Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd61c026-466b-3a54-86d8-f24bd69de507.roa
File:                     bd61c026-466b-3a54-86d8-f24bd69de507.roa (raw, json)
Hash identifier:          /V8kZrQs5qBBnlMnIcLTCBGgVZPs7uBSnPImn7bf4Ko=
Subject key identifier:   A2:49:8C:B8:20:A3:7A:51:3E:39:6D:B1:F3:66:1E:21:C0:A9:2D:BA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D29FAA1C5BF06F00BD99F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd61c026-466b-3a54-86d8-f24bd69de507.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:fa:a1:c5:bf:06:f0:0b:d9:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=bc100531-78a5-4d53-9b97-2289b8969671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:09:1b:bc:ea:6d:a6:71:05:cc:09:1e:24:
                    f7:08:90:a5:43:9a:71:f0:e4:5b:01:96:32:9f:de:
                    38:2c:61:e7:92:f7:02:06:1d:33:96:d1:f4:bf:65:
                    04:05:87:4f:41:be:a1:c7:85:b6:26:6d:9a:0f:88:
                    ac:06:5f:f0:1b:eb:f1:80:76:c1:47:2e:c2:f9:36:
                    bd:62:17:bf:28:56:ee:c0:a8:24:12:40:46:77:fa:
                    a1:09:6d:2f:6d:80:eb:da:dd:48:13:c6:68:52:91:
                    f3:e3:9b:9e:52:7e:f5:99:b0:be:cd:17:77:14:70:
                    38:8b:75:b5:93:5e:29:15:bb:30:d9:40:b1:38:e9:
                    57:d7:a3:af:45:d4:28:53:96:ce:e0:bc:8a:16:c1:
                    05:ee:13:3a:de:cc:05:74:25:7b:8c:2c:23:60:65:
                    14:ba:44:81:26:21:21:77:4f:e9:96:3d:61:6e:5f:
                    36:52:47:4a:d3:b6:0b:7d:bb:64:de:fd:b5:3e:88:
                    71:07:2a:15:07:45:85:c9:0a:9b:af:62:b7:ce:81:
                    0d:66:d4:2a:bf:3f:53:58:7a:4c:59:7e:c4:d6:63:
                    fd:e6:70:87:32:94:41:96:7f:58:52:c3:79:8f:95:
                    13:04:8c:4b:0a:c3:7f:63:1d:1e:bb:17:c8:66:ca:
                    a3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:49:8C:B8:20:A3:7A:51:3E:39:6D:B1:F3:66:1E:21:C0:A9:2D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bd61c026-466b-3a54-86d8-f24bd69de507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:0d:35:6e:70:e5:f2:48:52:16:3b:e4:a0:8d:56:8f:48:37:
         2f:69:95:37:51:dd:13:60:9e:be:cc:46:4b:dc:0b:1e:5d:d1:
         6c:63:42:85:ba:7d:b4:58:4c:be:b4:43:e6:8e:8c:8b:86:ea:
         a8:24:ea:4b:c9:05:39:d7:2e:6b:fa:03:1a:0f:e3:63:42:cf:
         d1:dd:c5:16:08:d1:02:a6:a8:b2:77:0e:d7:f6:f1:43:b7:fb:
         8d:65:e1:1a:3c:74:7e:e0:fd:73:72:f2:6a:ce:0d:68:99:8c:
         b7:2d:1b:a0:19:23:35:f6:72:14:b2:dc:15:ea:f0:2f:f7:c3:
         46:9d:42:e4:3e:98:dc:ae:30:2f:51:14:78:25:9f:f6:9e:69:
         a4:85:9c:84:01:a4:df:0c:c6:d8:c3:f7:30:42:04:65:12:11:
         cd:5e:37:13:87:dd:9a:3c:a3:62:fa:de:e4:57:f9:15:eb:58:
         d0:75:15:48:f8:26:12:39:da:c7:2c:d4:ef:be:cb:2f:c6:af:
         5c:f1:8c:75:36:b4:84:92:a7:cf:68:88:46:ba:f8:2c:df:2d:
         ff:6a:8f:4e:b6:e8:df:81:10:1b:51:e0:ec:6e:63:3a:f6:a5:
         7e:45:f6:b7:26:ab:56:73:d1:c9:20:5d:3d:28:87:dd:40:ed:
         c1:f1:0c:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKfqhxb8G8AvZnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YmMxMDA1MzEtNzhhNS00ZDUzLTliOTctMjI4OWI4OTY5NjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko8JG7zqbaZxBcwJHiT3CJClQ5px8ORbAZYy
n944LGHnkvcCBh0zltH0v2UEBYdPQb6hx4W2Jm2aD4isBl/wG+vxgHbBRy7C+Ta9
Yhe/KFbuwKgkEkBGd/qhCW0vbYDr2t1IE8ZoUpHz45ueUn71mbC+zRd3FHA4i3W1
k14pFbsw2UCxOOlX16OvRdQoU5bO4LyKFsEF7hM63swFdCV7jCwjYGUUukSBJiEh
d0/plj1hbl82UkdK07YLfbtk3v21PohxByoVB0WFyQqbr2K3zoENZtQqvz9TWHpM
WX7E1mP95nCHMpRBln9YUsN5j5UTBIxLCsN/Yx0euxfIZsqjRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJJjLggo3pRPjltsfNmHiHAqS26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYmQ2MWMwMjYtNDY2Yi0z
YTU0LTg2ZDgtZjI0YmQ2OWRlNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwNNW5w5fJIUhY75KCNVo9INy9plTdR3RNgnr7MRkvcCx5d0WxjQoW6
fbRYTL60Q+aOjIuG6qgk6kvJBTnXLmv6AxoP42NCz9HdxRYI0QKmqLJ3Dtf28UO3
+41l4Ro8dH7g/XNy8mrODWiZjLctG6AZIzX2chSy3BXq8C/3w0adQuQ+mNyuMC9R
FHgln/aeaaSFnIQBpN8MxtjD9zBCBGUSEc1eNxOH3Zo8o2L63uRX+RXrWNB1FUj4
JhI52scs1O++yy/Gr1zxjHU2tISSp89oiEa6+CzfLf9qj0626N+BEBtR4OxuYzr2
pX5F9rcmq1Zz0ckgXT0oh91A7cHxDDk=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:46:49 2024 by rpki-client on console-fra.rpki-client.org