Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a20ed5-57c2-3bd3-a220-2242ca6971b6.roa
File:                     d3a20ed5-57c2-3bd3-a220-2242ca6971b6.roa (raw, json)
Hash identifier:          sLdPM+wBXDEev/60BmMzyqyewxcAlSfvXoRfloORnEU=
Subject key identifier:   AC:26:74:C0:4A:55:84:5F:E0:5D:31:D5:59:08:A9:4F:42:B8:82:A2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1083B0898EE83EE18AF9E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a20ed5-57c2-3bd3-a220-2242ca6971b6.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21724
IP address blocks:        206.47.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:83:b0:89:8e:e8:3e:e1:8a:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=22b6466d-dd8e-415e-b4a9-fd136596d941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:5f:40:72:68:70:47:bb:9f:59:50:63:e6:
                    36:d9:9b:2b:66:f4:d4:b0:ce:c5:05:c9:0c:ca:bc:
                    4e:6a:fc:41:37:61:0f:72:4d:23:ff:44:78:9f:82:
                    26:e0:ce:cd:a6:5a:ed:21:71:f1:6b:97:2d:94:13:
                    c8:e7:56:67:76:53:c4:fe:ec:7a:bd:bb:8f:c6:93:
                    c7:24:e9:e3:d4:94:b2:8f:fb:76:13:38:df:23:0b:
                    bc:0e:f2:9c:61:88:cf:43:f2:3d:53:c4:5c:7f:6b:
                    3a:d4:b1:51:0b:c5:5a:ef:bb:16:b5:62:a9:ec:ec:
                    0f:79:2d:1d:9a:e4:fe:c0:fb:ef:86:6c:e4:df:ce:
                    58:b2:17:80:15:cb:a2:21:28:05:5f:39:a6:c2:ff:
                    36:27:2f:6f:a5:35:ce:db:8d:c6:d8:3f:b0:4b:2c:
                    9d:38:fa:39:63:82:50:37:8d:83:23:76:9c:57:0e:
                    1c:59:ce:82:68:20:2a:5e:c6:9f:94:cd:6b:27:50:
                    ff:c3:22:f8:f6:94:b0:68:19:b9:80:a5:25:7e:41:
                    97:f6:37:6b:cb:40:35:e3:7a:47:be:07:f0:5f:d8:
                    60:39:c8:f3:c1:e4:e4:9b:77:22:07:a1:49:db:ea:
                    64:ea:a6:36:59:fd:c5:39:90:30:ff:9b:a5:15:fd:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:26:74:C0:4A:55:84:5F:E0:5D:31:D5:59:08:A9:4F:42:B8:82:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3a20ed5-57c2-3bd3-a220-2242ca6971b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:c0:f4:81:4c:76:41:d6:e6:a4:5f:e6:fa:bc:31:80:17:
         3e:4a:a2:69:42:8d:8e:a2:24:cd:06:ad:76:37:65:a6:01:96:
         7c:fb:d0:39:dc:09:34:55:8b:8c:30:f5:1f:52:29:92:9e:9c:
         2f:a5:9e:9a:b2:8b:20:82:ab:29:4b:82:bd:84:3e:5b:a9:ce:
         8b:6d:af:b7:0f:63:97:c2:b8:85:70:3f:8b:a0:be:35:d5:9c:
         6c:05:95:c2:ee:2e:2b:05:81:fb:80:e2:59:c4:a1:7d:60:98:
         fa:d3:2b:5f:c2:da:00:b3:fe:f5:f7:04:c6:5f:59:12:25:c1:
         2e:1b:c6:17:6c:27:08:49:bb:90:98:ed:37:97:0b:d3:8c:a4:
         0f:84:b0:4e:7c:eb:0c:3f:26:bc:b4:3a:4f:23:40:57:a0:5e:
         24:a5:57:25:b7:61:34:67:81:1e:f9:6c:0b:52:61:18:68:0c:
         37:34:82:89:50:7b:1b:36:70:c2:6e:ba:ea:48:d5:2e:f7:65:
         e8:e4:4e:e2:2c:82:54:41:76:96:b3:7d:07:95:ca:c6:eb:53:
         7d:c5:c5:61:c0:ba:d9:da:d0:19:87:ff:ba:0f:29:bd:c8:86:
         e8:95:93:cf:7a:b7:be:e7:da:a2:76:9e:17:71:32:94:15:7d:
         b1:66:8f:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEIOwiY7oPuGK+eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MjJiNjQ2NmQtZGQ4ZS00MTVlLWI0YTktZmQxMzY1OTZkOTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZdfQHJocEe7n1lQY+Y22ZsrZvTUsM7FBckM
yrxOavxBN2EPck0j/0R4n4Im4M7NplrtIXHxa5ctlBPI51ZndlPE/ux6vbuPxpPH
JOnj1JSyj/t2EzjfIwu8DvKcYYjPQ/I9U8Rcf2s61LFRC8Va77sWtWKp7OwPeS0d
muT+wPvvhmzk385YsheAFcuiISgFXzmmwv82Jy9vpTXO243G2D+wSyydOPo5Y4JQ
N42DI3acVw4cWc6CaCAqXsaflM1rJ1D/wyL49pSwaBm5gKUlfkGX9jdry0A143pH
vgfwX9hgOcjzweTkm3ciB6FJ2+pk6qY2Wf3FOZAw/5ulFf2ktwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKwmdMBKVYRf4F0x1VkIqU9CuIKiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDNhMjBlZDUtNTdjMi0z
YmQzLWEyMjAtMjI0MmNhNjk3MWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi+iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEppwPSBTHZB1uakX+b6vDGAFz5KomlCjY6iJM0GrXY3ZaYBlnz70Dnc
CTRVi4ww9R9SKZKenC+lnpqyiyCCqylLgr2EPlupzottr7cPY5fCuIVwP4ugvjXV
nGwFlcLuLisFgfuA4lnEoX1gmPrTK1/C2gCz/vX3BMZfWRIlwS4bxhdsJwhJu5CY
7TeXC9OMpA+EsE586ww/Jry0Ok8jQFegXiSlVyW3YTRngR75bAtSYRhoDDc0golQ
exs2cMJuuupI1S73ZejkTuIsglRBdpazfQeVysbrU33FxWHAutna0BmH/7oPKb3I
huiVk896t77n2qJ2nhdxMpQVfbFmj2c=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org