Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01f39f54-8909-38a0-b7a6-37b918472508.roa
File:                     01f39f54-8909-38a0-b7a6-37b918472508.roa (raw, json)
Hash identifier:          XW+rodch74AHhWElUuYAYfmNodDyfugxXCntL9QeWDU=
Subject key identifier:   12:E7:07:B8:6D:49:AC:B0:23:55:21:45:F3:3E:B5:E8:92:EE:CB:CB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B114B43F058AFFAD0CE0220
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01f39f54-8909-38a0-b7a6-37b918472508.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     29907
IP address blocks:        207.179.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:4b:43:f0:58:af:fa:d0:ce:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=305041b9-0d95-4980-b578-bb3835d8fbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:e9:6b:22:7e:85:65:b5:93:3d:7d:63:b5:
                    8b:2d:3a:4e:f2:88:e4:b4:c6:fa:57:bd:70:02:70:
                    ac:39:08:2c:03:f9:3f:34:d3:63:2a:c1:17:bb:f0:
                    b4:1e:a0:53:d1:80:8e:db:98:aa:cc:4b:78:71:6b:
                    9b:ac:f5:fb:fa:75:87:92:5b:60:d0:0e:77:db:51:
                    33:31:1f:93:18:b2:eb:c9:ea:ac:32:7e:71:3a:a8:
                    c2:01:ef:49:cf:f3:7b:31:0d:b7:4a:83:e2:1f:1f:
                    48:51:40:a2:c4:02:c6:31:28:25:6e:35:d3:ca:12:
                    66:c4:24:43:cb:98:ae:07:a9:ef:58:bb:3d:ad:50:
                    d8:18:b4:ae:36:ea:d9:5f:d9:b5:31:c7:d6:6f:88:
                    49:8d:f3:33:c6:e9:ab:b8:f3:7d:78:7e:62:ad:af:
                    78:aa:b8:77:ac:8b:3e:fa:ee:c5:7c:a1:b5:0c:a1:
                    85:40:3d:ad:bc:02:23:d5:66:42:df:2b:80:bf:f3:
                    be:c8:82:80:ac:36:a3:11:25:81:bc:a0:38:e5:db:
                    d5:1a:1d:85:c2:99:a9:c0:0a:bf:ed:d2:3d:90:d8:
                    a4:7b:05:f1:5e:99:d7:6f:7e:9a:f7:7d:dd:00:ce:
                    ae:36:0d:bf:46:e9:59:68:c3:5b:de:fc:65:33:a6:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E7:07:B8:6D:49:AC:B0:23:55:21:45:F3:3E:B5:E8:92:EE:CB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01f39f54-8909-38a0-b7a6-37b918472508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:ce:d8:99:09:3b:b2:d2:2f:08:a8:4d:d6:db:10:02:3f:
         fe:ce:8c:8b:3c:07:07:8f:45:80:f5:f7:20:53:e2:22:13:6c:
         d4:09:13:77:dc:be:f0:0e:f4:02:6c:2d:5b:6a:b5:e8:f0:75:
         d3:3a:8f:e8:fe:5f:dd:25:49:fd:0d:7d:db:58:bf:2b:6b:3b:
         de:79:10:13:c4:87:5c:5b:23:1e:b1:79:63:2c:20:91:a7:1a:
         3a:6f:bd:88:78:c8:45:47:95:ce:9a:de:05:b7:eb:07:20:1d:
         d6:7f:cd:1d:87:32:39:fa:6e:ca:5a:1b:a0:db:18:c0:af:8a:
         30:91:93:0e:fb:1d:7b:7d:3d:58:77:59:d2:58:d7:d3:73:f4:
         c3:17:95:af:6c:1e:39:a4:44:e1:77:b8:6d:c0:1d:13:9b:87:
         ac:9e:dd:b9:d6:2a:06:f2:b3:cc:51:d0:1b:ff:29:d6:4f:1a:
         e3:d8:b9:17:b8:8f:90:75:0e:1e:ba:fd:85:2f:f7:82:82:4b:
         3a:50:b3:09:aa:7a:3a:b0:66:1e:fd:ab:38:e4:6d:0e:af:8f:
         42:7d:55:63:2c:7d:0d:f6:72:3e:a9:35:7b:95:00:9d:8d:ff:
         e0:9d:ec:e0:cd:1e:61:cc:1b:19:54:b6:a2:a5:7a:ac:67:8b:
         99:8a:5e:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEUtD8Fiv+tDOAiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MzA1MDQxYjktMGQ5NS00OTgwLWI1NzgtYmIzODM1ZDhmYmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0PpayJ+hWW1kz19Y7WLLTpO8ojktMb6V71w
AnCsOQgsA/k/NNNjKsEXu/C0HqBT0YCO25iqzEt4cWubrPX7+nWHkltg0A5321Ez
MR+TGLLryeqsMn5xOqjCAe9Jz/N7MQ23SoPiHx9IUUCixALGMSglbjXTyhJmxCRD
y5iuB6nvWLs9rVDYGLSuNurZX9m1McfWb4hJjfMzxumruPN9eH5ira94qrh3rIs+
+u7FfKG1DKGFQD2tvAIj1WZC3yuAv/O+yIKArDajESWBvKA45dvVGh2FwpmpwAq/
7dI9kNikewXxXpnXb36a933dAM6uNg2/RulZaMNb3vxlM6bR7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLnB7htSaywI1UhRfM+teiS7svLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMDFmMzlmNTQtODkwOS0z
OGEwLWI3YTYtMzdiOTE4NDcyNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7OCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADT2ztiZCTuy0i8IqE3W2xACP/7OjIs8BwePRYD19yBT4iITbNQJE3fc
vvAO9AJsLVtqtejwddM6j+j+X90lSf0NfdtYvytrO955EBPEh1xbIx6xeWMsIJGn
GjpvvYh4yEVHlc6a3gW36wcgHdZ/zR2HMjn6bspaG6DbGMCvijCRkw77HXt9PVh3
WdJY19Nz9MMXla9sHjmkROF3uG3AHRObh6ye3bnWKgbys8xR0Bv/KdZPGuPYuRe4
j5B1Dh66/YUv94KCSzpQswmqejqwZh79qzjkbQ6vj0J9VWMsfQ32cj6pNXuVAJ2N
/+Cd7ODNHmHMGxlUtqKleqxni5mKXjY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org