Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22c3d305-76ab-3a86-92e4-7f40862833c5.roa
File:                     22c3d305-76ab-3a86-92e4-7f40862833c5.roa (raw, json)
Hash identifier:          MyWE3wars+8Lkg8gq2nwQ9fYwrExC9W7Zi73zYeaysU=
Subject key identifier:   01:BB:3D:55:44:D9:06:E8:1D:40:99:2F:94:CD:EF:BC:1C:F8:57:4C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F8B6E43D5E60655978700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22c3d305-76ab-3a86-92e4-7f40862833c5.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.151.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:8b:6e:43:d5:e6:06:55:97:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b4d13727-380d-41b7-8588-f08e69400222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:4b:a1:55:9e:d3:c9:92:1f:9a:18:65:0d:
                    c5:a6:81:54:c0:ae:8b:97:d5:a9:4a:ce:92:2e:2b:
                    9c:cb:94:a6:7b:29:22:80:13:3a:59:25:83:2b:6f:
                    a5:cc:d7:c1:71:03:86:b7:86:54:6f:d1:8d:aa:15:
                    5f:fe:ee:be:d9:bc:38:80:c2:36:1b:ad:ce:9a:c9:
                    b9:c3:43:3f:c5:b1:34:3e:07:f8:09:b8:45:78:ce:
                    6b:45:dd:36:01:98:7c:14:f6:a6:31:33:21:fb:f4:
                    b4:d7:0d:22:ab:be:b1:16:27:54:04:2f:c7:30:cc:
                    60:bd:4f:47:c6:f6:9b:56:6d:73:66:34:a2:04:2c:
                    0f:09:71:d2:66:ae:0b:c0:68:9e:f4:a2:1a:b2:f1:
                    a6:0d:e6:21:07:52:27:78:7c:34:69:0f:55:58:15:
                    14:61:f2:f3:fc:74:fa:15:e7:f4:f5:54:b3:51:5f:
                    35:f4:83:93:15:66:35:b1:1f:e1:d7:d3:a0:5a:88:
                    c7:7b:a9:ba:d5:56:d9:58:91:bc:1c:65:f9:8d:4c:
                    49:65:55:09:93:7f:dc:ea:2e:01:39:91:d1:6e:7a:
                    b6:e4:7f:4e:6a:e3:20:91:83:bd:fa:ad:6f:b8:00:
                    6e:27:3f:20:ed:0c:92:99:97:91:78:68:01:25:46:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:3D:55:44:D9:06:E8:1D:40:99:2F:94:CD:EF:BC:1C:F8:57:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22c3d305-76ab-3a86-92e4-7f40862833c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:ec:6b:b6:1e:1f:21:68:4b:b4:4f:f1:a2:04:18:78:16:
         b0:df:6c:82:09:3e:6d:3a:25:fc:30:61:8f:7f:b2:a6:52:43:
         47:b4:ba:63:ef:38:55:f4:00:7a:89:f0:47:e6:a2:37:8a:b7:
         ed:06:07:ad:35:63:c2:91:cb:f7:aa:7f:72:aa:e3:2c:d5:40:
         ff:b3:96:d9:b7:77:c7:2e:7d:f9:65:2c:05:02:05:4e:6a:e1:
         0e:1b:2f:d9:48:82:3d:50:85:45:54:b2:2f:ce:65:64:79:e8:
         0e:e9:cd:00:43:e6:cd:8a:6f:da:f2:75:3f:6e:d0:ee:38:74:
         f1:c2:4b:d8:bd:63:4c:dd:91:70:33:2b:3e:01:14:cc:8e:52:
         37:c1:8a:c4:6a:7b:ff:be:fa:91:ad:2b:42:49:4f:7f:77:8e:
         69:f5:2a:7f:f8:59:64:d9:a6:1e:65:6b:ea:2c:2e:3f:f0:95:
         ac:e9:3b:8e:87:8f:81:b6:58:40:be:c9:37:af:b7:21:14:00:
         b2:d8:ea:f3:fc:cb:75:09:98:b6:f7:af:8b:d3:51:ae:de:a0:
         7f:f1:09:ce:c8:92:26:c5:5c:67:01:fc:99:0f:99:2b:47:bc:
         d3:f9:da:cc:69:7a:e5:e0:76:8c:80:ab:b8:92:d5:1b:5a:90:
         3c:0b:07:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrD4tuQ9XmBlWXhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
YjRkMTM3MjctMzgwZC00MWI3LTg1ODgtZjA4ZTY5NDAwMjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB9LoVWe08mSH5oYZQ3FpoFUwK6Ll9WpSs6S
Liucy5SmeykigBM6WSWDK2+lzNfBcQOGt4ZUb9GNqhVf/u6+2bw4gMI2G63Omsm5
w0M/xbE0Pgf4CbhFeM5rRd02AZh8FPamMTMh+/S01w0iq76xFidUBC/HMMxgvU9H
xvabVm1zZjSiBCwPCXHSZq4LwGie9KIasvGmDeYhB1IneHw0aQ9VWBUUYfLz/HT6
Fef09VSzUV819IOTFWY1sR/h19OgWojHe6m61VbZWJG8HGX5jUxJZVUJk3/c6i4B
OZHRbnq25H9OauMgkYO9+q1vuABuJz8g7QySmZeReGgBJUbwuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAG7PVVE2QboHUCZL5TN77wc+FdMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjJjM2QzMDUtNzZhYi0z
YTg2LTkyZTQtN2Y0MDg2MjgzM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuJeQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFi57Gu2Hh8haEu0T/GiBBh4FrDfbIIJPm06JfwwYY9/sqZSQ0e0umPv
OFX0AHqJ8EfmojeKt+0GB601Y8KRy/eqf3Kq4yzVQP+zltm3d8cuffllLAUCBU5q
4Q4bL9lIgj1QhUVUsi/OZWR56A7pzQBD5s2Kb9rydT9u0O44dPHCS9i9Y0zdkXAz
Kz4BFMyOUjfBisRqe/+++pGtK0JJT393jmn1Kn/4WWTZph5la+osLj/wlazpO46H
j4G2WEC+yTevtyEUALLY6vP8y3UJmLb3r4vTUa7eoH/xCc7IkibFXGcB/JkPmStH
vNP52sxpeuXgdoyAq7iS1RtakDwLB6o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org