Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db5dc2c1-5b8e-3356-a5f8-77acb19540cb.roa
File:                     db5dc2c1-5b8e-3356-a5f8-77acb19540cb.roa (raw, json)
Hash identifier:          i1xrEY/mQV/ZYBzBTY8hb061B1GSMfm5qK65xA6m504=
Subject key identifier:   8F:49:CC:F2:25:E2:E3:1C:23:23:60:32:4A:EF:80:AC:1A:EB:1D:A9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B117E2D2082A25778F604E4
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db5dc2c1-5b8e-3356-a5f8-77acb19540cb.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        207.236.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:7e:2d:20:82:a2:57:78:f6:04:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=9177f95b-b4a8-48cb-8c62-4a9f439b7110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:72:87:2a:41:2f:8f:74:95:08:6d:9a:24:
                    ca:9f:0c:61:ce:7e:2b:5d:73:de:9e:ea:d7:99:a9:
                    a6:d3:fc:b8:8f:38:09:f1:d9:cd:dc:e2:e4:e5:d4:
                    39:86:e5:38:a9:ff:87:64:b3:2f:07:6e:4c:ca:d2:
                    54:9f:70:bc:d2:e3:9e:dc:31:12:a3:f7:e9:f9:e6:
                    07:c5:ae:94:d4:bc:5e:0f:49:db:63:31:82:1e:cb:
                    af:66:f3:f8:cc:de:78:af:4b:09:ff:0b:5c:c2:92:
                    1d:dd:08:a8:98:8d:2e:13:7a:a2:70:17:de:1b:1c:
                    44:1a:07:af:9c:f6:4c:fd:fc:fe:17:8f:de:fb:8a:
                    b1:ee:92:fe:f0:d1:d0:dc:4a:78:d3:14:b6:87:5e:
                    cf:5e:32:15:76:96:a5:d2:3f:94:7d:9f:11:f5:d2:
                    72:57:0e:54:bd:a4:c3:c3:e4:4d:66:7a:a2:16:9a:
                    bf:51:fc:fa:5b:64:c1:5d:34:b4:7f:76:e0:ee:8f:
                    18:d3:db:f8:d2:32:ab:c4:3c:93:23:a6:cf:56:83:
                    fb:5d:e2:08:9e:13:00:b8:55:e1:00:83:9c:00:58:
                    18:f2:6b:5c:96:bb:eb:e0:a0:94:57:94:8f:3e:58:
                    a4:01:fd:5c:2b:6d:6c:09:1a:ff:f0:57:92:a4:e4:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:CC:F2:25:E2:E3:1C:23:23:60:32:4A:EF:80:AC:1A:EB:1D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db5dc2c1-5b8e-3356-a5f8-77acb19540cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:de:63:0a:9e:f9:fb:ff:fb:17:17:ca:2f:07:13:b8:08:43:
         0f:5a:f0:ec:b5:6c:ab:e7:59:54:ce:6c:bf:97:b5:e6:3b:22:
         3e:3f:c7:1b:0c:d6:9d:8a:e8:26:82:b9:b1:b0:29:36:8d:be:
         78:b5:32:2e:c4:f6:ed:0a:4c:7f:6a:d2:93:b3:8b:d5:bf:fb:
         15:17:b4:55:3e:4e:aa:36:60:ea:f4:24:e2:4d:b5:c0:06:3f:
         d0:78:fd:e9:81:77:68:e1:49:c0:a1:01:80:ba:d7:03:aa:aa:
         13:ca:9d:74:4a:e6:aa:27:35:31:b5:f4:87:cf:c6:d2:21:67:
         f6:44:5f:fa:c0:c7:b4:3e:bc:73:36:95:92:7c:de:25:d3:77:
         8f:03:47:d8:35:de:59:38:6c:55:35:63:9c:7b:20:54:37:2c:
         98:8a:c0:39:84:78:8d:0a:59:ec:31:eb:53:6e:76:f6:6c:18:
         07:64:71:d4:0c:82:35:d3:95:36:ee:a9:33:61:e6:41:64:83:
         ac:64:42:43:13:83:ce:4a:ad:96:05:9b:5c:a7:a0:0b:f5:25:
         de:70:6b:ec:ce:69:ae:22:c6:b7:c9:22:e6:22:5f:55:b8:11:
         d8:6f:25:ef:1e:58:34:f7:a8:28:9a:df:e7:e8:07:0d:c4:f3:
         bb:ff:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org