Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee9c2b92-e516-3107-962d-534c6af3532f.roa
File:                     ee9c2b92-e516-3107-962d-534c6af3532f.roa (raw, json)
Hash identifier:          X5lY7cg/5fYrQpAC9QLJvd96lIvvQQy5/hycSUb9GPo=
Subject key identifier:   2A:64:E8:16:BE:CA:72:E7:43:44:FC:53:EE:9B:14:08:5B:EC:81:9E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FF0C9E68E4F08E2CA6470
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee9c2b92-e516-3107-962d-534c6af3532f.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21723
IP address blocks:        204.101.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:f0:c9:e6:8e:4f:08:e2:ca:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=10ed15fa-7b74-436a-b1c4-03cc20070577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:9d:20:06:41:f3:16:8f:a0:c5:49:69:e1:
                    3b:22:e0:dd:b2:a5:94:c9:5c:62:a4:e9:f6:18:b5:
                    7e:be:bb:ff:8c:e1:45:d8:d4:bf:dd:62:27:33:ad:
                    af:57:4d:df:8c:2c:00:d3:73:ac:e3:d3:71:63:90:
                    18:82:0e:8e:86:a9:34:d5:6d:44:28:03:dc:ee:25:
                    e9:25:8d:ef:cd:a1:9c:e0:3c:e7:ab:8d:f8:8a:ed:
                    d7:89:dc:de:38:ac:c4:e9:a0:1f:8e:e7:d5:4c:8f:
                    5a:ef:6b:00:de:ed:44:cf:b0:0a:88:95:8e:1f:79:
                    bb:5b:66:cd:89:59:41:fa:17:13:d7:0d:e7:1e:b7:
                    31:fa:0e:27:93:b9:04:50:a8:5d:76:a2:99:97:77:
                    e8:45:88:28:29:e9:d0:44:65:14:29:1f:80:c7:f4:
                    38:84:b4:c6:e7:51:bb:74:93:73:74:71:97:45:e2:
                    53:5b:e6:a4:e9:39:ff:23:18:f0:bc:bb:68:09:f6:
                    5c:c4:41:b4:c0:d6:f8:e1:7e:48:9f:76:a1:a0:71:
                    6e:21:e7:d2:19:0a:ed:a1:b3:83:02:03:c8:d0:f0:
                    c9:03:dd:5a:28:d1:72:4c:4c:be:52:8e:41:f0:fa:
                    ab:0f:b9:a7:ed:5b:6e:1f:a8:59:25:21:84:42:f1:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:E8:16:BE:CA:72:E7:43:44:FC:53:EE:9B:14:08:5B:EC:81:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee9c2b92-e516-3107-962d-534c6af3532f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f3:18:01:13:05:c4:ee:e6:71:29:ad:23:6e:8d:b6:c1:72:
         a0:7c:be:6e:20:db:3d:c9:95:02:dd:f3:c1:13:2e:0e:4a:95:
         76:5b:24:7f:b3:a8:b0:ba:d6:18:a4:21:4c:61:3b:16:b1:df:
         cd:4d:b6:a7:87:c1:99:c9:c6:04:23:31:d7:03:8e:64:1d:63:
         2d:c3:49:65:50:8f:23:97:d2:5b:56:6b:3b:02:6b:5a:9e:97:
         cc:63:ca:5d:5e:4c:8f:2a:62:16:3b:89:d0:7d:47:a0:8f:35:
         36:61:d8:4a:70:64:9e:76:82:97:2d:37:77:af:87:9d:1e:96:
         db:0c:58:0c:42:1c:91:08:90:04:5d:41:6f:c9:fc:7b:01:8a:
         40:d0:df:31:bf:79:3c:3d:b1:78:18:3a:dd:52:83:ab:a3:d2:
         9d:2f:de:8e:1f:23:dc:df:91:ff:47:71:38:16:13:f1:e8:01:
         ca:25:57:f2:f2:13:95:24:12:55:4a:90:f8:60:3b:f7:0e:85:
         1a:21:ac:25:62:11:45:39:82:92:fa:a0:8e:31:8d:27:82:5f:
         21:8d:9f:c3:20:15:fc:33:23:bb:35:a0:3e:00:27:cc:24:fd:
         22:d5:86:46:74:85:a8:d7:f4:9c:1c:49:38:23:0a:6e:77:ad:
         83:a0:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org