Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be8d696a-45b9-345e-9ffd-10d1135f426e.roa
File:                     be8d696a-45b9-345e-9ffd-10d1135f426e.roa (raw, json)
Hash identifier:          pd/goKsTKAUy9DLdn5nDmgJclZ2b5PNGBUkeHbhUF0E=
Subject key identifier:   5F:1C:77:1A:51:A5:85:E6:AA:E6:2C:8A:E9:86:E9:9A:60:3C:B2:3E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2A0472F1BECB147C296700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be8d696a-45b9-345e-9ffd-10d1135f426e.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        204.101.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:04:72:f1:be:cb:14:7c:29:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=aeaf3890-4cb8-461c-9cf1-aec2adc33a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:23:8c:76:c5:68:80:46:7d:13:e5:8a:d0:
                    37:5b:68:ee:c6:b2:48:b7:54:4f:14:e7:7d:17:92:
                    e0:6a:14:40:99:e0:50:4b:f3:08:75:87:8f:ef:f6:
                    58:bb:83:35:5f:49:81:05:e0:06:00:c4:cb:28:45:
                    ec:75:15:82:60:88:42:03:8a:d5:6f:6c:73:85:b7:
                    80:6e:c2:83:34:b6:9f:50:2e:73:9f:64:da:5b:b0:
                    28:b5:cc:4f:a7:e8:7a:c0:3e:71:ae:21:06:c9:46:
                    73:e9:7e:3f:2a:4b:ea:5f:0a:2d:38:a1:5d:5b:7d:
                    6c:43:61:a5:a9:d4:29:73:af:d3:cc:eb:b5:c3:81:
                    ef:2c:d4:17:6d:c0:da:7c:5a:0d:04:df:9b:68:15:
                    22:7e:18:6e:0a:64:b9:d0:f0:c0:ad:05:5e:7e:fc:
                    ae:b5:52:1c:f1:70:91:97:81:36:5f:ae:5f:ec:58:
                    07:53:4e:52:fb:c9:5d:e2:5e:b0:45:3e:0e:be:b4:
                    38:c0:68:69:91:a8:2e:21:64:71:a2:86:44:70:41:
                    19:d2:b6:35:56:df:83:22:68:d8:4b:94:a0:4d:15:
                    cc:0b:6a:94:33:b8:f2:58:b6:b9:bf:9b:be:1f:28:
                    c6:c0:37:c2:b0:0d:02:de:83:57:33:ec:b2:b6:7b:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1C:77:1A:51:A5:85:E6:AA:E6:2C:8A:E9:86:E9:9A:60:3C:B2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/be8d696a-45b9-345e-9ffd-10d1135f426e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:99:4f:27:16:a7:87:1f:47:1c:5f:ad:79:aa:1b:df:fa:
         70:ba:ec:e5:ff:dd:93:f7:e7:48:48:4f:c1:53:29:d1:b6:73:
         87:d7:9d:c6:65:fb:bb:39:c0:dd:be:39:a7:f5:a0:15:00:16:
         96:32:20:b3:09:c3:f9:ab:11:e4:fa:c5:43:bc:0f:ab:3e:d4:
         b9:d8:dc:23:e7:00:de:4e:0a:ad:0e:f5:9a:16:e6:14:36:53:
         93:d3:31:0b:4c:0e:cd:2a:e3:2b:ce:1b:be:14:36:c8:cb:b8:
         f2:c6:64:8b:34:4d:0b:ec:ac:01:10:b8:42:b5:fb:2f:52:3f:
         50:68:a6:2e:01:fd:a6:71:82:78:c6:3c:72:2b:cd:50:47:cc:
         c3:e8:2e:6f:4d:48:9a:d6:87:ba:18:bc:cd:86:a1:08:0e:86:
         b4:19:91:d9:0f:32:35:50:03:74:dd:e5:54:20:f2:2b:7b:06:
         4f:27:17:b4:38:c4:be:89:15:81:f1:12:72:e5:63:cf:61:b2:
         c9:a9:44:d3:db:60:15:c5:33:c3:3b:e6:65:17:34:94:de:29:
         3a:cd:83:8a:13:06:08:0d:da:d0:52:9c:76:b4:48:29:d3:a1:
         ac:b7:47:14:db:32:8b:8f:f7:04:ae:f0:46:a0:1c:e4:14:47:
         7a:1f:1f:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKgRy8b7LFHwpZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YWVhZjM4OTAtNGNiOC00NjFjLTljZjEtYWVjMmFkYzMzYThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAgjjHbFaIBGfRPlitA3W2juxrJIt1RPFOd9
F5LgahRAmeBQS/MIdYeP7/ZYu4M1X0mBBeAGAMTLKEXsdRWCYIhCA4rVb2xzhbeA
bsKDNLafUC5zn2TaW7AotcxPp+h6wD5xriEGyUZz6X4/KkvqXwotOKFdW31sQ2Gl
qdQpc6/TzOu1w4HvLNQXbcDafFoNBN+baBUifhhuCmS50PDArQVefvyutVIc8XCR
l4E2X65f7FgHU05S+8ld4l6wRT4OvrQ4wGhpkaguIWRxooZEcEEZ0rY1Vt+DImjY
S5SgTRXMC2qUM7jyWLa5v5u+HyjGwDfCsA0C3oNXM+yytnuKcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8cdxpRpYXmquYsiumG6ZpgPLI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYmU4ZDY5NmEtNDViOS0z
NDVlLTlmZmQtMTBkMTEzNWY0MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJ+mU8nFqeHH0ccX615qhvf+nC67OX/3ZP350hIT8FTKdG2c4fXncZl
+7s5wN2+Oaf1oBUAFpYyILMJw/mrEeT6xUO8D6s+1LnY3CPnAN5OCq0O9ZoW5hQ2
U5PTMQtMDs0q4yvOG74UNsjLuPLGZIs0TQvsrAEQuEK1+y9SP1Bopi4B/aZxgnjG
PHIrzVBHzMPoLm9NSJrWh7oYvM2GoQgOhrQZkdkPMjVQA3Td5VQg8it7Bk8nF7Q4
xL6JFYHxEnLlY89hssmpRNPbYBXFM8M75mUXNJTeKTrNg4oTBggN2tBSnHa0SCnT
oay3RxTbMouP9wSu8EagHOQUR3ofH4A=
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:12:09 2024 by rpki-client on console-ams.rpki-client.org