Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa
File:                     391e8f61-201e-3631-a3f5-756f871d22bd.roa (raw, json)
Hash identifier:          ZmLrXrMy7yuAEPsFNdjiNMH5ONZHo6VY6PlGXFAxta8=
Subject key identifier:   80:18:69:77:45:CC:91:F4:FC:00:BE:07:E7:F0:87:CE:08:7E:B5:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213461ED53540D3CF868E000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa
Signing time:             Sun 09 Mar 2025 10:21:03 +0000
ROA not before:           Sun 09 Mar 2025 10:21:03 +0000
ROA not after:            Sat 07 Jun 2025 10:21:03 +0000
asID:                     11831
IP address blocks:        209.139.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:61:ed:53:54:0d:3c:f8:68:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:03 2025 GMT
            Not After : Jun  7 10:21:03 2025 GMT
        Subject: CN=3deaaf85-c882-4172-b1c2-59bfb8e65b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:08:0e:ed:37:16:74:d1:2a:d0:3d:4e:2e:
                    b6:47:7b:14:df:c4:66:e3:d0:f2:f4:54:fa:89:ef:
                    11:a8:66:3e:94:35:16:a9:ab:07:eb:99:13:76:cd:
                    9a:ee:37:bf:26:00:21:df:2c:6f:56:a8:a8:53:6c:
                    f0:a7:0b:ff:0e:62:1b:74:b7:05:c3:19:fb:87:db:
                    9d:a8:46:69:f4:e4:84:af:1d:7c:76:9f:8c:b2:3e:
                    a3:19:9c:0f:5d:39:25:86:da:56:fd:35:43:e2:05:
                    7f:a0:4b:58:2b:31:c8:79:9d:14:f7:ac:e2:5d:3e:
                    1f:be:2a:65:8a:3a:b9:a6:4a:c4:7c:91:bf:7b:ae:
                    61:87:8d:72:54:18:03:ed:88:9f:d6:20:21:2e:10:
                    0a:41:3b:25:36:e6:b9:33:61:8b:e1:91:fe:19:a8:
                    20:39:90:3b:99:ac:54:3f:c4:d7:a6:e9:a8:ef:c0:
                    70:43:02:26:27:73:46:2f:57:8b:57:27:ca:ba:4c:
                    6c:a1:46:36:85:e1:e7:93:a9:ce:65:1b:3d:6d:4b:
                    05:55:cb:db:56:8e:a4:ed:92:c9:95:63:69:f1:96:
                    2e:28:47:6e:19:d0:b3:99:f7:ee:06:95:80:52:8b:
                    52:5b:73:3b:fd:04:8b:93:97:8a:38:75:29:16:54:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:18:69:77:45:CC:91:F4:FC:00:BE:07:E7:F0:87:CE:08:7E:B5:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/391e8f61-201e-3631-a3f5-756f871d22bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.139.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:2f:8b:14:72:28:39:23:f1:91:ab:90:56:dc:81:a9:37:
         ce:7a:ce:38:32:f0:53:0a:0d:80:ac:31:f2:c3:c7:38:c3:b4:
         af:51:c9:64:14:19:35:53:05:f5:27:83:4b:92:c6:de:5d:37:
         45:22:56:e5:45:60:d0:a3:7b:39:c5:c3:c3:43:4d:7b:46:c7:
         32:f6:5f:a0:27:92:ee:e9:a4:d1:a2:39:b2:2e:62:fb:33:b5:
         fa:32:ab:db:02:15:a3:ae:49:14:5e:be:f4:7f:ff:de:86:70:
         c5:79:5b:29:47:1f:9f:d4:ee:bc:b7:ea:75:38:98:24:79:26:
         e5:d9:6a:dd:46:72:ec:53:13:f1:5b:78:5e:a6:d6:c3:61:f1:
         4a:9c:05:e4:ed:4b:de:4b:2e:11:23:e4:e0:9d:dd:6b:d6:36:
         34:5b:8a:0d:7e:56:14:68:91:66:ae:fb:a7:4f:8e:eb:5f:9b:
         b5:2a:0c:24:2c:45:6e:a3:c6:12:e0:80:d3:2e:d6:70:38:e5:
         fc:32:51:b6:cd:74:c2:29:00:4c:b7:10:f1:ad:a1:76:fb:5d:
         f3:d8:87:22:62:02:19:d3:ec:ef:36:ed:76:23:04:25:8d:31:
         67:c6:17:95:32:7c:e2:00:98:3c:2b:72:de:de:f7:39:bd:87:
         6c:75:0e:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNGHtU1QNPPho4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjEwM1oXDTI1MDYwNzEwMjEwM1owLzEtMCsGA1UEAxMk
M2RlYWFmODUtYzg4Mi00MTcyLWIxYzItNTliZmI4ZTY1Yjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4gIDu03FnTRKtA9Ti62R3sU38Rm49Dy9FT6
ie8RqGY+lDUWqasH65kTds2a7je/JgAh3yxvVqioU2zwpwv/DmIbdLcFwxn7h9ud
qEZp9OSErx18dp+Msj6jGZwPXTklhtpW/TVD4gV/oEtYKzHIeZ0U96ziXT4fvipl
ijq5pkrEfJG/e65hh41yVBgD7Yif1iAhLhAKQTslNua5M2GL4ZH+GaggOZA7maxU
P8TXpumo78BwQwImJ3NGL1eLVyfKukxsoUY2heHnk6nOZRs9bUsFVcvbVo6k7ZLJ
lWNp8ZYuKEduGdCzmffuBpWAUotSW3M7/QSLk5eKOHUpFlRU1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIAYaXdFzJH0/AC+B+fwh84IfrVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzkxZThmNjEtMjAxZS0z
NjMxLWEzZjUtNzU2Zjg3MWQyMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0YvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABv8L4sUcig5I/GRq5BW3IGpN856zjgy8FMKDYCsMfLDxzjDtK9RyWQU
GTVTBfUng0uSxt5dN0UiVuVFYNCjeznFw8NDTXtGxzL2X6Anku7ppNGiObIuYvsz
tfoyq9sCFaOuSRRevvR//96GcMV5WylHH5/U7ry36nU4mCR5JuXZat1GcuxTE/Fb
eF6m1sNh8UqcBeTtS95LLhEj5OCd3WvWNjRbig1+VhRokWau+6dPjutfm7UqDCQs
RW6jxhLggNMu1nA45fwyUbbNdMIpAEy3EPGtoXb7XfPYhyJiAhnT7O827XYjBCWN
MWfGF5UyfOIAmDwrct7e9zm9h2x1DhM=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:46 2025 by rpki-client