF:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8410ae02-8087-3664-adea-1a77cf2c8091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.156.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:db:a5:cc:ce:3d:26:bf:02:dd:0e:eb:8d:37:14:f6:c4:e3:
         1c:ad:7c:19:82:e0:44:55:d5:b6:2d:8d:da:75:17:d1:61:46:
         b2:03:55:9e:d2:7b:69:b1:5a:c9:8b:31:7c:df:92:ae:8f:b8:
         88:66:a6:9b:73:a7:9e:87:09:cd:29:46:34:f9:9f:be:e0:60:
         74:4c:5d:1b:11:29:63:e8:af:1b:58:1e:59:6a:4d:5e:d3:c6:
         5b:ff:92:d3:b0:19:1d:96:49:ad:c8:d3:1f:dc:61:38:1b:03:
         92:88:f4:fd:12:c1:1c:4d:9a:5d:8f:11:91:8c:19:4f:a5:aa:
         95:30:e8:cd:ae:24:eb:7e:f9:ed:23:37:6a:28:ff:3f:86:74:
         d4:3e:9a:bb:11:d8:aa:be:9e:b6:0d:50:f5:56:ae:47:64:1d:
         02:c6:39:32:55:ff:a7:fb:b9:76:df:44:36:66:43:b3:67:06:
         63:c5:aa:60:f2:6f:1f:79:09:21:09:6c:85:42:dc:d7:7f:ab:
         a9:6b:0b:84:aa:4c:fd:f8:7a:fd:88:4f:02:75:53:2f:69:65:
         6a:2a:59:9a:c3:61:3f:33:e1:88:fd:06:b4:b1:b0:4d:b8:5a:
         22:7c:ad:57:42:dc:46:2a:42:d5:f4:16:c1:27:f8:e5:24:b1:
         67:7d:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:48:00 2024 by rpki-client on console-fra.rpki-client.org