Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac1bc12a-7c34-3cc6-af89-67738ddd6d24.roa
File:                     ac1bc12a-7c34-3cc6-af89-67738ddd6d24.roa (raw, json)
Hash identifier:          JBRLhVB4WZbcS4RmdeDjnMOXAymVvosBu3fO13F13Qg=
Subject key identifier:   A6:D1:A4:FB:0B:F2:F4:76:A3:43:A9:3D:C8:4B:22:64:FE:4C:12:08
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B60A50F3308E3A415D8A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac1bc12a-7c34-3cc6-af89-67738ddd6d24.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        216.209.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b6:0a:50:f3:30:8e:3a:41:5d:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=dba8d5f8-2ea5-40ed-a020-f91d0d9082df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:a7:86:a9:de:89:9b:62:6e:e3:cd:e3:66:
                    24:ca:4a:b8:94:b2:fb:99:73:56:1a:05:a5:e2:ee:
                    18:f5:5d:ae:50:10:da:f4:3c:62:09:1e:8e:77:66:
                    f8:b1:ca:ee:36:2d:9e:bf:de:84:dd:87:19:f8:a6:
                    8b:94:24:e8:a3:b1:f1:ed:00:d6:c5:6e:5b:bc:e1:
                    ce:f9:25:0e:05:2b:83:b0:f5:8c:94:5d:66:42:70:
                    cb:af:51:5f:80:93:59:7e:e2:8c:36:2c:c9:58:fd:
                    ed:8f:4a:e3:01:0b:ad:fa:e5:52:85:45:0b:ed:4b:
                    1d:37:d0:a0:6e:b2:51:d6:f6:25:f2:60:17:d8:0d:
                    5a:22:16:ab:8f:69:b6:26:c8:14:be:b2:68:a3:2c:
                    9e:cc:75:ea:d6:e2:be:3d:bd:b4:ca:1a:40:53:39:
                    68:96:64:70:c6:87:1b:f7:61:da:95:e4:64:60:fc:
                    8b:25:58:d0:5e:f2:2a:69:28:2a:62:3f:21:b3:88:
                    dd:45:bc:53:8f:58:ed:a5:52:dd:71:9b:ab:92:fc:
                    e9:39:06:cc:9a:11:0c:b2:a2:bf:af:9e:57:62:62:
                    96:d0:b6:93:45:c6:76:d7:d7:81:46:79:f3:c8:f5:
                    c4:0c:dd:b1:05:83:ba:cd:1b:3a:c1:aa:fb:f6:e5:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D1:A4:FB:0B:F2:F4:76:A3:43:A9:3D:C8:4B:22:64:FE:4C:12:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ac1bc12a-7c34-3cc6-af89-67738ddd6d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:00:81:3d:09:76:27:5d:19:60:1e:11:87:82:15:20:27:
         5f:0f:4d:68:0e:5f:0f:91:df:f2:b0:f6:38:d2:aa:dd:87:3e:
         b5:33:cf:5f:b1:30:a2:a3:58:dd:34:3f:c7:43:e1:92:cf:b1:
         37:3d:bb:f3:14:c7:63:cb:c2:61:c6:f6:dc:11:26:80:83:2a:
         60:ff:16:15:27:91:17:99:04:75:bb:f8:27:24:cd:6f:08:f3:
         c3:e4:aa:a7:17:ab:b8:aa:a7:9d:74:c1:92:96:f9:43:2e:71:
         07:5c:45:ea:6c:2d:be:aa:bb:72:c0:1b:72:4d:57:82:40:8c:
         0a:41:ea:b6:4d:76:ca:a9:b4:3c:94:14:ce:8f:d4:55:3e:c5:
         99:80:a0:69:c3:c8:85:ec:46:5e:fc:97:aa:44:0a:fb:ad:72:
         13:b7:4b:56:e5:e4:f1:45:10:b7:45:fe:60:e6:a1:56:30:83:
         63:3e:06:2f:89:fe:63:ad:e0:e0:d8:33:8b:43:aa:a6:a8:cb:
         2e:50:d0:14:41:08:af:33:79:28:0f:d1:1f:18:44:ff:de:6f:
         59:9c:00:a0:d0:1f:ef:ec:6a:7b:4d:f1:69:82:67:45:c9:34:
         8f:d3:da:92:78:74:1a:d6:53:fb:34:01:37:02:9e:bd:78:2e:
         63:6d:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org