Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/290dc6a3-cbd5-36be-9e76-37c7c0918c92.roa
File:                     290dc6a3-cbd5-36be-9e76-37c7c0918c92.roa (raw, json)
Hash identifier:          RIncO3D5fnohgmLAzauSQplU8cQLnxxPJe5qE2ne6lg=
Subject key identifier:   64:97:5F:58:E7:94:EC:CD:15:46:0E:1E:D6:D6:40:31:61:AA:78:71
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B325875C38978E5DFE5080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/290dc6a3-cbd5-36be-9e76-37c7c0918c92.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        69.158.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:25:87:5c:38:97:8e:5d:fe:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=96325aad-39df-4c47-81c6-90f2b30488b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:02:d8:83:3b:a7:e6:01:2d:23:88:9d:f0:
                    a8:98:c3:a9:9e:01:e5:2f:73:cf:15:32:ce:4e:77:
                    74:51:c5:38:75:97:64:0a:85:23:4a:35:0d:b1:86:
                    f0:21:55:5d:fe:6f:56:24:22:12:2a:83:d6:01:a5:
                    c4:0f:24:e5:3c:8a:81:55:3d:ee:5f:9a:0f:92:ab:
                    44:8e:5b:02:e2:21:5c:c0:5f:c2:a2:56:61:11:c4:
                    ab:58:b0:be:c5:2c:73:71:b0:fb:40:e7:60:43:c2:
                    30:24:11:99:0a:c2:f3:dc:1d:c2:74:3a:82:d1:01:
                    52:7e:22:45:02:50:a4:93:12:f0:17:38:b4:d6:05:
                    6d:73:82:a4:86:39:c7:5c:12:62:48:49:01:7b:aa:
                    9e:9a:52:7a:4b:98:ce:30:d4:26:63:47:0b:81:b5:
                    d6:85:fa:0c:83:3f:9d:c5:2d:9a:63:8a:b3:52:2b:
                    e3:fa:02:6d:d2:ba:7b:f1:d9:b7:af:83:98:6b:c5:
                    18:d7:eb:df:a6:f3:4b:f9:32:0c:cb:78:1d:5e:13:
                    85:0e:cb:01:4d:4d:07:c6:ec:98:80:f5:22:27:98:
                    ac:b2:96:84:5b:c8:ee:c0:37:52:6f:9d:59:df:b7:
                    cc:2b:9b:bd:8d:52:d8:36:24:b6:36:e2:c8:15:d4:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:5F:58:E7:94:EC:CD:15:46:0E:1E:D6:D6:40:31:61:AA:78:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/290dc6a3-cbd5-36be-9e76-37c7c0918c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3e:de:c0:78:4f:82:81:a2:db:c1:b8:16:b4:4f:63:72:5e:
         41:20:af:cc:03:b0:58:50:a6:0a:01:ce:92:f7:61:5b:1c:12:
         07:82:2c:df:ea:c3:7d:04:f1:aa:52:eb:50:40:e6:8c:bc:ec:
         01:aa:97:a3:ae:55:ea:27:c3:48:06:13:03:a9:51:22:9e:b2:
         a9:c9:9f:fe:6b:8c:4c:b6:54:ca:fb:1d:f6:df:b7:27:4d:a3:
         6e:75:00:ff:d3:ae:fd:18:4c:16:07:91:31:a4:5e:6e:5e:af:
         26:69:54:fc:88:b0:20:bc:78:1d:6a:c3:4e:82:a7:34:b5:11:
         54:e9:82:40:76:0f:2b:30:62:9a:97:2d:95:67:e9:b3:25:db:
         7b:6a:27:c2:33:92:fd:69:4d:0f:05:4e:5a:ca:62:18:ac:82:
         aa:50:a4:c9:93:c5:ab:a6:f5:55:7f:9b:80:fd:31:05:02:40:
         eb:a5:fc:da:20:c1:cb:3c:ce:44:2e:28:01:26:4e:f0:27:8c:
         e9:22:f4:f6:57:4c:f9:cf:52:9c:7b:ea:42:f9:da:a0:2a:c9:
         78:e7:71:55:e3:01:32:0c:2f:18:0f:28:7f:73:6e:52:55:06:
         0e:32:ce:22:59:46:af:4b:bf:99:69:43:bf:96:e0:69:03:5b:
         5e:e7:e3:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWsyWHXDiXjl3+UIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
OTYzMjVhYWQtMzlkZi00YzQ3LTgxYzYtOTBmMmIzMDQ4OGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcUC2IM7p+YBLSOInfComMOpngHlL3PPFTLO
Tnd0UcU4dZdkCoUjSjUNsYbwIVVd/m9WJCISKoPWAaXEDyTlPIqBVT3uX5oPkqtE
jlsC4iFcwF/ColZhEcSrWLC+xSxzcbD7QOdgQ8IwJBGZCsLz3B3CdDqC0QFSfiJF
AlCkkxLwFzi01gVtc4KkhjnHXBJiSEkBe6qemlJ6S5jOMNQmY0cLgbXWhfoMgz+d
xS2aY4qzUivj+gJt0rp78dm3r4OYa8UY1+vfpvNL+TIMy3gdXhOFDssBTU0HxuyY
gPUiJ5isspaEW8juwDdSb51Z37fMK5u9jVLYNiS2NuLIFdR9ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSXX1jnlOzNFUYOHtbWQDFhqnhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjkwZGM2YTMtY2JkNS0z
NmJlLTllNzYtMzdjN2MwOTE4YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARZ7wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk+3sB4T4KBotvBuBa0T2NyXkEgr8wDsFhQpgoBzpL3YVscEgeCLN/q
w30E8apS61BA5oy87AGql6OuVeonw0gGEwOpUSKesqnJn/5rjEy2VMr7HfbftydN
o251AP/Trv0YTBYHkTGkXm5eryZpVPyIsCC8eB1qw06CpzS1EVTpgkB2DyswYpqX
LZVn6bMl23tqJ8Izkv1pTQ8FTlrKYhisgqpQpMmTxaum9VV/m4D9MQUCQOul/Nog
wcs8zkQuKAEmTvAnjOki9PZXTPnPUpx76kL52qAqyXjncVXjATIMLxgPKH9zblJV
Bg4yziJZRq9Lv5lpQ7+W4GkDW17n480=
-----END CERTIFICATE-----
Generated at Sat May 18 15:26:53 2024 by rpki-client on console-fra.rpki-client.org