Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46de1827-d29c-3c2f-a019-5c7234225135.roa
File:                     46de1827-d29c-3c2f-a019-5c7234225135.roa (raw, json)
Hash identifier:          M3d9w9C9/j8kbIQrIJMKdkucICumJ6+BL5thI73v0po=
Subject key identifier:   98:74:AD:D9:AC:DA:05:A0:08:6B:35:71:B2:6A:E0:CD:DB:F1:FC:9C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA1476020EBCE487310E6C58
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46de1827-d29c-3c2f-a019-5c7234225135.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        216.18.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:76:02:0e:bc:e4:87:31:0e:6c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=8808c7ae-c1b0-4bc2-aac9-98aaac7c5c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:cd:13:b6:66:2d:77:d4:12:a2:47:7d:ad:
                    f8:d1:b9:37:d5:64:f9:39:a6:8a:4c:91:f6:34:4e:
                    5c:fa:20:72:2d:ed:25:94:89:d2:21:df:0d:ef:bf:
                    ba:78:a0:2c:6f:80:6e:77:30:b9:3f:b1:e1:4b:de:
                    49:7e:41:d8:7f:b7:10:4c:fa:86:6a:f6:3a:76:7d:
                    df:08:1f:35:0e:bb:2e:30:46:d0:c1:69:41:62:4f:
                    98:08:04:fb:19:6e:ea:47:a3:d0:bd:42:aa:c4:fc:
                    e2:0a:b6:dc:75:c7:00:7c:e3:bd:1a:f4:3d:34:c6:
                    e8:ef:9b:b3:6a:0e:0d:79:49:24:79:f9:b5:1a:ec:
                    b5:31:4b:af:fc:7c:31:b1:c4:84:f7:7f:af:a6:3b:
                    eb:96:6b:ea:c5:95:e0:1b:4e:c8:8a:bf:a8:fa:b2:
                    f8:88:9e:c7:35:11:9c:24:5f:a9:95:91:8d:bb:d3:
                    d8:00:38:10:77:34:1b:fe:bd:a5:cd:95:8d:57:db:
                    b9:d5:1a:ae:fa:f3:27:b6:4f:9c:b2:32:d7:a3:c2:
                    90:ab:01:2c:f1:a5:3b:63:62:d2:43:08:ac:b0:6f:
                    28:fc:5a:e5:70:2a:27:81:6b:c6:f4:01:16:7d:99:
                    05:0f:91:15:76:64:4b:55:9c:35:f2:ea:67:78:7c:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:AD:D9:AC:DA:05:A0:08:6B:35:71:B2:6A:E0:CD:DB:F1:FC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46de1827-d29c-3c2f-a019-5c7234225135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:97:d6:b6:12:8f:1b:d2:ea:cb:5f:8f:79:f9:b1:8b:7e:51:
         34:9a:65:85:25:76:eb:11:2d:bb:92:10:1f:3f:8b:01:af:8b:
         fa:29:19:a1:40:82:16:20:54:24:c2:fc:68:a0:d3:e1:74:62:
         22:97:20:2c:99:3a:2a:29:d9:ac:2b:8c:b2:d4:f7:4d:73:74:
         b3:7b:3f:7c:6d:72:af:37:11:6b:a1:4f:9d:aa:2b:04:34:6e:
         46:89:e5:96:dc:c5:28:52:90:2f:18:d3:35:34:dd:88:74:e8:
         0f:2f:1c:c2:1c:14:9f:c6:b8:df:a7:35:ff:e8:89:6e:0d:78:
         13:a8:39:df:01:d9:44:2c:19:55:75:c2:63:73:69:3b:6e:db:
         18:b8:e4:ce:8a:07:60:1b:5f:0f:25:5f:06:97:2e:23:f0:43:
         f1:c3:87:81:47:a9:c4:7c:7b:fb:65:cb:12:bc:f6:a8:ae:9f:
         e8:6a:33:cf:5f:fd:08:ce:4f:fc:37:0b:1c:66:74:03:cc:72:
         2a:1b:a6:d1:3e:f6:b2:ea:04:77:4d:a5:e2:a6:6b:c8:29:4d:
         2f:42:5a:09:fc:e4:fa:c8:65:3d:af:37:74:ed:81:1f:40:5a:
         4a:d6:cc:f2:14:80:be:a5:cb:99:34:6c:ec:00:a5:85:21:c0:
         0f:e6:e4:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKqFHYCDrzkhzEObFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
ODgwOGM3YWUtYzFiMC00YmMyLWFhYzktOThhYWFjN2M1YzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3XNE7ZmLXfUEqJHfa340bk31WT5OaaKTJH2
NE5c+iByLe0llInSId8N77+6eKAsb4BudzC5P7HhS95JfkHYf7cQTPqGavY6dn3f
CB81DrsuMEbQwWlBYk+YCAT7GW7qR6PQvUKqxPziCrbcdccAfOO9GvQ9NMbo75uz
ag4NeUkkefm1Guy1MUuv/HwxscSE93+vpjvrlmvqxZXgG07Iir+o+rL4iJ7HNRGc
JF+plZGNu9PYADgQdzQb/r2lzZWNV9u51Rqu+vMntk+csjLXo8KQqwEs8aU7Y2LS
QwissG8o/FrlcCongWvG9AEWfZkFD5EVdmRLVZw18upneHyDRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJh0rdms2gWgCGs1cbJq4M3b8fycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDZkZTE4MjctZDI5Yy0z
YzJmLWEwMTktNWM3MjM0MjI1MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BJCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmX1rYSjxvS6stfj3n5sYt+UTSaZYUldusRLbuSEB8/iwGvi/opGaFA
ghYgVCTC/Gig0+F0YiKXICyZOiop2awrjLLU901zdLN7P3xtcq83EWuhT52qKwQ0
bkaJ5ZbcxShSkC8Y0zU03Yh06A8vHMIcFJ/GuN+nNf/oiW4NeBOoOd8B2UQsGVV1
wmNzaTtu2xi45M6KB2AbXw8lXwaXLiPwQ/HDh4FHqcR8e/tlyxK89qiun+hqM89f
/QjOT/w3CxxmdAPMciobptE+9rLqBHdNpeKma8gpTS9CWgn85PrIZT2vN3TtgR9A
WkrWzPIUgL6ly5k0bOwApYUhwA/m5Po=
-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:01 2023 by rpki-client on console-fra.rpki-client.org