Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b7d89b5-5e0e-3804-baf0-09842f207f95.roa
File:                     2b7d89b5-5e0e-3804-baf0-09842f207f95.roa (raw, json)
Hash identifier:          8Ynlg3LwoScVOUe0SNJUbAy2LsTcBjuGWJsCH7GUdUA=
Subject key identifier:   B2:37:0F:FB:79:7D:2E:2E:99:34:90:10:7D:E7:53:CC:A0:CC:5A:4D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B5E7638C07F0E7B315F800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b7d89b5-5e0e-3804-baf0-09842f207f95.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:e7:63:8c:07:f0:e7:b3:15:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=e5908ace-f389-4a57-8eef-22589bbf2a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:0f:31:18:06:74:81:9f:ff:5b:70:34:c5:
                    f0:bf:f3:10:19:97:7b:59:18:d6:01:c9:fc:55:33:
                    03:10:88:8c:9f:8f:24:78:2f:6c:25:80:57:83:d1:
                    9e:10:7f:83:d0:2e:35:62:b4:3b:cd:81:8a:4e:b1:
                    77:f3:1f:73:ee:6e:a7:d6:23:d7:11:0d:cb:7e:50:
                    cf:09:a3:97:95:0f:1f:47:75:ae:cd:4c:90:8d:24:
                    fb:37:af:c6:ce:83:aa:98:de:b6:7a:29:02:11:2c:
                    c6:56:8c:a0:ac:85:69:20:76:d7:27:e4:83:7d:3f:
                    53:0c:1d:34:28:04:5a:df:43:e3:c7:2a:8f:e0:43:
                    10:91:2d:00:5b:81:e5:e0:f3:d5:bd:bb:ad:42:5c:
                    c1:b9:04:48:57:46:83:08:e0:b8:4f:25:b8:49:dc:
                    53:49:3a:54:8b:ba:07:55:ae:ed:24:7a:dd:ae:e5:
                    5c:ff:37:1a:94:1a:a7:5d:a9:c2:bc:af:31:61:dc:
                    ca:25:1a:e3:44:da:21:5d:59:8d:f2:35:ae:69:bc:
                    5a:e6:99:67:ba:46:09:63:d4:78:35:31:9b:07:1e:
                    b0:9e:d6:0c:e5:ae:7b:05:db:3b:24:f0:c2:e7:83:
                    7f:ba:03:89:8b:97:ff:3e:c9:3c:5d:a7:60:37:9a:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:37:0F:FB:79:7D:2E:2E:99:34:90:10:7D:E7:53:CC:A0:CC:5A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2b7d89b5-5e0e-3804-baf0-09842f207f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:85:3c:c7:ff:e6:85:72:8f:ce:96:06:10:b2:93:40:52:a4:
         94:23:0b:2e:8c:52:c8:b7:66:3a:d8:e4:62:dd:ab:af:92:00:
         85:0a:f7:f1:86:b6:61:25:64:30:03:bb:19:2c:c8:25:91:0e:
         1e:e5:94:e7:cc:a8:4a:c2:dc:fc:bc:13:74:0a:9e:61:0e:10:
         18:8e:e2:03:89:19:2d:6c:cc:59:42:f7:b2:f0:54:17:e1:6d:
         d1:4b:52:b4:0b:3c:15:41:00:b6:fe:87:68:54:d0:ed:e6:6d:
         7c:33:31:ac:51:6a:6c:ae:81:e0:09:ea:ad:83:ef:9a:b9:20:
         bd:cc:4d:e5:23:b2:b9:e5:3a:27:2f:d7:a6:36:62:64:16:97:
         0d:d5:40:e9:b0:16:6c:25:4a:80:f7:54:5c:83:9b:be:c5:0e:
         55:04:57:28:b8:77:8a:ff:9f:c1:60:02:dc:b1:f0:17:93:e8:
         2b:c9:99:b0:11:88:0c:b8:ce:12:bb:1c:f7:16:88:0c:3f:a0:
         4c:28:eb:94:f1:51:aa:5d:95:6a:40:20:ce:c9:2a:0a:5a:8a:
         40:99:7a:af:32:42:6c:a6:c9:48:2d:f4:54:8e:17:be:c4:ac:
         6b:a8:fe:4c:90:b0:4e:5e:0e:32:67:13:02:fe:22:b1:37:be:
         20:d4:fd:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtedjjAfw57MV+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTU5MDhhY2UtZjM4OS00YTU3LThlZWYtMjI1ODliYmYyYTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhkPMRgGdIGf/1twNMXwv/MQGZd7WRjWAcn8
VTMDEIiMn48keC9sJYBXg9GeEH+D0C41YrQ7zYGKTrF38x9z7m6n1iPXEQ3LflDP
CaOXlQ8fR3WuzUyQjST7N6/GzoOqmN62eikCESzGVoygrIVpIHbXJ+SDfT9TDB00
KARa30PjxyqP4EMQkS0AW4Hl4PPVvbutQlzBuQRIV0aDCOC4TyW4SdxTSTpUi7oH
Va7tJHrdruVc/zcalBqnXanCvK8xYdzKJRrjRNohXVmN8jWuabxa5plnukYJY9R4
NTGbBx6wntYM5a57Bds7JPDC54N/ugOJi5f/Psk8XadgN5qagwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLI3D/t5fS4umTSQEH3nU8ygzFpNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmI3ZDg5YjUtNWUwZS0z
ODA0LWJhZjAtMDk4NDJmMjA3Zjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2NBvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaFPMf/5oVyj86WBhCyk0BSpJQjCy6MUsi3ZjrY5GLdq6+SAIUK9/GG
tmElZDADuxksyCWRDh7llOfMqErC3Py8E3QKnmEOEBiO4gOJGS1szFlC97LwVBfh
bdFLUrQLPBVBALb+h2hU0O3mbXwzMaxRamyugeAJ6q2D75q5IL3MTeUjsrnlOicv
16Y2YmQWlw3VQOmwFmwlSoD3VFyDm77FDlUEVyi4d4r/n8FgAtyx8BeT6CvJmbAR
iAy4zhK7HPcWiAw/oEwo65TxUapdlWpAIM7JKgpaikCZeq8yQmymyUgt9FSOF77E
rGuo/kyQsE5eDjJnEwL+IrE3viDU/W0=
-----END CERTIFICATE-----
Generated at Fri May 17 01:47:59 2024 by rpki-client on console-fra.rpki-client.org