Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/120450f6-6e28-3550-ab23-3af26be43308.roa
File:                     120450f6-6e28-3550-ab23-3af26be43308.roa (raw, json)
Hash identifier:          AsabaJ46GJcYUn9x8jsC4PUVqmmP9rsVxxhKMd/yeZM=
Subject key identifier:   41:C4:61:6E:76:E3:7D:EA:3C:ED:6A:DF:72:DC:9A:94:AA:13:5B:F2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FE2DD12DEC874820DC600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/120450f6-6e28-3550-ab23-3af26be43308.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21552
IP address blocks:        204.101.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:e2:dd:12:de:c8:74:82:0d:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=45ac46d6-b925-477d-97b2-c9906d83571f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:12:ac:e5:f5:f9:11:52:9d:9a:0f:08:bf:
                    d8:97:64:c6:2a:fb:e3:3b:c3:4b:16:ac:89:e7:31:
                    26:7c:12:3e:0e:9a:e6:6c:9c:82:5f:25:48:e0:36:
                    b4:5e:d9:05:7c:71:d4:12:72:2b:1d:b7:0d:04:e3:
                    82:37:fe:23:44:fa:fb:26:af:a8:d8:e0:59:04:85:
                    c8:14:b2:5b:76:f1:53:41:fb:5b:10:9a:73:5f:75:
                    1d:1c:d9:ed:51:cc:75:93:c6:dc:df:b6:81:f3:0b:
                    ca:34:4b:67:1b:ae:1b:67:0d:ee:85:4f:93:b0:d5:
                    9e:71:87:10:07:fa:b1:13:01:93:d5:3b:c3:3e:e9:
                    92:32:b1:52:a1:a9:3e:ca:43:ea:7b:3e:60:a6:c1:
                    28:a5:40:2d:8e:b3:54:5b:c6:cb:c3:e5:0f:5b:ac:
                    df:fc:fd:42:4d:e4:48:bc:57:7b:05:66:4d:3a:68:
                    dc:85:18:93:65:12:29:d0:91:66:d9:7b:eb:62:63:
                    6f:50:49:33:9e:cc:70:b6:11:83:97:25:98:8e:73:
                    56:46:0a:02:93:4c:ab:d9:cf:4a:30:ed:08:d3:9e:
                    f5:36:7e:23:62:48:0c:22:e8:63:de:0c:be:82:8c:
                    62:ba:9d:d7:b0:ce:90:2a:f4:ae:95:78:b4:16:47:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C4:61:6E:76:E3:7D:EA:3C:ED:6A:DF:72:DC:9A:94:AA:13:5B:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/120450f6-6e28-3550-ab23-3af26be43308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:17:9b:a3:0e:d5:0c:b4:be:cc:d0:be:10:cb:dd:6a:eb:b0:
         8c:4c:20:00:e4:48:8f:54:f2:5f:22:5f:7b:9c:df:81:fd:70:
         b2:63:d4:65:4e:8f:2a:fa:e3:ca:34:12:46:08:45:9e:e2:7c:
         d2:59:ef:31:ee:23:ae:c1:45:a2:36:fd:2b:4c:b3:d5:55:f0:
         e4:78:c9:ae:df:89:9d:96:8e:cc:8e:a2:45:8c:67:cf:22:84:
         36:fb:e0:60:cd:bb:b6:b7:18:8d:07:db:b8:08:74:4a:ec:4d:
         20:01:6c:d1:32:6e:88:29:f6:9f:9c:26:1d:ef:35:f3:b6:12:
         8d:3e:48:b2:52:5c:6d:91:82:f1:40:9b:78:2e:b9:3e:6c:ef:
         2b:12:58:97:62:6f:f1:5e:75:5d:c4:67:1b:78:96:c1:52:92:
         6c:e0:f8:c7:12:d6:f2:42:6a:47:a8:4c:81:12:ed:92:61:ea:
         35:88:b0:a7:35:b0:4d:2b:e9:fa:1a:4d:0f:e1:40:65:57:8d:
         b2:b8:50:85:80:32:14:95:d0:1d:87:7f:31:80:dc:70:a9:2b:
         9c:37:46:2b:06:ab:83:20:69:a4:d6:8f:e1:ec:7b:1b:57:b5:
         c4:d8:cc:2e:d0:0c:27:47:1f:d5:c0:1c:20:84:43:b5:7d:1f:
         13:29:5d:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrD+LdEt7IdIINxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NDVhYzQ2ZDYtYjkyNS00NzdkLTk3YjItYzk5MDZkODM1NzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFASrOX1+RFSnZoPCL/Yl2TGKvvjO8NLFqyJ
5zEmfBI+DprmbJyCXyVI4Da0XtkFfHHUEnIrHbcNBOOCN/4jRPr7Jq+o2OBZBIXI
FLJbdvFTQftbEJpzX3UdHNntUcx1k8bc37aB8wvKNEtnG64bZw3uhU+TsNWecYcQ
B/qxEwGT1TvDPumSMrFSoak+ykPqez5gpsEopUAtjrNUW8bLw+UPW6zf/P1CTeRI
vFd7BWZNOmjchRiTZRIp0JFm2XvrYmNvUEkznsxwthGDlyWYjnNWRgoCk0yr2c9K
MO0I0571Nn4jYkgMIuhj3gy+goxiup3XsM6QKvSulXi0Fkeh7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHEYW52433qPO1q33LcmpSqE1vyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTIwNDUwZjYtNmUyOC0z
NTUwLWFiMjMtM2FmMjZiZTQzMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsXm6MO1Qy0vszQvhDL3WrrsIxMIADkSI9U8l8iX3uc34H9cLJj1GVO
jyr648o0EkYIRZ7ifNJZ7zHuI67BRaI2/StMs9VV8OR4ya7fiZ2WjsyOokWMZ88i
hDb74GDNu7a3GI0H27gIdErsTSABbNEybogp9p+cJh3vNfO2Eo0+SLJSXG2RgvFA
m3guuT5s7ysSWJdib/FedV3EZxt4lsFSkmzg+McS1vJCakeoTIES7ZJh6jWIsKc1
sE0r6foaTQ/hQGVXjbK4UIWAMhSV0B2HfzGA3HCpK5w3RisGq4MgaaTWj+HsextX
tcTYzC7QDCdHH9XAHCCEQ7V9HxMpXR8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org