Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6957640f-687c-3b4f-a714-44856d3600ba.roa
File:                     6957640f-687c-3b4f-a714-44856d3600ba.roa (raw, json)
Hash identifier:          4Sii/VFozzRG5pJwlun2mRD7UQRMCeMy/YVa09cTGgU=
Subject key identifier:   8E:08:BC:BB:61:78:B0:A1:C1:49:F0:FF:81:EA:FD:D7:D5:F8:A2:D4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B4284BD5188F8D7858880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6957640f-687c-3b4f-a714-44856d3600ba.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        209.226.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:42:84:bd:51:88:f8:d7:85:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=4f282bc0-dcca-4d93-a11f-c14c0fa27aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:7b:a5:fa:4b:70:62:f7:b4:b1:0b:16:0b:
                    5b:0e:9f:db:11:30:eb:49:c7:49:c0:62:30:ea:2d:
                    f9:ab:68:a4:b4:32:93:9a:92:64:21:80:f8:e8:f7:
                    12:57:ee:b3:24:40:7a:d0:b4:14:c4:84:6d:19:3a:
                    9c:91:a1:de:2c:ca:93:5b:2d:52:a5:f8:b2:b8:a9:
                    e7:73:09:96:61:d2:a5:01:c1:38:c5:3f:52:30:a1:
                    a5:67:81:bc:52:af:11:de:3f:a2:db:91:42:18:f8:
                    a2:c2:7f:0f:0b:f9:dc:fc:38:3f:ca:6a:03:d6:41:
                    7e:81:83:0b:3f:d8:ac:ca:a7:f0:f1:e5:97:9a:d8:
                    16:50:15:0e:04:bd:19:e8:3c:df:13:0c:35:b3:bb:
                    76:9f:1a:0f:d6:b6:4a:21:d6:ed:11:ff:84:62:a0:
                    4d:60:f5:94:cd:2b:f4:fa:13:67:c5:f5:34:eb:44:
                    55:7a:b7:b2:9f:80:be:5e:9f:cc:5a:3d:8f:15:2e:
                    51:3c:ec:c0:f7:08:c1:ba:68:92:fb:b7:74:82:c7:
                    0d:3c:8f:3f:9e:11:24:04:f4:05:38:7b:56:84:06:
                    fa:6b:ca:4d:56:b1:b2:de:d7:64:01:82:40:f1:c0:
                    1b:34:06:c7:0e:1c:eb:14:0a:bc:07:ce:fa:aa:ad:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:08:BC:BB:61:78:B0:A1:C1:49:F0:FF:81:EA:FD:D7:D5:F8:A2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6957640f-687c-3b4f-a714-44856d3600ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:68:37:db:da:96:8d:33:b8:2c:76:a2:db:90:15:de:a4:
         56:bc:72:d2:e8:cd:c0:a4:76:5a:02:dc:e7:66:7e:cf:ae:63:
         fa:0a:66:c0:b7:81:3f:0a:2e:8e:4d:de:2c:1d:3f:99:3e:66:
         a6:94:11:1a:41:75:c6:66:40:b6:f7:af:ca:21:cc:ce:ad:88:
         1e:62:03:38:a5:af:c5:eb:0b:bf:81:09:b4:78:b7:7b:92:d1:
         37:d7:6b:02:3b:bf:ca:f5:74:3a:8b:fc:f8:a9:bd:21:58:dc:
         e2:eb:bf:f1:11:79:30:aa:22:d5:09:e7:2f:bb:46:ca:1e:ca:
         46:a9:f2:91:6c:da:ec:ca:84:50:6a:29:30:b6:f0:b0:20:79:
         8c:82:d8:27:df:e8:3c:be:6c:0a:45:06:c6:90:50:65:32:87:
         5c:8e:c1:82:f5:9d:34:d2:10:e7:70:23:91:b4:e6:03:ec:5f:
         c9:4f:95:33:bb:15:ab:e5:23:34:99:b3:91:9d:57:37:a3:2d:
         44:49:bf:c2:98:38:47:d1:ef:7d:9c:d2:bd:d2:11:46:c7:d2:
         d5:6f:d6:09:f7:f1:05:c5:af:59:3f:5c:65:12:0c:90:c0:03:
         00:d5:2c:f8:9e:79:00:31:91:fe:ca:db:50:08:1a:59:48:ad:
         c6:51:bd:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtK0KEvVGI+NeFiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NGYyODJiYzAtZGNjYS00ZDkzLWExMWYtYzE0YzBmYTI3YWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ57pfpLcGL3tLELFgtbDp/bETDrScdJwGIw
6i35q2iktDKTmpJkIYD46PcSV+6zJEB60LQUxIRtGTqckaHeLMqTWy1SpfiyuKnn
cwmWYdKlAcE4xT9SMKGlZ4G8Uq8R3j+i25FCGPiiwn8PC/nc/Dg/ymoD1kF+gYML
P9isyqfw8eWXmtgWUBUOBL0Z6DzfEww1s7t2nxoP1rZKIdbtEf+EYqBNYPWUzSv0
+hNnxfU060RVereyn4C+Xp/MWj2PFS5RPOzA9wjBumiS+7d0gscNPI8/nhEkBPQF
OHtWhAb6a8pNVrGy3tdkAYJA8cAbNAbHDhzrFAq8B876qq0CqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4IvLtheLChwUnw/4Hq/dfV+KLUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjk1NzY0MGYtNjg3Yy0z
YjRmLWE3MTQtNDQ4NTZkMzYwMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eImMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3AaDfb2paNM7gsdqLbkBXepFa8ctLozcCkdloC3Odmfs+uY/oKZsC3
gT8KLo5N3iwdP5k+ZqaUERpBdcZmQLb3r8ohzM6tiB5iAzilr8XrC7+BCbR4t3uS
0TfXawI7v8r1dDqL/PipvSFY3OLrv/EReTCqItUJ5y+7Rsoeykap8pFs2uzKhFBq
KTC28LAgeYyC2Cff6Dy+bApFBsaQUGUyh1yOwYL1nTTSEOdwI5G05gPsX8lPlTO7
FavlIzSZs5GdVzejLURJv8KYOEfR732c0r3SEUbH0tVv1gn38QXFr1k/XGUSDJDA
AwDVLPieeQAxkf7K21AIGllIrcZRvf0=
-----END CERTIFICATE-----
Generated at Tue Jun 25 22:09:02 2024 by rpki-client on console-ams.rpki-client.org