Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21fb8298-35e1-3c8e-93f3-af14aca500e0.roa
File:                     21fb8298-35e1-3c8e-93f3-af14aca500e0.roa (raw, json)
Hash identifier:          MRrBT00+b8xqlGyzmv1DmO49iIA3Ddu16/icVCsR6Dg=
Subject key identifier:   B8:BE:6D:E6:78:C0:44:A6:76:81:EE:63:3F:00:E6:A1:82:BC:99:45
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA14D234109F17F68E584860
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21fb8298-35e1-3c8e-93f3-af14aca500e0.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        216.208.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:d2:34:10:9f:17:f6:8e:58:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=ab670219-dc15-4bf8-8943-38c22bbb9d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:44:72:99:4d:8a:64:98:ff:0a:4f:07:6d:
                    45:9e:63:56:79:3b:35:47:4a:5c:25:08:b4:2a:04:
                    55:e4:bd:25:b7:c0:9d:d1:6d:9d:88:1d:c0:8d:dd:
                    0e:ea:49:42:9f:f0:2e:ca:d7:0b:1b:0b:e6:82:fb:
                    d5:05:2b:b5:b1:dc:fd:02:2b:4e:1c:56:ad:50:58:
                    3a:c0:8a:30:56:f7:2e:14:43:fd:dd:9e:98:a0:0f:
                    07:91:50:b5:27:b3:d5:58:52:80:2d:64:74:19:fa:
                    eb:53:29:48:22:98:32:94:b7:95:a4:13:77:c4:62:
                    be:42:05:d5:78:7a:6a:2f:70:2f:8a:96:54:20:56:
                    5d:8a:bb:8a:94:db:25:64:9b:7d:8f:97:bf:04:f4:
                    b4:3a:da:20:43:96:6e:79:bb:6b:f0:e4:77:fa:65:
                    e2:ad:86:33:82:6c:18:04:70:60:10:ea:eb:3e:36:
                    03:8c:81:13:7e:72:2d:5f:c2:1a:91:b0:e8:2b:c2:
                    98:28:c0:b2:d0:0d:07:86:f0:44:09:2f:e6:db:16:
                    d7:a2:ba:a2:ed:18:98:a7:57:fe:b2:c9:d1:c9:0f:
                    95:73:71:67:92:82:ed:26:cd:43:e8:a0:33:21:b6:
                    cb:26:04:27:61:90:2b:83:f1:81:db:fa:8c:ab:bd:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:6D:E6:78:C0:44:A6:76:81:EE:63:3F:00:E6:A1:82:BC:99:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21fb8298-35e1-3c8e-93f3-af14aca500e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:19:1f:77:23:1b:26:e5:bf:4e:96:6e:86:0b:27:77:53:7a:
         dd:d2:be:1f:e5:55:d4:bd:eb:37:de:14:85:4c:0d:5a:e6:fc:
         10:2f:b3:5e:e9:6f:52:c8:cb:c6:cd:83:f4:75:67:23:20:7e:
         53:2d:09:ee:e1:ff:74:bd:0e:b1:0b:51:7a:ab:e9:34:13:42:
         78:ee:ca:3c:a2:7b:c7:83:61:7d:f3:3d:84:6d:5c:8e:81:1a:
         39:fa:1c:72:38:2a:c3:f7:4a:df:89:3f:c7:65:46:cd:51:b7:
         ac:f3:e9:b7:ce:b7:a9:4f:f1:a6:39:7e:bf:14:0c:80:d7:ef:
         03:4a:9c:48:83:3c:41:18:8d:a7:3d:a7:f1:ee:42:27:63:8f:
         3f:84:98:45:25:cc:ae:56:d6:66:8b:0e:f5:1c:89:00:18:93:
         3d:79:a5:8f:75:4e:03:79:d7:60:f3:a3:43:9d:59:6d:91:8f:
         fc:d8:90:81:85:9d:c3:ba:4d:fc:3b:a6:50:a8:94:2e:ec:7b:
         8c:6c:25:d6:84:d1:e8:47:0b:cc:44:59:d5:36:f3:a9:fb:2e:
         5a:70:20:7b:46:7c:a8:25:c5:0c:e4:07:0f:05:13:d9:3a:55:
         b9:1c:5c:65:5c:b8:80:3c:18:5d:c8:bf:4d:06:61:8b:25:16:
         f0:e8:aa:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqFNI0EJ8X9o5YSGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YWI2NzAyMTktZGMxNS00YmY4LTg5NDMtMzhjMjJiYmI5ZDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VFEcplNimSY/wpPB21FnmNWeTs1R0pcJQi0
KgRV5L0lt8Cd0W2diB3Ajd0O6klCn/AuytcLGwvmgvvVBSu1sdz9AitOHFatUFg6
wIowVvcuFEP93Z6YoA8HkVC1J7PVWFKALWR0GfrrUylIIpgylLeVpBN3xGK+QgXV
eHpqL3AvipZUIFZdiruKlNslZJt9j5e/BPS0OtogQ5Zuebtr8OR3+mXirYYzgmwY
BHBgEOrrPjYDjIETfnItX8IakbDoK8KYKMCy0A0HhvBECS/m2xbXorqi7RiYp1f+
ssnRyQ+Vc3FnkoLtJs1D6KAzIbbLJgQnYZArg/GB2/qMq72viQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLi+beZ4wESmdoHuYz8A5qGCvJlFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjFmYjgyOTgtMzVlMS0z
YzhlLTkzZjMtYWYxNGFjYTUwMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NDtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkZH3cjGyblv06WboYLJ3dTet3Svh/lVdS96zfeFIVMDVrm/BAvs17p
b1LIy8bNg/R1ZyMgflMtCe7h/3S9DrELUXqr6TQTQnjuyjyie8eDYX3zPYRtXI6B
Gjn6HHI4KsP3St+JP8dlRs1Rt6zz6bfOt6lP8aY5fr8UDIDX7wNKnEiDPEEYjac9
p/HuQidjjz+EmEUlzK5W1maLDvUciQAYkz15pY91TgN512Dzo0OdWW2Rj/zYkIGF
ncO6Tfw7plColC7se4xsJdaE0ehHC8xEWdU286n7LlpwIHtGfKglxQzkBw8FE9k6
VbkcXGVcuIA8GF3Iv00GYYslFvDoqqQ=
-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:00 2023 by rpki-client on console-fra.rpki-client.org