Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d9c0bc5-b3c4-318d-b6ec-fe22ac6c3f88.roa
File:                     4d9c0bc5-b3c4-318d-b6ec-fe22ac6c3f88.roa (raw, json)
Hash identifier:          l8itPaKDqbMlU4/fenqzwi4TG7jmjgD95DV4VsM9SZQ=
Subject key identifier:   77:27:F6:72:6D:61:B6:85:B1:4E:21:8B:A3:B2:9C:FA:BA:24:F1:6A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B399B27A73EEFDFE9B1640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d9c0bc5-b3c4-318d-b6ec-fe22ac6c3f88.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.189.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:99:b2:7a:73:ee:fd:fe:9b:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=25465209-eb3d-479f-9eed-859edf37dde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:53:32:43:3c:84:8c:9b:10:44:eb:af:9e:
                    b2:d4:95:4b:63:3b:eb:74:3a:bd:ab:f1:a5:b3:73:
                    84:1b:95:7b:04:fa:e2:24:0d:f6:9c:a7:ef:50:f1:
                    cf:41:25:0e:a8:dc:4e:46:f5:3e:b4:eb:43:b3:31:
                    ab:95:70:8a:cb:fa:f4:64:92:00:c4:78:02:6d:e1:
                    7a:b9:74:33:64:97:d9:8a:cc:88:29:f1:5a:3a:f5:
                    0b:ee:b6:a9:fb:e7:cd:88:cf:21:61:4e:c8:46:06:
                    ab:6a:63:6c:61:e3:ca:6e:1c:2b:11:c3:fc:d3:28:
                    14:4b:a6:f9:14:60:de:5f:23:44:75:4f:11:5b:49:
                    57:6e:2b:51:d2:fc:07:66:16:17:dc:da:2f:88:22:
                    75:ca:2d:17:1c:d8:7a:97:ff:4c:cb:d7:70:16:3f:
                    06:cc:c2:bb:eb:1c:76:30:ee:5a:d1:40:06:ad:9b:
                    50:bb:72:9a:f6:06:8c:e5:0d:c7:ea:b2:a7:eb:53:
                    22:9e:ef:68:b4:75:02:9a:9e:44:c8:06:10:1f:97:
                    d6:72:ac:00:02:69:d4:85:3d:a8:42:84:74:3e:0b:
                    a6:5e:7a:43:72:ab:4a:fa:b7:3d:71:d8:c4:1a:65:
                    38:3f:aa:c1:bf:3c:ac:bd:1a:b8:d5:87:70:5f:62:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:27:F6:72:6D:61:B6:85:B1:4E:21:8B:A3:B2:9C:FA:BA:24:F1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4d9c0bc5-b3c4-318d-b6ec-fe22ac6c3f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:56:ed:fc:89:48:73:16:6b:8d:56:1e:1a:9c:32:57:11:52:
         8e:9f:82:1e:ff:9d:fb:82:45:3b:7a:25:d5:a5:89:a5:32:0a:
         92:ff:50:95:b9:be:7b:64:e4:7d:3b:7a:57:de:19:7b:c4:13:
         4a:a0:e3:39:8f:f3:2e:db:24:67:de:a9:6c:47:20:8d:5f:1a:
         a9:28:3e:e6:b3:41:76:e9:73:28:c6:02:a2:b4:4c:b9:14:47:
         a5:71:e3:e1:3e:18:7f:ff:fe:ea:90:58:fc:61:a5:56:a2:31:
         47:dd:cb:a4:1c:8a:c0:7a:94:2e:72:1e:80:9f:66:f6:57:68:
         e3:f2:0b:e0:34:b5:28:f7:87:da:7f:09:7a:48:f3:df:b1:8c:
         58:a6:82:1f:27:52:b7:93:76:6e:82:fd:8a:d1:b0:2d:69:d2:
         a9:b1:55:ec:07:2c:ba:56:dc:84:85:99:42:bd:bf:97:95:67:
         4a:eb:4a:db:de:e1:cd:38:cc:db:7d:bb:a3:06:f3:1c:45:50:
         c6:23:98:c4:4a:81:be:de:b3:e1:04:1c:26:ac:fc:38:00:29:
         e1:ee:1e:2f:39:a7:c8:d4:53:29:cb:4a:3e:4b:f0:48:c2:35:
         20:25:d0:93:61:bf:99:0f:ec:84:d7:8f:3d:66:90:5e:f0:42:
         7a:90:10:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWs5myenPu/f6bFkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MjU0NjUyMDktZWIzZC00NzlmLTllZWQtODU5ZWRmMzdkZGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwolTMkM8hIybEETrr56y1JVLYzvrdDq9q/Gl
s3OEG5V7BPriJA32nKfvUPHPQSUOqNxORvU+tOtDszGrlXCKy/r0ZJIAxHgCbeF6
uXQzZJfZisyIKfFaOvUL7rap++fNiM8hYU7IRgaramNsYePKbhwrEcP80ygUS6b5
FGDeXyNEdU8RW0lXbitR0vwHZhYX3NoviCJ1yi0XHNh6l/9My9dwFj8GzMK76xx2
MO5a0UAGrZtQu3Ka9gaM5Q3H6rKn61Minu9otHUCmp5EyAYQH5fWcqwAAmnUhT2o
QoR0PgumXnpDcqtK+rc9cdjEGmU4P6rBvzysvRq41YdwX2ITRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHcn9nJtYbaFsU4hi6OynPq6JPFqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNGQ5YzBiYzUtYjNjNC0z
MThkLWI2ZWMtZmUyMmFjNmMzZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjr0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMFbt/IlIcxZrjVYeGpwyVxFSjp+CHv+d+4JFO3ol1aWJpTIKkv9Qlbm+
e2TkfTt6V94Ze8QTSqDjOY/zLtskZ96pbEcgjV8aqSg+5rNBdulzKMYCorRMuRRH
pXHj4T4Yf//+6pBY/GGlVqIxR93LpByKwHqULnIegJ9m9ldo4/IL4DS1KPeH2n8J
ekjz37GMWKaCHydSt5N2boL9itGwLWnSqbFV7AcsulbchIWZQr2/l5VnSutK297h
zTjM2327owbzHEVQxiOYxEqBvt6z4QQcJqz8OAAp4e4eLzmnyNRTKctKPkvwSMI1
ICXQk2G/mQ/shNePPWaQXvBCepAQlQ==
-----END CERTIFICATE-----
Generated at Sat May 18 15:26:53 2024 by rpki-client on console-fra.rpki-client.org