Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa
File:                     91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa (raw, json)
Hash identifier:          xxJpSjnwes3vDFB9uk5jAqaYSwV5ePGAB4B6Z90cH/I=
Subject key identifier:   AD:EB:64:C1:17:C2:26:04:F4:0F:6F:BD:E0:2F:26:22:84:43:8F:53
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E3E0060D3
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa
Signing time:             Tue 05 Nov 2019 23:57:22 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     22691
IP address blocks:        207.198.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:3e:00:60:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=c81fec8c-3e40-48b1-b967-8199728711c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:6e:88:21:3b:be:a6:ce:36:17:1f:52:e5:
                    63:1d:cb:14:bc:61:12:7e:7e:4b:be:7a:ed:a5:95:
                    69:d4:ce:ca:55:b3:0d:58:7b:73:aa:b9:50:5a:b0:
                    c5:35:85:8a:51:28:30:5a:e8:94:7e:e0:74:b2:18:
                    a1:97:95:c1:0c:7d:9a:8d:58:87:ce:17:70:64:8b:
                    a0:be:af:f9:7a:57:d5:d2:4f:e0:5f:ca:36:4c:5d:
                    aa:0f:82:80:e8:6e:00:85:0d:c6:6a:0a:7a:44:08:
                    20:a0:2a:91:5c:99:e7:e0:c3:dc:61:ad:91:24:dd:
                    38:04:13:40:61:eb:5e:a8:df:a8:2e:84:f4:5f:e3:
                    d8:aa:60:b4:b2:e7:66:f3:8e:56:d7:c9:2e:5c:98:
                    26:5e:4f:da:10:60:62:2b:df:59:68:bf:60:b8:d8:
                    a0:c8:ed:27:7f:26:b2:0f:51:bb:3f:2e:e9:dd:5a:
                    e2:48:39:04:a1:14:a7:41:3b:81:d3:4c:3e:5d:44:
                    b1:2d:fb:02:fc:5f:53:f7:0f:c0:e6:ba:4c:97:01:
                    39:e5:ab:c3:23:6e:70:b1:87:26:89:03:54:02:22:
                    84:35:78:dc:e4:67:61:51:57:74:49:e8:10:5d:e7:
                    34:93:c1:94:b0:01:4d:00:2c:44:e1:cc:98:0b:70:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EB:64:C1:17:C2:26:04:F4:0F:6F:BD:E0:2F:26:22:84:43:8F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.198.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:51:e7:47:a2:7c:96:51:7a:79:82:a9:a4:7a:54:65:27:d0:
         9c:d4:35:56:ad:8f:12:b3:2a:cf:08:d4:2c:3c:b3:63:6f:8f:
         97:18:80:4b:0c:90:e0:fa:d1:eb:54:f4:ea:dd:f8:19:2c:f4:
         37:6a:55:8e:5a:aa:77:3b:60:9f:2c:14:03:3c:d4:5e:a1:be:
         e3:2a:67:e2:22:72:f0:3b:2a:cd:77:7a:ef:b5:fe:70:33:28:
         23:8f:0d:02:0a:4d:2b:0a:d6:00:40:a7:ed:02:6e:df:fa:bc:
         f5:4b:2b:6f:73:91:b2:5a:d6:d7:5b:f6:09:a6:68:5c:f8:0c:
         e6:f5:59:4e:06:0f:4f:fb:02:4f:ce:9f:3f:e0:8c:48:3d:db:
         e7:d8:ce:e0:a9:be:f3:a2:bd:a1:c7:8c:ea:43:06:74:b8:ff:
         44:8b:96:34:3c:df:b6:81:1b:e0:a0:3f:38:ca:5a:fb:e7:5a:
         f0:34:b9:eb:74:5c:78:41:65:24:44:41:1d:b4:a8:0d:06:05:
         70:80:32:c5:1b:4e:66:16:b9:7a:43:ef:74:02:f2:dd:41:cb:
         ae:2c:51:ec:0b:fa:0e:a1:b6:a3:a6:9f:b6:cf:d6:0c:ae:da:
         d0:9b:9f:3c:89:95:4c:a6:33:82:86:6d:79:f0:04:d4:90:1e:
         8c:d7:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:15 2024 by rpki-client on console-ams.rpki-client.org