Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/291c1533-477d-329e-818b-7c312d02051c.roa
File:                     291c1533-477d-329e-818b-7c312d02051c.roa (raw, json)
Hash identifier:          ZL78Vl+y2xx2xAz/4tnIE2qO6lBwEz3hg2RANThFiR4=
Subject key identifier:   11:50:64:1C:20:52:31:61:E5:14:30:58:8D:5B:F6:69:A9:65:DD:68
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11D9195F46F487A7655900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/291c1533-477d-329e-818b-7c312d02051c.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        209.226.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:d9:19:5f:46:f4:87:a7:65:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=6f0a42d9-f6df-4eb8-8f86-f2b6d57d84fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:3f:d0:e0:3c:6d:a1:22:42:6e:38:7b:39:
                    45:ac:13:42:71:34:fa:a8:89:65:1b:9d:df:cd:ae:
                    ca:16:d1:35:4c:2c:25:31:11:19:ca:75:6c:b5:a3:
                    c6:a6:36:54:df:79:aa:e9:05:25:e3:65:eb:e7:be:
                    11:64:fb:93:9e:ee:44:c3:ec:dd:a0:49:e3:c5:1d:
                    dc:a5:fd:e5:ed:5b:ec:cd:85:cc:79:1c:86:0e:6e:
                    66:39:1d:95:4b:52:86:1b:de:4b:06:c6:e2:08:9d:
                    63:e3:76:24:87:2f:f6:6c:a8:1a:fe:76:42:bc:e8:
                    5f:e7:ed:27:a4:cd:ca:53:34:34:7f:8f:84:18:0d:
                    fa:e9:d0:87:ac:76:24:c8:49:8b:ca:77:2f:37:a8:
                    2a:22:d5:a2:d4:60:46:32:52:70:54:fb:1f:40:84:
                    e3:83:e6:71:56:7a:8c:c0:bc:37:a4:e2:3d:9a:4e:
                    c1:fb:32:1b:92:c4:9f:ed:23:39:eb:82:75:b9:81:
                    4f:e5:6d:94:60:96:26:6f:55:78:7c:1c:60:ff:c0:
                    d2:52:98:b0:af:49:7f:4a:86:fa:13:80:bd:e7:bb:
                    f4:02:40:a8:f9:fe:cf:ad:e3:0d:7e:20:bd:bd:de:
                    94:c7:73:99:1d:b5:60:09:b0:8a:d1:0b:54:88:36:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:64:1C:20:52:31:61:E5:14:30:58:8D:5B:F6:69:A9:65:DD:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/291c1533-477d-329e-818b-7c312d02051c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:43:67:f9:c8:62:92:c1:67:df:7f:35:fb:db:38:30:e7:
         d9:aa:d1:40:af:e0:cf:96:e5:be:c4:cb:9f:ac:90:5c:b8:33:
         ae:b1:33:a4:19:ea:92:53:98:f2:5f:ca:a0:85:2f:2c:a8:5f:
         a8:4f:80:93:b8:51:63:41:16:e0:71:1c:d5:48:f2:bb:3e:b5:
         03:3b:55:52:f2:d6:ef:da:7e:fb:1f:b7:08:f5:c0:c2:68:ca:
         82:71:7e:82:5a:8b:eb:3c:5a:5b:9f:e9:ad:b6:41:fa:bc:cd:
         a3:b2:fe:ec:9b:7e:98:13:19:f5:43:ba:8b:c7:39:00:eb:1f:
         70:01:c5:07:8d:87:b3:fe:b3:20:58:11:be:82:7c:ca:f4:da:
         2b:8b:ec:ef:b0:b9:29:e6:67:3c:98:46:1d:80:18:6f:b2:5e:
         cb:27:30:a7:21:70:ba:14:f5:fc:b6:6e:12:f9:d0:8d:b8:b2:
         17:8c:fa:fc:97:37:fb:80:da:13:ea:95:d6:8c:c2:e6:8b:75:
         53:b3:02:7d:c8:eb:65:07:ec:6a:3a:13:19:fd:e0:77:82:bd:
         d4:d3:68:39:df:a9:51:4c:f8:70:ea:d5:69:6a:78:66:68:74:
         e7:b1:80:a5:e6:cb:1f:7b:4e:83:32:73:9f:c8:20:1d:6c:bd:
         1c:77:99:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEdkZX0b0h6dlWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NmYwYTQyZDktZjZkZi00ZWI4LThmODYtZjJiNmQ1N2Q4NGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIs/0OA8baEiQm44ezlFrBNCcTT6qIllG53f
za7KFtE1TCwlMREZynVstaPGpjZU33mq6QUl42Xr574RZPuTnu5Ew+zdoEnjxR3c
pf3l7VvszYXMeRyGDm5mOR2VS1KGG95LBsbiCJ1j43Ykhy/2bKga/nZCvOhf5+0n
pM3KUzQ0f4+EGA366dCHrHYkyEmLyncvN6gqItWi1GBGMlJwVPsfQITjg+ZxVnqM
wLw3pOI9mk7B+zIbksSf7SM564J1uYFP5W2UYJYmb1V4fBxg/8DSUpiwr0l/Sob6
E4C957v0AkCo+f7PreMNfiC9vd6Ux3OZHbVgCbCK0QtUiDZALQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFQZBwgUjFh5RQwWI1b9mmpZd1oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjkxYzE1MzMtNDc3ZC0z
MjllLTgxOGItN2MzMTJkMDIwNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eJLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHH9Q2f5yGKSwWfffzX72zgw59mq0UCv4M+W5b7Ey5+skFy4M66xM6QZ
6pJTmPJfyqCFLyyoX6hPgJO4UWNBFuBxHNVI8rs+tQM7VVLy1u/afvsftwj1wMJo
yoJxfoJai+s8Wluf6a22Qfq8zaOy/uybfpgTGfVDuovHOQDrH3ABxQeNh7P+syBY
Eb6CfMr02iuL7O+wuSnmZzyYRh2AGG+yXssnMKchcLoU9fy2bhL50I24sheM+vyX
N/uA2hPqldaMwuaLdVOzAn3I62UH7Go6Exn94HeCvdTTaDnfqVFM+HDq1WlqeGZo
dOexgKXmyx97ToMyc5/IIB1svRx3mco=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org