Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad96f77b-baad-3fba-991d-77259269a265.roa
File:                     ad96f77b-baad-3fba-991d-77259269a265.roa (raw, json)
Hash identifier:          BwlLYtOWcqiFg0ZY0jwHOBOcCmFaKEALIv9y9wTgxic=
Subject key identifier:   77:46:8D:1E:0B:D3:54:DA:7E:92:24:5A:69:B2:F3:8A:7E:ED:34:4B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B56B18E7D8C1A224EF8C60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad96f77b-baad-3fba-991d-77259269a265.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.236.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:6b:18:e7:d8:c1:a2:24:ef:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=3eb845a9-c284-4eec-a85a-a1018ea6c479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:dc:5f:c3:b8:a4:fa:a7:32:51:be:7f:6a:
                    27:00:15:72:e6:82:ca:ce:22:5d:db:79:49:ec:bf:
                    25:17:aa:bc:21:68:8a:0e:23:44:7d:67:95:c4:a7:
                    a0:99:ee:ee:3e:00:6e:10:ae:00:10:42:7c:0e:f1:
                    17:de:32:c1:f5:45:40:8f:f6:ff:47:5a:e4:59:ef:
                    4f:c9:bf:4f:f8:74:27:fc:75:04:5a:89:57:e2:cc:
                    9e:b3:87:4e:d9:6f:38:38:42:95:fb:45:82:d1:83:
                    ad:6f:0d:81:0d:9a:0f:67:4f:19:82:7c:01:ce:19:
                    8b:6a:08:d1:ae:f7:a4:8b:9a:e5:18:bd:b1:a4:5e:
                    62:45:1c:c3:fc:73:bd:ad:dd:66:26:c0:bf:56:12:
                    1a:44:36:9d:25:3e:22:1c:5d:41:09:f4:2f:63:d4:
                    97:4e:12:68:67:0a:b4:79:87:6b:21:1d:b8:fa:6d:
                    e5:d3:32:fa:01:ea:62:28:7f:58:e3:bd:bd:50:f4:
                    bb:8d:cb:4e:ba:7c:76:48:64:a1:f0:cd:fc:58:30:
                    c5:7f:44:83:d4:f3:7e:96:ca:a3:d6:a2:d3:be:be:
                    5c:9e:74:51:be:68:e3:53:13:ed:45:8d:96:7e:0e:
                    51:48:ac:87:5b:cd:e9:5a:5c:94:aa:bc:89:0c:f8:
                    28:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:46:8D:1E:0B:D3:54:DA:7E:92:24:5A:69:B2:F3:8A:7E:ED:34:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ad96f77b-baad-3fba-991d-77259269a265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:48:bd:77:cd:3c:94:4f:b0:dc:3b:70:55:69:35:cd:e0:ad:
         42:04:f1:7a:f3:24:2f:0b:25:ee:43:c5:36:89:15:d3:af:03:
         15:00:c9:ed:0e:30:70:d4:f2:fb:ff:c1:d5:2e:d1:6e:ac:09:
         5f:5b:6b:02:95:d4:64:d7:a7:20:40:a1:54:19:66:87:b9:74:
         c1:9b:39:1d:0d:18:cc:ce:0a:cb:8a:df:da:cc:b5:ec:f5:cd:
         32:fd:39:17:49:d2:62:3c:41:24:ea:a4:6c:04:a1:ab:f1:cb:
         a8:8e:f7:48:fc:3f:f8:ba:e8:9c:43:96:89:a1:b8:9a:0e:d1:
         9b:54:c2:21:96:27:1a:5f:2e:1d:13:d7:56:14:eb:23:c6:19:
         6e:2d:11:bc:ef:da:4d:df:cd:18:e3:2e:3c:62:e3:95:8b:6e:
         04:b5:d5:eb:7d:7c:a3:96:af:e8:79:3a:57:14:cb:cd:59:e8:
         b8:a0:02:2a:b8:b0:0b:fc:f5:8a:80:c6:79:e4:c1:de:c0:5c:
         ca:7a:41:06:e8:3f:35:76:29:f6:80:01:21:81:fd:a2:91:ea:
         21:92:4f:78:fa:a5:1c:49:9e:da:be:9b:93:3a:c6:eb:d6:15:
         fc:19:1f:81:81:95:41:a8:44:dd:ad:04:d2:d8:09:a1:4c:3a:
         60:f7:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:41:28 2024 by rpki-client on console-fra.rpki-client.org