Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f5ad222-254f-36fe-a13a-451a82c82666.roa
File:                     3f5ad222-254f-36fe-a13a-451a82c82666.roa (raw, json)
Hash identifier:          Vf8xam7SL12OUskWFXv6+gkTLUBiam74LgXsWWj7Kb4=
Subject key identifier:   9A:90:B3:CE:8C:1C:21:18:DA:EC:14:0B:00:D4:0F:A4:30:47:89:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B10BC40111417DD778C50C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f5ad222-254f-36fe-a13a-451a82c82666.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     21723
IP address blocks:        206.172.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:bc:40:11:14:17:dd:77:8c:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=22d35a8c-4445-47a0-8f80-708e8927fbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:35:7d:1a:fe:56:1b:f3:1c:94:cc:13:71:
                    e8:bf:ff:b0:a6:62:66:68:4f:8f:7a:84:db:a5:30:
                    55:de:5a:20:c8:78:38:82:0c:10:5e:5c:e0:a9:29:
                    15:14:6a:e8:66:25:c5:c7:50:2f:e1:53:a4:57:b2:
                    83:2e:55:b2:e1:52:8a:2e:f3:6d:83:40:fc:34:2a:
                    a3:19:28:35:fa:3d:9c:db:75:59:9a:4f:3c:b7:04:
                    be:e4:7e:6e:c4:4c:f1:5f:72:72:c9:4d:66:0f:05:
                    ed:44:a9:b1:dd:c8:63:1d:2d:12:9d:9e:de:43:2a:
                    ef:67:f0:c8:2d:f1:8e:90:8a:6b:cb:15:e6:d4:e1:
                    d8:18:ad:e5:14:bd:8f:d6:34:63:05:84:5f:38:cb:
                    76:bd:54:3e:a2:3a:2d:a9:77:00:97:50:ff:59:44:
                    1a:c3:80:6e:d4:c2:c2:68:1e:4b:91:2f:11:c5:31:
                    10:a2:59:39:da:33:ca:71:61:91:67:ed:11:83:72:
                    96:06:4f:70:99:f9:6e:7a:2d:84:a5:69:92:f8:f2:
                    f9:63:6b:9e:20:04:01:af:21:3e:11:7a:b0:e3:6e:
                    e6:a5:e9:9e:f8:b6:c5:2b:e7:e5:e0:4c:91:5a:e8:
                    1f:a1:f5:07:94:3c:70:96:f8:a6:6d:a3:c7:17:85:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:B3:CE:8C:1C:21:18:DA:EC:14:0B:00:D4:0F:A4:30:47:89:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f5ad222-254f-36fe-a13a-451a82c82666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:61:fa:1e:f8:6e:2a:29:2c:c7:a8:d5:9e:f3:3f:ea:54:5a:
         61:69:d8:42:4d:92:1d:da:bf:93:d2:bb:19:93:58:76:7e:f9:
         1d:b0:02:df:13:a3:41:c3:18:92:bf:d3:e8:71:59:ba:e1:32:
         93:53:33:bd:f5:69:37:4a:bc:0d:c4:fb:e1:20:e9:05:cf:57:
         c0:45:3f:dc:05:73:b5:9a:8a:86:ae:68:d7:d0:88:64:e1:1f:
         99:e1:06:02:08:f4:d8:2d:5f:23:22:4f:d5:d0:75:fd:b9:30:
         12:0f:79:cd:a4:d2:5b:b6:ab:85:62:df:02:a5:4b:32:c0:db:
         a7:90:21:be:b1:11:95:22:c6:15:fc:d9:43:c6:09:cb:c6:cc:
         76:b7:1e:34:32:ad:b5:da:9f:ba:be:4e:11:e2:35:06:99:f5:
         b8:5d:c6:66:89:eb:c1:0f:90:11:38:49:d9:59:58:9e:c7:82:
         48:73:a3:49:b0:07:2f:c0:ea:5a:c7:7d:52:25:02:0c:24:63:
         90:71:89:85:86:b4:6d:16:ea:25:4d:7a:51:b1:1a:f4:76:3a:
         c5:b7:95:2c:22:d4:d4:18:83:48:20:04:44:77:e0:6c:9f:39:
         ba:2f:bc:76:4b:1e:f2:16:b0:12:6f:31:8c:2b:b5:8a:18:57:
         b0:4c:5d:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrELxAERQX3XeMUMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MjJkMzVhOGMtNDQ0NS00N2EwLThmODAtNzA4ZTg5MjdmYmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL41fRr+VhvzHJTME3Hov/+wpmJmaE+PeoTb
pTBV3logyHg4ggwQXlzgqSkVFGroZiXFx1Av4VOkV7KDLlWy4VKKLvNtg0D8NCqj
GSg1+j2c23VZmk88twS+5H5uxEzxX3JyyU1mDwXtRKmx3chjHS0SnZ7eQyrvZ/DI
LfGOkIpryxXm1OHYGK3lFL2P1jRjBYRfOMt2vVQ+ojotqXcAl1D/WUQaw4Bu1MLC
aB5LkS8RxTEQolk52jPKcWGRZ+0Rg3KWBk9wmfluei2EpWmS+PL5Y2ueIAQBryE+
EXqw427mpeme+LbFK+fl4EyRWugfofUHlDxwlvimbaPHF4XyPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqQs86MHCEY2uwUCwDUD6QwR4mYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2Y1YWQyMjItMjU0Zi0z
NmZlLWExM2EtNDUxYTgyYzgyNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqwdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdh+h74biopLMeo1Z7zP+pUWmFp2EJNkh3av5PSuxmTWHZ++R2wAt8T
o0HDGJK/0+hxWbrhMpNTM731aTdKvA3E++Eg6QXPV8BFP9wFc7WaioauaNfQiGTh
H5nhBgII9NgtXyMiT9XQdf25MBIPec2k0lu2q4Vi3wKlSzLA26eQIb6xEZUixhX8
2UPGCcvGzHa3HjQyrbXan7q+ThHiNQaZ9bhdxmaJ68EPkBE4SdlZWJ7Hgkhzo0mw
By/A6lrHfVIlAgwkY5BxiYWGtG0W6iVNelGxGvR2OsW3lSwi1NQYg0ggBER34Gyf
ObovvHZLHvIWsBJvMYwrtYoYV7BMXQE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:58 2024 by rpki-client on console-ams.rpki-client.org