Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/98e357c5-fba0-37fd-9bee-49b4c5b1854b.roa
File:                     98e357c5-fba0-37fd-9bee-49b4c5b1854b.roa (raw, json)
Hash identifier:          kQQ3ciSDqTDEAfdReN7erQVjAY5PURCg7muJoVj3YJg=
Subject key identifier:   17:ED:1F:6C:F9:29:75:D8:FD:B7:E6:C3:9F:E4:AB:39:21:29:AD:47
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4437D3835C0B35B78FEE0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/98e357c5-fba0-37fd-9bee-49b4c5b1854b.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:43:7d:38:35:c0:b3:5b:78:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=b6f68240-9b0b-4f48-af38-44cc7c8d8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:4d:fb:18:4f:6a:83:af:ab:b9:a6:70:b0:
                    51:a2:76:40:ef:1f:f8:9b:25:6f:83:6c:a3:f1:b4:
                    a0:ee:c9:9f:60:89:ed:7d:20:fe:91:b9:35:62:6f:
                    6a:6f:6b:d1:ea:c7:0e:d6:fa:02:7d:a7:96:8e:1b:
                    67:b8:ac:ff:20:fc:5e:1c:ce:9c:b4:9c:b1:b8:50:
                    ed:84:1b:04:00:38:96:e7:89:70:91:79:86:f4:9e:
                    e0:f4:75:bf:1f:a4:f5:ad:7c:7e:8d:85:9b:3d:3d:
                    c1:ad:ff:f4:ae:19:55:91:3d:c6:c7:4a:a0:3e:d3:
                    6d:d2:ae:a9:e2:2f:c5:7c:ba:f3:65:79:60:89:dd:
                    ba:8b:47:1e:cb:a1:9b:dc:bf:db:10:0a:3d:1e:94:
                    f2:18:25:20:f0:4b:f9:5f:ea:1d:ff:2e:80:f1:ab:
                    1d:e1:e8:f5:a6:58:7f:e7:d5:d7:52:7b:b4:0d:64:
                    6f:e0:e4:79:5f:f0:3f:86:8f:86:a2:27:41:e6:d2:
                    25:a1:ac:c0:a0:cf:a7:8b:f6:fb:7e:ad:00:9d:6b:
                    31:80:f4:8a:b9:18:8a:00:60:3b:89:50:2c:f2:b4:
                    46:e6:34:8b:d6:51:5f:e7:f3:31:e7:4c:e7:eb:aa:
                    94:32:f5:e7:52:e4:3f:db:90:1a:b3:f6:35:7b:ae:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:ED:1F:6C:F9:29:75:D8:FD:B7:E6:C3:9F:E4:AB:39:21:29:AD:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/98e357c5-fba0-37fd-9bee-49b4c5b1854b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2f:4d:bd:67:6c:39:a7:62:3a:bf:17:4b:7d:e1:de:9a:32:
         f7:7a:29:cf:a5:9c:6c:84:2b:a8:55:be:9f:23:3c:a3:76:81:
         a9:47:a7:03:a9:2d:76:a2:7d:ce:33:2a:ab:e8:19:a2:5d:40:
         92:5b:9b:cd:c2:8f:c1:06:8e:9a:d8:00:0a:6c:61:15:89:61:
         02:05:6b:7a:b0:fe:da:97:63:7c:f4:08:61:a0:b0:57:ad:08:
         38:f3:c3:60:e5:1c:cb:00:d1:4d:98:e8:2e:ad:35:61:ff:f5:
         7d:16:af:9f:a2:ba:9c:99:50:a8:51:e4:69:5b:1c:20:7a:d0:
         60:59:22:8b:8f:52:ba:52:0d:c9:35:aa:50:8b:42:99:54:b6:
         41:19:f1:1d:9b:be:4c:e6:c7:3c:1c:18:47:06:fa:f7:b1:0d:
         20:a7:8b:59:20:06:b7:2f:bc:a2:aa:9d:36:3b:b2:c5:b5:5f:
         25:d7:b5:7e:fc:aa:77:2d:08:b5:52:62:9e:e3:b7:31:d6:c5:
         f5:6b:b1:47:04:ae:2d:90:97:c1:99:81:a7:cd:86:7f:70:eb:
         bf:a8:9b:17:c0:9a:c8:f0:2c:4d:9a:03:39:fa:fd:fa:3c:dd:
         ce:86:dc:9e:e6:cb:6c:8c:ae:49:e1:fc:ca:df:41:dc:95:ac:
         e6:37:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:48:00 2024 by rpki-client on console-fra.rpki-client.org