Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a763079f-0b38-33e7-a954-1abf31eeb461.roa
File:                     a763079f-0b38-33e7-a954-1abf31eeb461.roa (raw, json)
Hash identifier:          4X5sFCpSuCHcd7TvGkQRFzkNqcLEa/Kntj3H6hMEUuw=
Subject key identifier:   4B:2B:D2:33:E1:B8:ED:BD:2E:AA:2C:AB:49:05:09:00:C3:5B:B3:16
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FE42136EB14CFE7CF7EAC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a763079f-0b38-33e7-a954-1abf31eeb461.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21723
IP address blocks:        204.101.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:e4:21:36:eb:14:cf:e7:cf:7e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=2bf2ddd3-d3c9-4755-98d8-9aec5ebdd00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:59:cc:c3:f7:3f:e3:30:8b:27:07:a4:e9:7f:
                    87:81:61:94:af:bf:02:13:5f:84:fd:c1:c6:6f:d4:
                    1d:1a:cb:e5:b0:1b:cf:4f:0d:bf:06:82:24:b4:87:
                    63:6e:84:f4:62:ab:44:43:af:ee:e6:d8:8e:98:ac:
                    a7:b6:a1:b4:6c:a1:9d:f0:96:f2:e7:de:6c:28:e8:
                    53:2d:5c:00:18:e0:de:f9:11:d2:13:d4:c9:bc:ef:
                    7e:f4:46:38:98:ce:f7:c5:80:60:be:bc:e3:36:3e:
                    cd:5e:e9:19:0d:db:c0:d5:0f:56:a9:0f:f8:9f:56:
                    74:89:8c:e0:23:8b:9e:b2:01:2b:ba:99:00:8c:88:
                    6e:32:54:4f:d6:83:40:ac:61:db:9c:d6:ea:28:ba:
                    bd:c6:f7:99:4e:ad:28:47:f9:83:ec:57:cb:e5:54:
                    e2:a3:94:ca:a7:3d:e8:cf:98:ab:8c:a0:1e:4a:bd:
                    a0:06:92:13:63:aa:c6:56:48:f9:f4:14:8d:d6:06:
                    e1:83:f4:99:ba:76:ca:af:5a:d3:1b:c3:d2:6f:58:
                    ab:e0:f5:1a:db:28:14:0f:cc:54:e8:be:b1:da:77:
                    e6:b4:6d:19:b1:b3:e0:68:03:0c:d0:d6:09:c8:5f:
                    01:48:94:95:cf:3a:b1:e8:2b:ab:5c:01:fb:14:79:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:D2:33:E1:B8:ED:BD:2E:AA:2C:AB:49:05:09:00:C3:5B:B3:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a763079f-0b38-33e7-a954-1abf31eeb461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4f:f5:33:f2:21:99:ff:0c:ae:55:23:7c:6e:f0:ec:ff:32:
         31:16:61:27:de:43:41:d1:bd:a7:12:89:07:27:34:db:b1:93:
         f1:85:75:3a:01:62:50:c4:60:15:e3:86:70:c5:1c:1a:dd:13:
         0e:58:c5:f0:44:09:0b:e6:0c:64:80:50:54:bd:3a:2c:f9:34:
         70:e8:cb:73:4d:2c:3b:07:a6:ed:e2:35:27:e9:57:f0:61:f1:
         a8:3b:79:2b:55:54:f4:fb:04:63:99:be:8b:8d:49:5e:27:33:
         1e:e7:65:e7:27:ac:cf:ef:d3:0c:d9:1e:0b:08:ba:43:75:53:
         d4:a3:99:5d:fd:87:53:df:9c:8e:a4:a0:c3:5c:0f:3b:e0:84:
         c5:93:e0:83:ea:0e:ed:b9:98:9c:ab:da:ce:55:66:11:73:d6:
         15:43:2c:01:e9:0d:09:c1:73:39:4d:a5:5a:bf:e8:46:07:db:
         4f:88:29:94:86:4e:0a:5b:69:bc:4c:02:b6:47:66:57:47:3f:
         fe:18:de:70:7b:ad:07:e2:1d:35:2a:2d:1c:d8:58:29:9a:f7:
         c9:ae:c5:01:59:7e:f6:6c:3a:61:cd:23:7a:95:14:ba:32:9e:
         32:c1:cd:7b:20:71:8d:74:97:79:67:6c:fd:29:c3:11:1f:83:
         c9:09:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org