Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fac818ab-a461-30cc-9a48-be26ce04d29d.roa
File:                     fac818ab-a461-30cc-9a48-be26ce04d29d.roa (raw, json)
Hash identifier:          IQGuf8sM9uWzVqv7k53fsWiD8NH7ZCGOuKkS6G6W/yw=
Subject key identifier:   E3:9E:28:7B:9C:01:4A:77:5B:72:82:E0:49:51:43:B8:5B:22:D6:48
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B41200DC9CF729641E7480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fac818ab-a461-30cc-9a48-be26ce04d29d.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     25946
IP address blocks:        199.243.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:12:00:dc:9c:f7:29:64:1e:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=1b15d471-dd87-457d-87ac-0838bfc667ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:96:03:cd:ca:b7:70:ad:c7:c5:72:c9:8a:
                    2f:33:3e:e9:32:c2:da:86:a9:56:de:5a:e7:fb:71:
                    79:ba:ca:33:98:a1:42:82:e6:d3:4f:c1:96:5d:9b:
                    7e:b7:d1:32:6c:37:eb:74:32:fb:4e:df:d4:c6:2d:
                    9b:7e:9f:3f:d3:4f:71:c8:b9:48:75:d0:e1:c0:aa:
                    8e:08:e4:9b:23:ff:0f:c6:93:9c:f5:a2:d2:36:cf:
                    0c:36:7b:6a:5e:71:0b:14:91:3a:ab:b8:51:76:8a:
                    af:44:6c:36:b2:e8:78:45:9b:79:ab:ab:1e:6a:8e:
                    a6:a8:d1:05:46:dc:14:46:1c:3b:df:fa:7e:87:47:
                    02:f0:81:0f:04:70:ff:eb:cd:3f:57:3d:b7:e7:d5:
                    8d:24:c7:2b:9f:e3:87:d9:bb:a7:a8:a4:c9:ef:f8:
                    6d:f5:e6:ac:f7:30:9d:e1:9b:42:24:5e:d3:12:04:
                    ce:e7:45:1a:17:01:68:eb:9f:23:c9:30:b6:8c:87:
                    0e:9f:e1:37:46:1c:25:b8:3c:01:7d:f5:73:94:2e:
                    51:8c:e9:ac:f0:41:aa:3c:b6:b3:17:fe:57:23:7b:
                    c4:a0:e5:97:72:32:6a:de:fd:fc:c7:04:32:37:46:
                    77:65:56:2a:34:5b:7c:ff:bf:c5:fd:e2:cd:c5:33:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9E:28:7B:9C:01:4A:77:5B:72:82:E0:49:51:43:B8:5B:22:D6:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fac818ab-a461-30cc-9a48-be26ce04d29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:2c:6e:a0:a2:db:f8:b1:20:b2:b5:29:d8:61:49:d4:17:
         29:ad:a9:17:f6:df:00:6a:33:c9:63:cf:af:4b:98:5d:4f:ff:
         3a:c8:3f:cf:86:21:33:59:a3:b5:2f:da:a5:1b:2f:96:35:dd:
         5f:e9:87:80:1a:f9:7d:6e:cf:9f:79:f1:8c:82:23:95:25:36:
         5a:66:5f:85:d0:6c:ca:bf:6e:2f:fe:9e:56:42:0e:c2:fd:f3:
         a5:15:99:15:6e:d5:08:be:e1:ed:bc:78:10:1f:9b:c3:be:03:
         22:97:d2:41:37:2b:9b:87:4f:03:83:1b:7b:c0:d2:0d:36:dd:
         bf:9d:35:bd:eb:65:be:08:2e:ca:b5:a0:06:6a:a1:f2:7f:6a:
         7b:05:0e:5a:89:11:14:6a:30:91:f3:7a:af:71:23:1e:78:06:
         7c:4c:10:9e:fc:a9:b5:c5:ce:24:20:8b:5d:a1:79:a9:67:8f:
         32:fd:b2:00:06:dd:0e:fc:29:10:88:d3:ca:79:83:89:99:4e:
         17:f5:d4:be:e7:76:89:91:fd:4d:0f:be:09:77:f6:27:fe:98:
         c7:01:ed:7c:e4:52:fc:9a:05:1f:94:3d:0f:f6:92:b5:ee:0a:
         c8:80:af:0a:a4:8c:91:af:7b:c3:f8:09:9f:4e:1c:35:9e:63:
         27:ce:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:02:34 2024 by rpki-client on console-ams.rpki-client.org