Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/255823c1-2985-36eb-a073-2a743dc330ef.roa
File:                     255823c1-2985-36eb-a073-2a743dc330ef.roa (raw, json)
Hash identifier:          vGNH3bKIEavNcZa2AcNcc0GK3yqMvKWPslfVj+UCzEo=
Subject key identifier:   69:53:99:B8:00:88:D2:1C:EF:D5:F0:07:F4:66:89:25:94:A9:17:EA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA122D40AEA8DD48C91D5600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/255823c1-2985-36eb-a073-2a743dc330ef.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.150.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:2d:40:ae:a8:dd:48:c9:1d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=f3483a9e-a659-4b64-9940-8293c08595ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:96:b1:18:2d:4e:4f:9b:53:f5:de:fe:cb:
                    9b:c7:df:10:be:ad:76:13:4b:2b:ad:81:e0:14:67:
                    e0:df:c7:90:7b:c6:dd:35:76:bc:1b:ff:53:40:29:
                    ab:7d:13:b4:fa:75:17:51:38:cc:c5:74:d2:c7:61:
                    5b:d5:e6:ff:be:a2:cc:1f:99:eb:47:1b:33:6d:0b:
                    af:40:a1:47:9e:60:0a:ba:2b:f1:4d:fe:cd:15:8b:
                    c7:8b:d2:ea:1e:14:c1:53:a0:29:50:16:cc:a5:01:
                    51:99:a5:f3:1c:56:db:f7:a6:2b:07:17:4b:9f:e8:
                    8d:d8:b2:f5:ae:5a:53:ff:53:03:f2:c0:f8:d3:48:
                    d7:fd:bf:6f:e7:45:2b:90:ae:21:48:86:0b:72:2d:
                    5b:9c:ca:c0:fc:4c:94:dc:f5:58:81:1f:f0:7b:1a:
                    8c:d4:fd:6c:3f:05:c2:7d:a0:8b:60:bf:00:a1:74:
                    66:ae:d5:76:40:ec:e4:5f:23:da:4c:1d:f5:1a:81:
                    1d:09:18:00:98:15:91:f7:bd:a9:de:fb:b0:c3:1a:
                    04:d0:11:e5:25:b0:52:a1:ff:64:b6:55:2d:12:97:
                    16:44:d5:2f:13:e5:7a:b1:7c:04:36:1b:f9:13:17:
                    83:b8:49:18:c2:77:15:59:e0:e2:ac:55:ad:79:54:
                    d0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:53:99:B8:00:88:D2:1C:EF:D5:F0:07:F4:66:89:25:94:A9:17:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/255823c1-2985-36eb-a073-2a743dc330ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:88:ce:cc:a0:cd:d3:01:6c:9c:ff:99:de:43:42:30:e9:
         fb:af:66:7c:76:bb:de:2e:9e:6e:a2:c8:81:b9:ed:0c:22:b0:
         71:49:df:2e:90:76:e2:9b:a1:46:0c:98:aa:b2:11:71:a5:ec:
         d4:38:ff:01:47:74:b5:8c:ad:3e:1e:ed:17:83:8e:a8:33:d3:
         e1:ff:9e:56:0a:b7:c8:71:9c:93:17:ea:d3:1e:ea:3d:44:42:
         2a:96:b6:9b:17:90:a3:82:16:a8:58:df:65:d5:ae:c3:8c:99:
         da:08:f8:b4:48:79:7d:0d:b9:92:20:49:03:26:94:00:37:07:
         b7:b4:69:af:1f:f3:55:06:dc:d6:cb:e2:a9:4a:27:02:b5:57:
         c7:12:eb:69:fd:7a:4a:12:fc:a4:2c:7e:c8:c1:1e:22:3b:11:
         82:f3:63:e1:4c:09:48:d8:2c:9b:c1:71:26:3a:42:0f:97:63:
         63:5f:bb:94:be:b7:2d:73:ff:c8:45:fa:a5:de:1a:20:5c:c6:
         9e:24:c6:b6:6d:f0:88:2e:d6:52:fc:00:61:4f:dc:a8:d4:a1:
         9d:76:13:91:fc:73:32:ba:80:70:a6:f5:2b:48:96:ea:8f:55:
         b1:8c:8e:1e:9a:fd:72:dd:e7:3f:33:e7:94:be:cb:0f:43:89:
         bf:1b:fb:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqEi1ArqjdSMkdVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjM0ODNhOWUtYTY1OS00YjY0LTk5NDAtODI5M2MwODU5NWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzqWsRgtTk+bU/Xe/subx98Qvq12E0srrYHg
FGfg38eQe8bdNXa8G/9TQCmrfRO0+nUXUTjMxXTSx2Fb1eb/vqLMH5nrRxszbQuv
QKFHnmAKuivxTf7NFYvHi9LqHhTBU6ApUBbMpQFRmaXzHFbb96YrBxdLn+iN2LL1
rlpT/1MD8sD400jX/b9v50UrkK4hSIYLci1bnMrA/EyU3PVYgR/wexqM1P1sPwXC
faCLYL8AoXRmrtV2QOzkXyPaTB31GoEdCRgAmBWR972p3vuwwxoE0BHlJbBSof9k
tlUtEpcWRNUvE+V6sXwENhv5ExeDuEkYwncVWeDirFWteVTQ2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlTmbgAiNIc79XwB/RmiSWUqRfqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjU1ODIzYzEtMjk4NS0z
NmViLWEwNzMtMmE3NDNkYzMzMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuJZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGv7iM7MoM3TAWyc/5neQ0Iw6fuvZnx2u94unm6iyIG57QwisHFJ3y6Q
duKboUYMmKqyEXGl7NQ4/wFHdLWMrT4e7ReDjqgz0+H/nlYKt8hxnJMX6tMe6j1E
QiqWtpsXkKOCFqhY32XVrsOMmdoI+LRIeX0NuZIgSQMmlAA3B7e0aa8f81UG3NbL
4qlKJwK1V8cS62n9ekoS/KQsfsjBHiI7EYLzY+FMCUjYLJvBcSY6Qg+XY2Nfu5S+
ty1z/8hF+qXeGiBcxp4kxrZt8Igu1lL8AGFP3KjUoZ12E5H8czK6gHCm9StIluqP
VbGMjh6a/XLd5z8z55S+yw9Dib8b+0Q=
-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:00 2023 by rpki-client on console-fra.rpki-client.org