Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/525fe352-7ef0-3ad3-a43d-9ded30eef86a.roa
File:                     525fe352-7ef0-3ad3-a43d-9ded30eef86a.roa (raw, json)
Hash identifier:          CvJRFQDt1uP2es3Af2YRyF7FLcHwlXKzglYu6v33b9A=
Subject key identifier:   09:7A:A6:8A:24:18:83:B6:61:B1:51:AE:3E:64:F6:FC:72:19:F7:EB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1173D12D8E5F8B340ABCA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/525fe352-7ef0-3ad3-a43d-9ded30eef86a.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        207.236.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:73:d1:2d:8e:5f:8b:34:0a:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=46290230-8e76-45f0-9e53-f1dfa870f365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:e6:34:f5:fc:36:f0:d3:aa:dc:78:fc:6e:
                    87:13:09:73:c0:45:e4:de:c4:10:0b:09:cf:25:3b:
                    88:2e:1a:67:3b:12:a1:0b:e3:c6:a5:b6:db:36:34:
                    8a:16:27:3e:46:37:a7:cc:b3:1d:38:5c:84:cb:6c:
                    6f:45:fb:24:e9:64:10:0e:bc:51:dd:94:06:2f:8c:
                    03:f7:09:81:f6:dd:e2:fb:d0:9e:53:13:2a:99:df:
                    55:1d:81:15:7b:ad:a1:48:c9:66:47:7b:77:79:79:
                    b8:69:c3:8e:74:de:b5:3a:27:c8:ec:3c:0f:fe:6e:
                    a6:e2:06:38:b5:8e:60:55:a2:bc:1e:d7:58:0c:f6:
                    62:b9:c1:84:08:5c:e0:6d:6a:8a:c3:a6:a5:6b:b0:
                    aa:70:f1:33:3f:44:fc:a7:65:c8:12:ed:b5:86:52:
                    8c:cd:ec:3a:10:aa:b6:29:bf:1f:68:aa:8d:1f:5a:
                    cc:dd:3b:38:fc:fb:4b:dd:3a:e5:75:10:81:3b:8d:
                    81:70:e5:75:a7:b2:c1:6e:fb:7d:21:d1:47:3d:fc:
                    60:fd:98:72:aa:96:0b:66:91:02:a2:3d:ff:e0:ac:
                    2d:73:b1:6e:97:8f:d7:be:de:56:8b:73:2c:89:f3:
                    e2:28:af:eb:11:cf:c3:53:d7:5c:3f:33:9d:f5:ec:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7A:A6:8A:24:18:83:B6:61:B1:51:AE:3E:64:F6:FC:72:19:F7:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/525fe352-7ef0-3ad3-a43d-9ded30eef86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:71:f8:92:53:98:f9:7e:a6:b3:8a:15:24:99:bf:29:02:aa:
         45:a4:4a:0e:cd:60:9d:46:69:32:7e:21:96:fe:7d:79:6c:87:
         72:7f:38:7f:1c:26:10:2a:6b:82:7c:9d:97:0c:93:ab:93:45:
         7f:46:04:66:bd:f5:8f:76:c7:6f:4b:3a:f3:46:98:86:42:84:
         4a:64:f3:32:0d:b3:fa:99:fd:02:98:0d:a8:ac:2e:0f:ba:24:
         f7:b3:90:6d:07:c1:bb:a3:1c:d2:a8:4a:c4:42:4e:85:5a:63:
         c5:b7:ae:7f:28:34:6d:71:0b:cb:62:12:01:cb:a3:4e:ab:c0:
         d0:4d:29:4e:67:53:e1:90:54:eb:b2:73:48:aa:50:26:c3:dc:
         4e:89:e7:6a:b0:26:a1:b8:da:c2:a2:ff:00:e1:2d:cc:f0:49:
         84:cd:bd:6f:d3:e8:52:96:4a:f8:78:a1:a4:0f:49:ac:78:70:
         a5:43:48:d3:d5:d2:88:ac:be:25:84:09:3c:d6:06:7c:2e:c2:
         40:e2:1e:58:63:90:ba:da:44:76:d3:42:eb:15:5a:5b:7e:73:
         60:c3:7d:25:b1:c0:da:16:2f:70:da:13:c4:10:d6:18:dc:d0:
         c6:4d:69:82:cb:fe:81:24:15:eb:36:d8:2a:4e:14:4c:5e:e6:
         ea:b6:b8:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEXPRLY5fizQKvKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NDYyOTAyMzAtOGU3Ni00NWYwLTllNTMtZjFkZmE4NzBmMzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc7mNPX8NvDTqtx4/G6HEwlzwEXk3sQQCwnP
JTuILhpnOxKhC+PGpbbbNjSKFic+RjenzLMdOFyEy2xvRfsk6WQQDrxR3ZQGL4wD
9wmB9t3i+9CeUxMqmd9VHYEVe62hSMlmR3t3eXm4acOOdN61OifI7DwP/m6m4gY4
tY5gVaK8HtdYDPZiucGECFzgbWqKw6ala7CqcPEzP0T8p2XIEu21hlKMzew6EKq2
Kb8faKqNH1rM3Ts4/PtL3TrldRCBO42BcOV1p7LBbvt9IdFHPfxg/ZhyqpYLZpEC
oj3/4Kwtc7Ful4/Xvt5Wi3MsifPiKK/rEc/DU9dcPzOd9exARwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAl6pookGIO2YbFRrj5k9vxyGffrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNTI1ZmUzNTItN2VmMC0z
YWQzLWE0M2QtOWRlZDMwZWVmODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+x6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJx+JJTmPl+prOKFSSZvykCqkWkSg7NYJ1GaTJ+IZb+fXlsh3J/OH8c
JhAqa4J8nZcMk6uTRX9GBGa99Y92x29LOvNGmIZChEpk8zINs/qZ/QKYDaisLg+6
JPezkG0HwbujHNKoSsRCToVaY8W3rn8oNG1xC8tiEgHLo06rwNBNKU5nU+GQVOuy
c0iqUCbD3E6J52qwJqG42sKi/wDhLczwSYTNvW/T6FKWSvh4oaQPSax4cKVDSNPV
0oisviWECTzWBnwuwkDiHlhjkLraRHbTQusVWlt+c2DDfSWxwNoWL3DaE8QQ1hjc
0MZNaYLL/oEkFes22CpOFExe5uq2uJk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org