Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b537af2b-ad9a-3cca-9a67-bf45fd015eb9.roa
File:                     b537af2b-ad9a-3cca-9a67-bf45fd015eb9.roa (raw, json)
Hash identifier:          76/SPHRvIuoyP7PO6qLN75FDoNuDSOfTUPE2/7NF6Nw=
Subject key identifier:   C1:99:48:CD:E7:C3:A2:F0:C8:DA:DD:FF:F4:6E:53:C0:5A:A0:0F:72
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12A7C2DC182F80DBDB8F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b537af2b-ad9a-3cca-9a67-bf45fd015eb9.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     21774
IP address blocks:        206.45.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:a7:c2:dc:18:2f:80:db:db:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=c329d55c-7476-46d1-a3a6-d77f7771a5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:2d:dd:95:1d:1e:a9:b5:bb:7b:81:0c:15:
                    9a:c5:f7:ea:f1:d3:c6:8c:46:7d:b6:ab:1c:9d:52:
                    0e:0a:50:71:57:98:e7:a3:3e:be:d3:21:b4:69:2e:
                    18:50:7c:67:f5:75:b4:49:b6:e8:ad:2b:21:9a:23:
                    0c:54:66:4c:a2:0e:2b:12:bc:09:29:04:ec:e0:fd:
                    9f:22:62:30:0e:5b:15:1e:06:9d:54:f8:28:9f:a7:
                    68:36:0f:2a:bf:05:99:12:d4:47:fb:12:46:6b:08:
                    41:fc:56:69:0f:a5:54:02:73:79:2f:d4:72:cb:11:
                    8e:9b:f2:7a:fa:fb:91:28:9a:90:a5:db:3a:f8:72:
                    a7:73:43:24:d8:5b:44:bc:b2:0b:17:55:8f:24:7c:
                    ba:e9:6c:4e:4b:d2:fe:ce:73:af:da:6e:12:5f:b3:
                    ce:25:c2:17:dd:b3:29:d5:db:0d:9a:1f:bb:93:c8:
                    36:4d:05:15:cd:d5:07:f4:1d:c6:a1:fe:00:df:25:
                    3f:7e:c8:cd:54:d8:d5:cc:f5:2e:e3:27:8b:47:db:
                    34:cd:78:dd:1e:d8:8b:48:44:e0:dc:3e:c8:c2:07:
                    63:7b:53:6a:b2:a1:e1:35:af:24:ed:84:36:91:d9:
                    1a:12:b8:49:26:24:31:74:01:ba:dc:14:4a:d5:01:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:99:48:CD:E7:C3:A2:F0:C8:DA:DD:FF:F4:6E:53:C0:5A:A0:0F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b537af2b-ad9a-3cca-9a67-bf45fd015eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.45.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e7:5f:92:42:13:60:a2:fe:0f:91:a2:72:6b:5e:93:7b:60:
         78:8e:c7:83:5c:b1:ff:11:2e:91:51:59:81:da:57:44:31:a0:
         8e:3b:45:be:a7:55:57:5b:0b:59:9e:4b:aa:f6:12:8f:64:58:
         c0:d0:28:27:19:39:1c:f8:fd:1a:03:1d:e7:2e:1f:d3:44:df:
         b0:4c:90:dd:a6:5e:0c:c9:6b:1a:2c:f8:11:60:cd:d3:f3:31:
         de:31:a3:2b:ab:6a:b2:43:c2:46:aa:ce:f8:16:04:14:f2:10:
         61:71:ac:51:98:63:5e:5a:32:4e:1e:28:4f:36:e3:c0:e9:23:
         79:46:c0:e6:7d:91:35:7d:5d:ff:1e:42:e2:8f:b9:d5:aa:7b:
         53:17:8d:e0:f7:a0:27:b6:17:68:ef:59:b9:05:92:93:65:f4:
         2d:7c:48:00:d3:92:9b:6c:c7:fa:6e:e0:d3:83:bd:5e:cf:63:
         cf:d9:31:a8:c5:48:7f:69:99:61:b4:c1:72:99:e7:95:84:b6:
         90:7b:c8:d4:31:5b:33:12:f6:08:8b:d0:ea:fa:d6:14:00:70:
         45:6a:dc:54:14:31:6d:97:12:97:b6:4d:f7:95:76:13:eb:ab:
         26:7c:bf:cb:23:8c:6a:64:c9:b9:80:da:d2:9c:ba:da:43:7a:
         b2:ab:41:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqEqfC3BgvgNvbj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YzMyOWQ1NWMtNzQ3Ni00NmQxLWEzYTYtZDc3Zjc3NzFhNWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomAt3ZUdHqm1u3uBDBWaxffq8dPGjEZ9tqsc
nVIOClBxV5jnoz6+0yG0aS4YUHxn9XW0SbborSshmiMMVGZMog4rErwJKQTs4P2f
ImIwDlsVHgadVPgon6doNg8qvwWZEtRH+xJGawhB/FZpD6VUAnN5L9RyyxGOm/J6
+vuRKJqQpds6+HKnc0Mk2FtEvLILF1WPJHy66WxOS9L+znOv2m4SX7POJcIX3bMp
1dsNmh+7k8g2TQUVzdUH9B3Gof4A3yU/fsjNVNjVzPUu4yeLR9s0zXjdHtiLSETg
3D7Iwgdje1NqsqHhNa8k7YQ2kdkaErhJJiQxdAG63BRK1QHaxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGZSM3nw6LwyNrd//RuU8BaoA9yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjUzN2FmMmItYWQ5YS0z
Y2NhLTlhNjctYmY0NWZkMDE1ZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzi3WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHznX5JCE2Ci/g+RonJrXpN7YHiOx4Ncsf8RLpFRWYHaV0QxoI47Rb6n
VVdbC1meS6r2Eo9kWMDQKCcZORz4/RoDHecuH9NE37BMkN2mXgzJaxos+BFgzdPz
Md4xoyurarJDwkaqzvgWBBTyEGFxrFGYY15aMk4eKE8248DpI3lGwOZ9kTV9Xf8e
QuKPudWqe1MXjeD3oCe2F2jvWbkFkpNl9C18SADTkptsx/pu4NODvV7PY8/ZMajF
SH9pmWG0wXKZ55WEtpB7yNQxWzMS9giL0Or61hQAcEVq3FQUMW2XEpe2TfeVdhPr
qyZ8v8sjjGpkybmA2tKcutpDerKrQdM=
-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org