Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2838ce1f-c06b-3121-aa67-6206825ced10.roa
File:                     2838ce1f-c06b-3121-aa67-6206825ced10.roa (raw, json)
Hash identifier:          VelTXuVovzNCuIUbd/rg5OgvuRaxnNqnb2MzIcMapNQ=
Subject key identifier:   15:BE:76:B0:96:72:4E:7F:03:C0:3A:D5:36:9C:2F:4B:35:D6:38:09
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B2FB956F90A7FE0D371900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2838ce1f-c06b-3121-aa67-6206825ced10.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        64.228.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b2:fb:95:6f:90:a7:fe:0d:37:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=7e801de6-c191-42fd-a31d-bdf091bd22e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:6e:9d:4b:d4:9c:98:e1:27:38:53:fb:25:
                    c1:09:85:1c:6d:47:c9:f2:aa:45:c1:d7:47:0f:aa:
                    1d:5e:c9:f6:8e:3c:73:e7:50:7c:ea:22:bd:4e:25:
                    1e:3b:aa:24:11:dc:19:36:85:59:46:b8:e0:e5:c2:
                    59:5f:87:68:3f:56:00:c6:32:66:d8:58:e3:6c:af:
                    34:9c:bb:6b:ea:30:07:97:fc:f5:b2:d9:64:33:7a:
                    88:8a:16:8d:bd:08:20:41:ba:70:4d:29:aa:bc:a4:
                    00:56:f2:da:e4:96:8c:d4:75:b5:c5:9a:19:ec:85:
                    d1:e9:d1:e7:5f:8a:c6:09:2e:9f:51:b1:00:f8:07:
                    ad:6b:06:25:70:d3:0f:e1:b7:42:b5:87:76:1a:42:
                    0b:8f:b6:04:9b:3b:c8:94:10:d8:39:69:1d:75:a7:
                    a8:c7:26:d7:4c:61:19:69:41:36:dd:63:49:4b:ab:
                    a0:f2:d7:c3:ec:11:9c:ca:38:73:bc:8a:c2:47:7f:
                    37:e4:40:54:1f:fd:b3:56:39:ca:2c:5c:fc:bf:b2:
                    25:a4:5e:34:ad:39:28:7f:72:de:d3:78:c9:2d:00:
                    b2:25:f4:15:a3:d2:c1:93:10:67:e5:c9:cd:da:ac:
                    5c:4b:0a:00:e8:20:3c:1c:83:5f:73:00:ae:5f:30:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:76:B0:96:72:4E:7F:03:C0:3A:D5:36:9C:2F:4B:35:D6:38:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2838ce1f-c06b-3121-aa67-6206825ced10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.228.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:bf:ec:16:22:48:cb:d8:b7:54:4f:11:5b:73:7c:da:58:bc:
         be:b2:44:0a:25:8c:2e:19:be:e7:c3:99:36:1a:e7:00:b7:dc:
         5d:ed:62:19:5d:87:f0:7d:a3:d2:ff:92:48:a7:23:3a:fe:1b:
         88:0e:a3:3b:b8:82:4e:15:84:76:32:61:3c:81:1d:14:da:2a:
         1a:bf:3f:20:93:e8:6d:5d:bc:64:9c:74:d3:68:8e:b4:c2:2e:
         9e:bc:19:ba:95:b5:41:17:b1:62:74:a3:14:25:7a:64:51:db:
         d0:f6:c1:65:60:38:c5:8b:f0:51:b8:fa:5e:f3:f4:4b:b9:48:
         ab:68:28:20:c2:b6:40:0c:84:5e:f3:d7:9b:02:14:7e:3e:90:
         97:bb:7b:bb:be:a3:fd:bd:d7:c4:ad:11:5b:1a:c8:3b:87:e3:
         b6:58:ff:53:83:15:f7:89:1e:b0:8a:16:18:08:eb:f6:47:0e:
         b9:f1:b5:00:08:ce:03:ab:68:7c:ec:60:e4:11:c5:4b:18:47:
         2d:0c:9d:49:c0:3d:07:70:9d:0f:9c:95:b6:a6:17:61:52:91:
         34:49:1b:2e:22:88:0a:87:26:82:9c:d8:a3:76:78:78:7c:c0:
         49:9e:00:65:39:9c:c7:98:29:77:f1:eb:57:40:df:82:a0:a0:
         3b:2d:9f:68
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWsvuVb5Cn/g03GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
N2U4MDFkZTYtYzE5MS00MmZkLWEzMWQtYmRmMDkxYmQyMmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOFunUvUnJjhJzhT+yXBCYUcbUfJ8qpFwddH
D6odXsn2jjxz51B86iK9TiUeO6okEdwZNoVZRrjg5cJZX4doP1YAxjJm2FjjbK80
nLtr6jAHl/z1stlkM3qIihaNvQggQbpwTSmqvKQAVvLa5JaM1HW1xZoZ7IXR6dHn
X4rGCS6fUbEA+AetawYlcNMP4bdCtYd2GkILj7YEmzvIlBDYOWkddaeoxybXTGEZ
aUE23WNJS6ug8tfD7BGcyjhzvIrCR3835EBUH/2zVjnKLFz8v7IlpF40rTkof3Le
03jJLQCyJfQVo9LBkxBn5cnN2qxcSwoA6CA8HINfcwCuXzDFtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBW+drCWck5/A8A61TacL0s11jgJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjgzOGNlMWYtYzA2Yi0z
MTIxLWFhNjctNjIwNjgyNWNlZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQOQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJL/sFiJIy9i3VE8RW3N82li8vrJECiWMLhm+58OZNhrnALfcXe1iGV2H
8H2j0v+SSKcjOv4biA6jO7iCThWEdjJhPIEdFNoqGr8/IJPobV28ZJx002iOtMIu
nrwZupW1QRexYnSjFCV6ZFHb0PbBZWA4xYvwUbj6XvP0S7lIq2goIMK2QAyEXvPX
mwIUfj6Ql7t7u76j/b3XxK0RWxrIO4fjtlj/U4MV94kesIoWGAjr9kcOufG1AAjO
A6tofOxg5BHFSxhHLQydScA9B3CdD5yVtqYXYVKRNEkbLiKICocmgpzYo3Z4eHzA
SZ4AZTmcx5gpd/HrV0DfgqCgOy2faA==
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:59 2024 by rpki-client on console-fra.rpki-client.org