Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c52a749-218d-320d-8f88-57ebc679c22a.roa
File:                     0c52a749-218d-320d-8f88-57ebc679c22a.roa (raw, json)
Hash identifier:          nrFycMG8bdA15nax3HV2vf3B9Bjbxg5GBumMvOfRNfI=
Subject key identifier:   D2:AF:1A:C0:D6:A2:FC:45:52:18:B5:67:74:F7:49:99:FF:0E:00:E4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F70D11A63B783411279E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c52a749-218d-320d-8f88-57ebc679c22a.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        184.151.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:70:d1:1a:63:b7:83:41:12:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=003955a5-338b-427e-8719-70cb1d4ceff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:b1:2a:6f:85:b0:20:59:96:bd:5d:37:86:
                    8b:75:9c:8e:16:b2:f2:73:a7:d6:9f:7b:68:b5:bf:
                    7b:8b:53:07:6a:12:a7:98:15:14:dc:b1:9d:30:3c:
                    6d:73:ac:2a:70:45:18:bc:55:98:95:2e:e7:1c:2a:
                    12:1e:27:ff:c3:34:f6:fa:46:46:d6:86:09:6a:a9:
                    ec:b8:c8:e8:6d:f5:1c:74:6a:98:99:e6:5a:0a:f9:
                    0f:c1:9a:66:db:1a:57:f5:8b:67:26:a5:1a:96:d9:
                    16:77:57:c5:2a:b8:0f:1e:46:b5:df:41:00:0e:f1:
                    44:d2:f1:be:e1:dc:8e:59:a0:33:ef:1d:09:fc:81:
                    54:82:2c:93:46:32:a6:97:36:fa:5c:a7:b0:63:89:
                    dd:07:b4:6e:26:4c:ff:4f:e9:d6:9b:3e:2f:43:7b:
                    ab:f7:9e:1c:28:66:42:7c:9b:68:5e:b7:20:d5:10:
                    39:bd:12:69:5a:e3:ba:46:21:80:d8:3c:35:e8:d4:
                    22:24:c0:fb:a8:b3:b5:f0:d4:13:3e:19:fb:83:e9:
                    94:21:5d:0b:01:25:31:c4:d9:00:3e:77:ea:e7:25:
                    db:f1:0b:15:c5:c5:88:7c:fa:e1:3a:6b:33:d1:96:
                    42:94:6c:ff:bc:54:7e:73:ba:56:3c:90:8c:db:48:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:1A:C0:D6:A2:FC:45:52:18:B5:67:74:F7:49:99:FF:0E:00:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c52a749-218d-320d-8f88-57ebc679c22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8d:29:8c:57:15:a1:93:98:1f:4b:d2:13:55:fb:ca:4e:0c:
         75:b4:b5:e8:80:95:ba:01:e9:85:43:dc:df:c2:6f:2b:61:78:
         b9:24:dc:e1:10:be:92:2a:d5:86:eb:ea:1e:f4:1b:73:59:88:
         f3:29:20:31:07:e0:ed:bc:e3:62:d0:93:3e:0b:8c:cc:b2:01:
         ce:ca:e7:00:3d:10:60:f3:26:87:a4:29:9f:09:f4:cd:27:27:
         44:c4:0d:79:f0:05:c0:0b:af:e2:8a:ff:2d:12:c4:0e:d2:e2:
         4f:b0:b8:a5:4f:c6:96:02:e0:fc:33:70:da:20:86:45:49:0a:
         07:87:e3:e8:7e:58:aa:95:4d:8d:9c:8a:b6:c8:2d:6c:2d:2e:
         6a:77:da:e0:58:77:a0:68:99:95:dc:8b:58:cb:47:d6:b5:4d:
         5b:12:3b:97:3c:e8:a5:11:5c:1b:68:a1:06:38:5c:ff:78:42:
         7f:44:bd:17:d0:6a:09:27:ca:fa:e2:47:34:58:57:1d:6e:b0:
         16:b5:3c:b4:9b:3b:c0:11:b3:24:4f:64:d4:52:63:c1:6f:09:
         96:6a:4d:94:f7:d4:69:9d:74:6b:60:63:7e:3c:28:73:66:3c:
         b1:0c:24:d2:a7:a3:fe:8c:c9:fc:ff:1f:cb:61:c7:22:46:d9:
         f0:4d:a9:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrD3DRGmO3g0ESeeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MDAzOTU1YTUtMzM4Yi00MjdlLTg3MTktNzBjYjFkNGNlZmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiKxKm+FsCBZlr1dN4aLdZyOFrLyc6fWn3to
tb97i1MHahKnmBUU3LGdMDxtc6wqcEUYvFWYlS7nHCoSHif/wzT2+kZG1oYJaqns
uMjobfUcdGqYmeZaCvkPwZpm2xpX9YtnJqUaltkWd1fFKrgPHka130EADvFE0vG+
4dyOWaAz7x0J/IFUgiyTRjKmlzb6XKewY4ndB7RuJkz/T+nWmz4vQ3ur954cKGZC
fJtoXrcg1RA5vRJpWuO6RiGA2Dw16NQiJMD7qLO18NQTPhn7g+mUIV0LASUxxNkA
Pnfq5yXb8QsVxcWIfPrhOmsz0ZZClGz/vFR+c7pWPJCM20jHvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKvGsDWovxFUhi1Z3T3SZn/DgDkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMGM1MmE3NDktMjE4ZC0z
MjBkLThmODgtNTdlYmM2NzljMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuJcAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeNKYxXFaGTmB9L0hNV+8pODHW0teiAlboB6YVD3N/CbytheLkk3OEQ
vpIq1Ybr6h70G3NZiPMpIDEH4O2842LQkz4LjMyyAc7K5wA9EGDzJoekKZ8J9M0n
J0TEDXnwBcALr+KK/y0SxA7S4k+wuKVPxpYC4PwzcNoghkVJCgeH4+h+WKqVTY2c
irbILWwtLmp32uBYd6BomZXci1jLR9a1TVsSO5c86KURXBtooQY4XP94Qn9EvRfQ
agknyvriRzRYVx1usBa1PLSbO8ARsyRPZNRSY8FvCZZqTZT31GmddGtgY348KHNm
PLEMJNKno/6Myfz/H8thxyJG2fBNqZs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org