Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b148d1ee-c72d-3591-8eeb-1df019440e0e.roa
File:                     b148d1ee-c72d-3591-8eeb-1df019440e0e.roa (raw, json)
Hash identifier:          us+MaKqEZ1KsquPWSYJF2df+EOu7GHsywb6d9Dvz6qY=
Subject key identifier:   BF:31:1F:E3:1A:41:0A:A4:A8:B8:CD:63:5D:2F:E8:20:98:F7:9C:AD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B55181117B2625825A83A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b148d1ee-c72d-3591-8eeb-1df019440e0e.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        207.236.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:51:81:11:7b:26:25:82:5a:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=185e5ef7-1598-4b27-ae71-ce19e41d21d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:d2:90:5f:7c:13:45:15:55:08:cd:d8:94:
                    90:06:9a:ce:1d:66:4c:30:24:75:88:13:5e:4f:7d:
                    79:0c:58:88:6e:d7:2e:70:6e:f6:71:4a:d1:d0:0f:
                    8b:d5:ba:85:89:51:44:86:f1:33:b2:38:38:27:98:
                    97:b0:c3:9b:2d:54:87:cb:90:90:f5:2d:ff:03:8d:
                    18:1d:ba:6f:13:83:49:11:74:0a:ec:6e:24:21:88:
                    f2:f4:fe:ee:ab:4a:46:6c:19:18:92:12:a8:4c:1a:
                    6f:d4:ce:e0:77:19:ad:12:19:bc:e1:01:a6:7d:29:
                    2f:d7:80:b5:1a:ac:47:c6:14:71:c1:9c:15:68:64:
                    9a:69:e2:34:af:94:b4:60:12:b4:b4:63:87:e3:a1:
                    90:93:16:6a:c6:ab:d9:1e:18:fe:ca:3b:06:ed:95:
                    f0:04:af:f0:38:48:16:fa:e3:01:7b:a9:4b:cc:19:
                    aa:d3:7e:99:79:79:a4:1a:c7:49:e5:56:71:ed:8d:
                    51:ac:68:a8:70:90:6c:39:9d:f6:83:e4:4d:38:4e:
                    07:0c:77:52:29:47:95:26:ca:19:d3:32:bd:22:b4:
                    ba:46:c8:c3:4d:2d:ea:71:8c:b6:9f:e6:cf:2f:2c:
                    07:1d:21:96:ee:5d:e7:df:2a:a3:ec:96:cc:6b:27:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:31:1F:E3:1A:41:0A:A4:A8:B8:CD:63:5D:2F:E8:20:98:F7:9C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b148d1ee-c72d-3591-8eeb-1df019440e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d5:35:03:f0:46:27:20:09:ba:fe:e2:f4:fb:6a:35:ed:28:
         c9:ed:30:87:a8:5a:7f:d0:b9:cc:35:77:3a:b6:6f:20:f7:3d:
         33:87:1c:43:3e:07:71:d1:27:5e:08:89:74:b0:1c:25:e8:fd:
         1f:f4:01:f5:a5:25:e6:d2:36:90:ea:01:12:90:ea:67:55:6b:
         da:fe:59:99:21:6f:01:c5:00:42:3a:13:ad:4f:e6:10:ac:ee:
         ac:2a:33:ed:45:c4:6f:43:85:10:06:24:85:c4:d2:b9:d0:a7:
         cb:b4:ae:d8:35:40:63:7a:28:b4:d6:38:44:74:6e:16:0c:01:
         86:07:4d:d6:91:b3:ee:db:16:d5:20:08:fd:f1:18:3c:23:04:
         ec:09:db:14:3b:c4:c3:a1:d9:dd:ce:40:16:6e:c1:e1:eb:72:
         95:b1:13:a8:2e:ea:30:5a:93:77:d6:23:94:17:32:93:60:cc:
         b4:da:3c:5b:ac:2b:72:f7:cc:55:bc:fc:4a:13:95:18:27:3b:
         7c:c1:b3:8d:91:56:a3:d4:56:8b:ae:28:eb:97:ce:b1:a9:cf:
         ae:e3:6a:59:cb:96:2c:41:c3:8d:74:e4:d1:3b:bf:9a:af:90:
         39:13:7c:24:90:67:83:36:9e:0c:95:f5:01:26:ec:52:b3:ab:
         ec:01:30:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWtVGBEXsmJYJag6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTg1ZTVlZjctMTU5OC00YjI3LWFlNzEtY2UxOWU0MWQyMWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK7SkF98E0UVVQjN2JSQBprOHWZMMCR1iBNe
T315DFiIbtcucG72cUrR0A+L1bqFiVFEhvEzsjg4J5iXsMObLVSHy5CQ9S3/A40Y
HbpvE4NJEXQK7G4kIYjy9P7uq0pGbBkYkhKoTBpv1M7gdxmtEhm84QGmfSkv14C1
GqxHxhRxwZwVaGSaaeI0r5S0YBK0tGOH46GQkxZqxqvZHhj+yjsG7ZXwBK/wOEgW
+uMBe6lLzBmq036ZeXmkGsdJ5VZx7Y1RrGiocJBsOZ32g+RNOE4HDHdSKUeVJsoZ
0zK9IrS6RsjDTS3qcYy2n+bPLywHHSGW7l3n3yqj7JbMayfciQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL8xH+MaQQqkqLjNY10v6CCY95ytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjE0OGQxZWUtYzcyZC0z
NTkxLThlZWItMWRmMDE5NDQwZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz+wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAO9U1A/BGJyAJuv7i9PtqNe0oye0wh6haf9C5zDV3OrZvIPc9M4ccQz4H
cdEnXgiJdLAcJej9H/QB9aUl5tI2kOoBEpDqZ1Vr2v5ZmSFvAcUAQjoTrU/mEKzu
rCoz7UXEb0OFEAYkhcTSudCny7Su2DVAY3ootNY4RHRuFgwBhgdN1pGz7tsW1SAI
/fEYPCME7AnbFDvEw6HZ3c5AFm7B4etylbETqC7qMFqTd9YjlBcyk2DMtNo8W6wr
cvfMVbz8ShOVGCc7fMGzjZFWo9RWi64o65fOsanPruNqWcuWLEHDjXTk0Tu/mq+Q
ORN8JJBngzaeDJX1ASbsUrOr7AEwMw==
-----END CERTIFICATE-----
Generated at Sat May 18 01:45:51 2024 by rpki-client on console-ams.rpki-client.org