Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1de29a6-0b26-3a17-a55f-6bba6694bbe1.roa
File:                     a1de29a6-0b26-3a17-a55f-6bba6694bbe1.roa (raw, json)
Hash identifier:          PYD8hKwXkH3EYvxHkxWoOBsddFnYTi+fNIEg96C2fXg=
Subject key identifier:   4F:9B:DE:5F:22:59:EE:93:76:20:8C:D8:62:14:8E:DF:B0:35:B0:32
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B1399E6865CE2E1F6A17C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1de29a6-0b26-3a17-a55f-6bba6694bbe1.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     30336
IP address blocks:        207.236.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:13:99:e6:86:5c:e2:e1:f6:a1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=55a6e034-f42b-4e0f-883e-ac282aafe260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:36:c7:3e:78:e7:f0:6f:e0:f6:0e:7e:b0:
                    57:bc:30:75:99:f9:0e:74:49:8d:10:bc:ae:e6:04:
                    22:90:88:81:fc:fc:89:7d:86:d9:86:07:14:0c:07:
                    84:24:9c:3c:ab:91:c1:66:1a:1a:af:c2:cc:36:bd:
                    12:b7:47:80:23:dc:b8:df:87:c2:30:39:ee:e2:9d:
                    b5:a7:74:ed:6f:4c:3e:32:d3:0b:97:48:84:25:60:
                    90:35:70:7a:90:8b:62:f0:96:19:24:f0:4b:fa:be:
                    a2:d9:ee:d2:ec:47:eb:b1:22:72:1d:62:cb:0d:3f:
                    b0:3e:91:c0:8f:45:60:e7:ff:3c:2d:a1:7f:36:44:
                    c1:fb:17:91:1c:80:78:54:82:94:26:20:0f:7b:ba:
                    ef:1a:de:7f:06:c0:fd:4f:b4:8f:ca:fe:f1:8a:43:
                    09:9f:52:5e:db:59:20:43:3d:50:71:89:3e:dc:60:
                    c4:ef:d3:dd:7e:6d:b3:d7:17:08:11:b0:e2:65:52:
                    e6:df:66:35:e7:73:99:16:c7:05:9a:1c:96:01:76:
                    ab:d3:f4:d0:54:8d:29:e5:3f:00:61:62:16:1a:26:
                    9a:dc:4e:74:28:67:27:d5:37:52:fd:2e:67:3a:72:
                    5a:36:3a:3c:7a:0a:79:69:e6:32:17:4a:87:c8:74:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9B:DE:5F:22:59:EE:93:76:20:8C:D8:62:14:8E:DF:B0:35:B0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1de29a6-0b26-3a17-a55f-6bba6694bbe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:be:96:91:94:75:91:30:f9:78:66:7b:18:d8:2f:4f:dd:29:
         2d:39:a0:88:8b:4a:4f:84:19:fe:fd:dd:76:b7:02:26:75:42:
         64:2d:3c:1b:80:d7:02:d4:06:7b:a7:91:35:67:b1:89:30:ad:
         89:65:0a:a9:5b:32:f0:ee:ab:a7:87:bd:a7:56:54:1e:63:f5:
         16:e5:64:fb:b2:4c:37:23:75:58:67:bd:e8:ce:0d:be:b6:ab:
         60:de:ad:2f:07:00:e7:9d:05:9e:24:30:f3:60:f3:cb:0e:66:
         a8:90:e6:c2:33:ef:59:9a:13:4e:3c:c2:7d:6c:d7:fe:07:e3:
         b9:8a:ea:b1:dc:48:3e:d6:28:c0:86:8b:01:1d:bb:7a:a6:f7:
         53:92:ab:c0:24:bb:68:6d:ff:f9:a1:67:6b:f0:0f:15:8b:7e:
         81:1f:eb:38:4d:4e:41:8f:30:64:dc:7e:2d:e7:bd:81:5c:38:
         f9:a2:19:04:be:ed:42:93:32:23:7f:18:ce:f1:ed:ff:08:22:
         ea:8e:68:3d:7b:6b:a2:65:c5:29:54:db:3d:89:0f:73:c7:54:
         c6:83:f4:61:59:11:ff:e2:ef:09:8d:fc:e4:f8:44:e1:c7:e9:
         cb:e6:e9:44:20:90:4f:7e:92:b2:40:65:75:ee:a8:ff:18:25:
         98:d4:41:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKxOZ5oZc4uH2oXwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NTVhNmUwMzQtZjQyYi00ZTBmLTg4M2UtYWMyODJhYWZlMjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yg2xz545/Bv4PYOfrBXvDB1mfkOdEmNELyu
5gQikIiB/PyJfYbZhgcUDAeEJJw8q5HBZhoar8LMNr0St0eAI9y434fCMDnu4p21
p3Ttb0w+MtMLl0iEJWCQNXB6kIti8JYZJPBL+r6i2e7S7EfrsSJyHWLLDT+wPpHA
j0Vg5/88LaF/NkTB+xeRHIB4VIKUJiAPe7rvGt5/BsD9T7SPyv7xikMJn1Je21kg
Qz1QcYk+3GDE79Pdfm2z1xcIEbDiZVLm32Y153OZFscFmhyWAXar0/TQVI0p5T8A
YWIWGiaa3E50KGcn1TdS/S5nOnJaNjo8egp5aeYyF0qHyHS9iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+b3l8iWe6TdiCM2GIUjt+wNbAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTFkZTI5YTYtMGIyNi0z
YTE3LWE1NWYtNmJiYTY2OTRiYmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+z8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFK+lpGUdZEw+XhmexjYL0/dKS05oIiLSk+EGf793Xa3AiZ1QmQtPBuA
1wLUBnunkTVnsYkwrYllCqlbMvDuq6eHvadWVB5j9RblZPuyTDcjdVhnvejODb62
q2DerS8HAOedBZ4kMPNg88sOZqiQ5sIz71maE048wn1s1/4H47mK6rHcSD7WKMCG
iwEdu3qm91OSq8Aku2ht//mhZ2vwDxWLfoEf6zhNTkGPMGTcfi3nvYFcOPmiGQS+
7UKTMiN/GM7x7f8IIuqOaD17a6JlxSlU2z2JD3PHVMaD9GFZEf/i7wmN/OT4ROHH
6cvm6UQgkE9+krJAZXXuqP8YJZjUQTQ=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:12:09 2024 by rpki-client on console-ams.rpki-client.org