Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/efd3d6b8-20f7-3b11-aece-9bf34fa535a3.roa
File:                     efd3d6b8-20f7-3b11-aece-9bf34fa535a3.roa (raw, json)
Hash identifier:          uFpJfBCYDRNCp/Oa7AAsvz34I9iCLcdhzHkiDR2lGXw=
Subject key identifier:   98:A4:FB:6D:AD:70:DE:E7:2C:CB:A6:8D:45:D2:D9:0D:7F:33:17:ED
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FF9D875D532B3855E2BE2
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/efd3d6b8-20f7-3b11-aece-9bf34fa535a3.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21723
IP address blocks:        204.101.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:f9:d8:75:d5:32:b3:85:5e:2b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b9d9772b-5968-426f-964b-a2972f938d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a5:00:2a:96:a9:21:9e:e9:6d:67:b8:36:60:
                    8e:79:9c:4c:00:a6:9f:1d:24:88:bd:72:72:b3:e1:
                    d6:43:39:b9:86:26:73:96:6b:74:21:62:e8:ed:c0:
                    77:9e:73:6c:00:79:f9:1d:84:bb:ad:17:7a:8f:75:
                    01:71:a1:80:c9:28:84:fe:d8:4e:d9:74:cc:f7:95:
                    ca:1a:9e:64:93:e8:3a:9c:65:47:1e:27:4a:26:74:
                    7e:0e:e5:ff:1d:bc:46:03:bd:7a:aa:a6:a7:60:89:
                    3e:bc:dc:56:6b:e9:72:2f:bd:d3:96:ef:31:0c:a3:
                    51:9e:f4:e3:5f:be:c7:67:b3:b3:ab:fd:56:ff:0a:
                    05:73:9b:26:ff:10:50:92:12:9c:f0:a2:20:6e:32:
                    a0:95:f7:67:dc:a4:e2:a5:5a:0d:da:ca:2c:4f:5d:
                    e1:9d:06:d6:01:9d:37:bc:dc:30:3d:cf:74:28:57:
                    09:4d:ee:6c:3a:3b:74:5b:a1:66:e4:75:fc:0b:2c:
                    9e:ac:d3:13:22:84:62:a4:da:7a:2f:a6:2f:8e:42:
                    26:14:12:a7:de:7a:d6:c7:13:78:8a:3e:e6:41:96:
                    01:e6:53:23:f7:9c:7c:ff:b8:ea:4b:6f:61:f5:be:
                    31:fb:a3:53:67:04:16:51:d2:d3:bf:06:92:ac:77:
                    f1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:FB:6D:AD:70:DE:E7:2C:CB:A6:8D:45:D2:D9:0D:7F:33:17:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/efd3d6b8-20f7-3b11-aece-9bf34fa535a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:55:ea:bf:48:e1:b7:33:bd:b8:fc:74:1b:31:55:7d:86:12:
         b2:8e:8b:01:6a:c7:20:53:2c:bf:2e:bf:f3:a8:dc:de:1f:f8:
         30:0c:e6:aa:d1:bf:57:d8:8a:34:24:c5:40:e3:5f:a8:d0:fd:
         aa:35:a3:d6:a4:d4:72:e4:63:34:86:6f:0b:d3:94:91:00:cb:
         c3:91:26:90:b0:db:53:3c:6f:2e:97:ee:85:3e:d3:5c:a9:85:
         0f:62:9a:b3:b1:d7:cc:55:81:58:03:d2:48:48:19:e6:77:b8:
         3d:bb:b0:60:e2:a1:66:35:83:f3:f3:0f:af:40:64:cb:b0:e5:
         99:2a:be:ab:4f:ff:85:85:10:42:20:72:5a:fa:88:7b:d8:ff:
         3a:f5:8d:1c:51:e8:ca:79:c5:7d:96:ee:a0:e4:9c:ee:e9:2f:
         0c:04:f5:34:ac:d3:2b:5f:24:87:b3:29:4b:4c:22:79:04:5c:
         80:e1:2e:9e:6c:90:dd:d5:8f:8a:05:c3:29:97:71:d3:f5:fc:
         98:fd:d2:75:a0:e6:47:5f:0c:f6:67:07:65:02:1d:3e:fb:14:
         29:76:c8:1c:a6:46:a4:0c:c4:0c:52:ef:a9:4d:83:87:c2:00:
         83:e2:03:4d:2b:32:fc:6a:dd:f8:dd:b1:be:54:f0:15:a9:25:
         a7:81:aa:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrD/nYddUys4VeK+IwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
YjlkOTc3MmItNTk2OC00MjZmLTk2NGItYTI5NzJmOTM4ZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKUAKpapIZ7pbWe4NmCOeZxMAKafHSSIvXJy
s+HWQzm5hiZzlmt0IWLo7cB3nnNsAHn5HYS7rRd6j3UBcaGAySiE/thO2XTM95XK
Gp5kk+g6nGVHHidKJnR+DuX/HbxGA716qqanYIk+vNxWa+lyL73Tlu8xDKNRnvTj
X77HZ7Ozq/1W/woFc5sm/xBQkhKc8KIgbjKglfdn3KTipVoN2sosT13hnQbWAZ03
vNwwPc90KFcJTe5sOjt0W6Fm5HX8CyyerNMTIoRipNp6L6YvjkImFBKn3nrWxxN4
ij7mQZYB5lMj95x8/7jqS29h9b4x+6NTZwQWUdLTvwaSrHfxhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJik+22tcN7nLMumjUXS2Q1/MxftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZWZkM2Q2YjgtMjBmNy0z
YjExLWFlY2UtOWJmMzRmYTUzNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhV6r9I4bczvbj8dBsxVX2GErKOiwFqxyBTLL8uv/Oo3N4f+DAM5qrR
v1fYijQkxUDjX6jQ/ao1o9ak1HLkYzSGbwvTlJEAy8ORJpCw21M8by6X7oU+01yp
hQ9imrOx18xVgVgD0khIGeZ3uD27sGDioWY1g/PzD69AZMuw5ZkqvqtP/4WFEEIg
clr6iHvY/zr1jRxR6Mp5xX2W7qDknO7pLwwE9TSs0ytfJIezKUtMInkEXIDhLp5s
kN3Vj4oFwymXcdP1/Jj90nWg5kdfDPZnB2UCHT77FCl2yBymRqQMxAxS76lNg4fC
AIPiA00rMvxq3fjdsb5U8BWpJaeBqo4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:12 2024 by rpki-client on console-fra.rpki-client.org