Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e9f67836-f017-31fa-8710-81f3a93c1b55.roa
File:                     e9f67836-f017-31fa-8710-81f3a93c1b55.roa (raw, json)
Hash identifier:          l+exsANUwkO1qiCO9llf1aABYPUkQqMet3r6HTfQ5C8=
Subject key identifier:   90:31:E4:A8:EB:DC:7B:30:3F:16:59:98:FE:8D:D1:C4:72:C6:6C:14
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA14B5C3A75395EE33628000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e9f67836-f017-31fa-8710-81f3a93c1b55.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:b5:c3:a7:53:95:ee:33:62:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=1caf8951-ad29-4b5f-87b9-e660bf5ba887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:85:86:33:fc:b8:69:8d:7b:2f:5b:c5:cf:
                    db:e4:72:78:ff:7f:f0:36:a9:2c:56:12:a8:c7:63:
                    00:14:61:ff:02:b3:52:6e:5e:ec:1a:3f:2f:c0:9d:
                    fa:42:54:56:bf:dc:19:b6:9b:56:a5:a7:61:c5:d0:
                    90:0c:df:4a:26:6f:d9:39:db:ce:09:f7:d5:30:e1:
                    6f:29:df:fb:8a:35:c7:88:1e:4b:4c:a6:cb:9f:1c:
                    8e:26:15:48:0c:3f:13:02:5b:05:6c:22:00:5a:5b:
                    14:4a:ee:22:b9:a0:06:11:e9:2d:84:5a:80:f8:6a:
                    ad:9e:4a:a1:4e:c0:a6:ff:ff:e5:75:a7:72:cd:bf:
                    bf:0d:84:65:13:41:24:cf:61:06:7d:70:80:e3:1f:
                    9d:1c:a1:c3:c2:43:8f:df:38:9d:45:73:cc:b8:58:
                    bf:7b:4c:17:87:df:dc:ad:81:e4:29:66:da:70:cb:
                    7a:69:f5:3f:63:4a:a6:88:7b:4b:f5:07:17:48:32:
                    62:10:57:bb:85:e6:8f:bf:92:87:9a:f2:59:73:dd:
                    06:83:73:bd:65:d2:77:04:7a:c8:da:c6:47:1f:f0:
                    7b:b2:4f:89:32:bc:02:6a:6d:0d:3e:8f:ac:92:34:
                    0f:03:8f:a0:46:35:25:c1:25:57:3a:e1:b2:bb:73:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:31:E4:A8:EB:DC:7B:30:3F:16:59:98:FE:8D:D1:C4:72:C6:6C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e9f67836-f017-31fa-8710-81f3a93c1b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:59:e5:2a:3c:c4:da:e1:35:6b:11:2b:3b:97:32:dc:4c:84:
         26:47:74:85:be:f0:d0:f0:57:d2:f2:b5:fb:1a:4f:72:73:1b:
         4b:b9:80:8a:5b:8c:28:8a:37:a7:cf:56:12:ed:9d:56:e8:d6:
         9e:46:84:f9:27:c5:6f:3f:89:d9:eb:c7:4a:21:58:9d:10:2a:
         e1:f4:8d:ec:cc:d6:7d:49:68:14:ad:85:f5:bc:5f:97:2b:3b:
         a3:44:33:d5:db:d4:8b:80:b6:f1:1d:60:be:a4:ef:a6:1a:90:
         c0:b0:e1:9a:57:69:7c:42:f0:dc:b0:a6:ad:41:b8:ff:9d:c6:
         63:7a:c7:43:3c:ef:f1:32:a6:b7:10:5d:fe:37:f9:98:27:a7:
         30:39:3a:1e:bc:69:61:63:df:a1:83:0c:9e:c5:71:8c:77:47:
         c7:f7:31:bc:cc:f5:f0:13:9d:24:db:2b:f7:06:99:02:d0:37:
         94:23:65:8a:2d:9d:96:f6:44:09:0e:d4:aa:ce:6b:9d:7b:d9:
         40:92:ad:97:58:e6:b7:bf:f6:a8:90:8a:85:a6:d3:15:b9:16:
         0f:3c:de:a0:24:c6:b6:d1:6c:e8:14:ff:5e:af:d3:02:6b:0d:
         c3:91:8c:56:35:ab:0c:2a:f5:3f:44:35:01:49:32:ec:a4:52:
         5c:b7:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org