Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35445c64-e6bb-39a9-9d02-e2495c6c7d92.roa
File:                     35445c64-e6bb-39a9-9d02-e2495c6c7d92.roa (raw, json)
Hash identifier:          FVERmKnxNxuDe8muSffFpd8NllKibEH7AaD8serTg4o=
Subject key identifier:   BE:91:56:8A:33:DB:D5:4B:A0:C0:AF:FA:4D:CA:76:C0:4C:C7:0B:2E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3891B248AA64757BE6600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35445c64-e6bb-39a9-9d02-e2495c6c7d92.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.170.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:89:1b:24:8a:a6:47:57:be:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=33f80824-01b0-4c66-9f05-d44bf408019d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:2a:b2:e7:ca:35:ed:f1:41:45:53:ef:90:
                    f5:1d:3a:bc:db:1c:76:3c:14:7c:25:ed:6b:d8:aa:
                    95:73:c3:24:5c:55:db:62:2f:13:71:2f:cd:f5:bb:
                    60:13:90:0f:f6:fb:44:68:3c:41:eb:e2:c8:ac:6e:
                    13:f2:08:3a:40:5a:ad:40:e6:07:b1:d5:eb:11:98:
                    d7:34:f0:9e:e1:a4:97:54:b2:e0:c5:37:cb:53:14:
                    6e:2a:99:c0:73:45:84:13:e1:aa:28:c3:4d:e9:8b:
                    33:fa:df:41:46:65:f7:5d:2a:d4:eb:ac:3a:5f:bf:
                    ef:76:00:95:f7:a7:17:98:3f:e9:22:2d:36:e0:ea:
                    b6:f6:70:fc:ce:12:c6:72:d6:63:c7:53:42:b3:91:
                    2b:20:d3:3a:8e:6b:fd:dc:0f:26:61:66:d9:04:a8:
                    8f:de:00:98:eb:7e:e8:93:83:6d:3a:be:3d:e2:14:
                    f0:12:e5:c8:bb:23:77:97:ca:de:c6:6d:fe:84:85:
                    85:88:55:5b:ad:5b:d3:15:3e:89:80:d0:e7:56:53:
                    5c:4f:5a:4a:74:3c:96:5f:51:d9:5d:3d:68:e5:d2:
                    d5:1b:3b:ff:e4:74:41:3e:c1:04:4a:92:5e:d3:a1:
                    3e:9f:40:cf:c0:96:c1:0a:df:41:02:d6:1b:0b:6d:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:56:8A:33:DB:D5:4B:A0:C0:AF:FA:4D:CA:76:C0:4C:C7:0B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/35445c64-e6bb-39a9-9d02-e2495c6c7d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:c9:ce:0a:0d:76:fd:59:77:b4:5a:95:2b:95:8f:00:36:
         d9:82:78:33:0d:f4:53:a0:44:ec:03:bc:b3:2f:17:f7:4e:3f:
         7b:1d:b2:75:16:28:58:a5:da:b8:d6:aa:3c:41:f5:bb:89:8d:
         12:72:ee:df:df:48:10:bd:27:f6:5e:a4:db:8c:f1:76:94:67:
         81:2b:ac:d8:dd:5e:09:12:5f:11:ec:bd:91:6a:95:1a:9c:da:
         e8:c2:44:da:6a:63:e2:89:dd:69:6c:87:0b:c0:45:a6:32:42:
         0a:b5:07:40:2f:6c:a8:ae:23:c9:5a:12:fd:8b:99:23:5c:61:
         00:4e:da:16:a2:2d:58:f7:c4:04:ea:cd:c5:97:81:a4:4e:45:
         b3:93:48:6a:33:11:0c:80:9c:43:69:a2:22:26:cb:7e:e8:20:
         0f:69:4b:01:a6:d4:5f:20:7b:e3:da:9a:b1:9e:07:94:5f:e7:
         79:8b:d5:97:57:e0:59:a7:57:85:fe:14:3a:cc:bf:0d:8c:5b:
         5d:65:66:b8:25:4f:2e:35:7a:b4:3a:96:52:5a:15:40:71:f7:
         ca:41:83:21:90:13:22:a9:92:29:6e:51:b9:89:92:94:84:ef:
         81:87:76:93:06:05:7f:a8:70:8c:4a:f4:3e:51:5b:d6:73:ea:
         20:ed:1c:e3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWs4kbJIqmR1e+ZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MzNmODA4MjQtMDFiMC00YzY2LTlmMDUtZDQ0YmY0MDgwMTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlocqsufKNe3xQUVT75D1HTq82xx2PBR8Je1r
2KqVc8MkXFXbYi8TcS/N9btgE5AP9vtEaDxB6+LIrG4T8gg6QFqtQOYHsdXrEZjX
NPCe4aSXVLLgxTfLUxRuKpnAc0WEE+GqKMNN6Ysz+t9BRmX3XSrU66w6X7/vdgCV
96cXmD/pIi024Oq29nD8zhLGctZjx1NCs5ErINM6jmv93A8mYWbZBKiP3gCY637o
k4NtOr494hTwEuXIuyN3l8rexm3+hIWFiFVbrVvTFT6JgNDnVlNcT1pKdDyWX1HZ
XT1o5dLVGzv/5HRBPsEESpJe06E+n0DPwJbBCt9BAtYbC2092wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL6RVooz29VLoMCv+k3KdsBMxwsuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzU0NDVjNjQtZTZiYi0z
OWE5LTlkMDItZTI0OTVjNmM3ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjqowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY+rJzgoNdv1Zd7RalSuVjwA22YJ4Mw30U6BE7AO8sy8X904/ex2ydRYo
WKXauNaqPEH1u4mNEnLu399IEL0n9l6k24zxdpRngSus2N1eCRJfEey9kWqVGpza
6MJE2mpj4ondaWyHC8BFpjJCCrUHQC9sqK4jyVoS/YuZI1xhAE7aFqItWPfEBOrN
xZeBpE5Fs5NIajMRDICcQ2miIibLfuggD2lLAabUXyB749qasZ4HlF/neYvVl1fg
WadXhf4UOsy/DYxbXWVmuCVPLjV6tDqWUloVQHH3ykGDIZATIqmSKW5RuYmSlITv
gYd2kwYFf6hwjEr0PlFb1nPqIO0c4w==
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org