Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4ec14d1-6489-3f06-bfa3-1cd0630a9723.roa
File:                     b4ec14d1-6489-3f06-bfa3-1cd0630a9723.roa (raw, json)
Hash identifier:          WAjsM9Qpfu+m5oYm6jleDvUa5olC6HAnxDTET4MorBI=
Subject key identifier:   96:3F:1A:60:7C:DD:B1:6A:0F:78:94:E4:14:27:AA:94:50:88:9A:85
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B42984E7054A986AA5BD00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4ec14d1-6489-3f06-bfa3-1cd0630a9723.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:29:84:e7:05:4a:98:6a:a5:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=4ec1527e-4c7c-4762-80db-6d4415c52a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:8f:b0:1d:df:e6:b6:d5:78:3c:63:d6:a6:
                    96:5a:be:3a:44:f8:5a:ed:a4:6c:6c:d0:db:ea:21:
                    44:0f:d3:16:f0:04:9b:68:a6:83:11:46:d3:eb:e2:
                    7e:1a:5d:03:02:40:eb:72:60:50:a4:dd:38:7f:23:
                    32:4b:d2:ac:d0:77:a6:92:84:71:6f:7e:3a:b8:0d:
                    98:23:78:30:f6:05:d9:d8:c8:e9:2a:cd:2f:3b:aa:
                    9a:d3:ee:7d:f9:02:e2:bd:21:96:22:2d:30:d7:98:
                    94:bb:99:a7:cd:35:c8:63:32:43:03:59:84:59:be:
                    44:bc:68:7c:78:15:91:d2:31:5d:c9:ee:f1:d5:3c:
                    32:9a:de:ec:4f:75:5a:0f:68:56:34:70:d3:80:c3:
                    a5:ad:fd:ba:f2:6d:70:a1:46:d3:98:9f:b9:c2:f8:
                    3d:e1:99:5d:b5:b7:13:92:1e:90:b4:b3:c4:e4:17:
                    0d:20:83:5d:e6:5e:19:18:26:37:b5:1c:91:01:88:
                    f8:dd:d2:72:f3:fb:7c:8c:e1:e3:83:aa:e4:4d:70:
                    5c:51:b3:39:bc:80:c3:65:18:80:36:48:98:bb:1e:
                    aa:7b:96:8d:1a:94:ae:67:fd:50:01:d5:97:d7:18:
                    15:ee:a6:6d:43:50:13:6c:9c:82:cb:cc:b3:ee:f3:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3F:1A:60:7C:DD:B1:6A:0F:78:94:E4:14:27:AA:94:50:88:9A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4ec14d1-6489-3f06-bfa3-1cd0630a9723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:88:21:72:60:51:a9:f8:95:fc:32:d8:4e:ba:18:a7:33:e5:
         64:8c:42:41:8b:33:21:a8:09:84:95:98:0e:6f:a7:0c:4f:cc:
         0a:49:1e:28:9e:a8:37:de:8e:3a:3c:03:25:1b:50:07:51:51:
         32:b6:94:30:c1:b8:af:85:fc:06:e3:5a:57:75:6a:84:6f:09:
         d6:63:45:34:26:d4:08:08:e5:ab:6d:0c:07:b4:6e:a2:09:97:
         9d:aa:2b:7a:6e:ec:49:a0:3e:7a:60:39:f4:df:77:a5:bc:cb:
         f9:89:9b:83:27:50:4d:25:23:bd:b7:4f:b2:03:43:4d:44:1e:
         f4:7c:0e:90:97:a7:80:ab:e0:4d:b1:45:ce:56:a3:ec:8f:ef:
         84:9f:f4:e6:c8:52:4a:f1:f2:5c:36:9e:29:6b:f5:e2:0d:7c:
         a7:17:bc:02:27:f7:05:73:74:26:71:a8:d5:6b:3b:71:ba:5e:
         41:18:9a:f4:d4:82:e2:54:d8:81:41:53:b6:da:1c:56:c2:c1:
         0b:25:02:d4:ec:34:eb:18:fc:85:b5:f0:5d:7b:57:0b:d4:fa:
         29:ef:31:ee:dd:c6:2a:47:1d:df:19:25:89:5b:36:75:ec:f3:
         38:ff:8d:17:20:a3:bb:5e:2d:b5:23:36:95:69:76:97:54:4f:
         d0:a4:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:34 2024 by rpki-client on console-ams.rpki-client.org