Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c5186a0-176a-3755-9bb9-a616ad3ddd0b.roa
File:                     5c5186a0-176a-3755-9bb9-a616ad3ddd0b.roa (raw, json)
Hash identifier:          qhTD0xMwqENe9PVEWVVtN+3FsPwXzK8mv1byc3FX3hk=
Subject key identifier:   ED:DE:D5:24:15:53:EA:80:55:3D:11:5A:DD:73:30:09:7A:60:C5:91
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B1240B0EAAD355316A2AB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c5186a0-176a-3755-9bb9-a616ad3ddd0b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        216.209.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:40:b0:ea:ad:35:53:16:a2:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=c4c47ff6-2a10-438b-b566-8929915399f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:33:39:fc:17:0f:a0:54:a5:9e:5d:fa:0e:
                    45:4c:bc:de:94:d2:0a:39:02:d6:a8:d9:b4:79:d9:
                    32:98:4f:c3:ad:74:fc:cf:b0:74:18:73:33:08:0d:
                    cf:5d:3e:90:03:f1:20:61:8f:24:06:dc:96:3c:31:
                    53:df:12:d6:59:ec:44:d2:8b:4d:54:f2:e7:1f:ef:
                    66:06:57:67:7c:45:44:8f:43:14:e7:d8:6c:e4:5f:
                    03:a0:7b:51:8f:14:fc:77:d0:60:8c:e4:e9:87:bf:
                    8c:21:6a:35:f4:5d:f5:fe:dc:74:ee:cd:4a:b8:10:
                    a1:cd:24:04:14:49:b3:59:e5:48:4e:23:2d:e7:95:
                    7d:e5:fc:b5:b1:ab:ee:f2:d4:fc:0a:b2:58:0b:f2:
                    2d:ac:50:a6:b5:da:70:67:2c:f8:81:cb:85:be:67:
                    ab:65:a2:be:e6:6b:44:10:33:64:c9:55:0e:f6:0e:
                    bd:4a:d7:9f:df:4f:a8:06:d0:90:41:42:29:e8:1a:
                    58:58:95:91:11:0e:1f:91:3e:da:60:4b:19:c3:fc:
                    90:3f:f6:aa:4f:14:07:31:21:5b:0e:05:ee:fe:2b:
                    d6:a3:69:37:01:e8:1c:8a:ac:9f:76:6b:56:e6:f1:
                    cd:c8:a9:f0:e7:74:66:1b:98:6a:eb:65:fe:54:00:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:D5:24:15:53:EA:80:55:3D:11:5A:DD:73:30:09:7A:60:C5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c5186a0-176a-3755-9bb9-a616ad3ddd0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c6:33:ba:83:1c:c8:37:de:52:83:d9:b4:93:36:25:c1:b8:
         ac:d5:39:96:8c:2e:f1:1a:8f:03:de:bb:f5:fe:03:b7:50:ff:
         7d:ad:0c:ff:95:1b:76:f6:16:29:36:20:d7:d2:e0:fd:ee:7c:
         0d:67:c5:3d:21:f3:cb:de:94:48:b9:ce:56:56:0b:00:9e:9c:
         cc:dd:c9:16:ab:8b:01:a5:24:8d:2e:ec:27:7d:c9:78:bb:65:
         0d:e4:ba:71:88:72:7f:2f:17:50:b7:23:79:21:bb:01:9a:88:
         ed:48:ab:e9:b6:c7:f8:04:8f:8b:03:77:60:33:2d:5b:bc:4e:
         2e:d8:5d:4f:30:17:fb:da:dc:3c:2e:50:a5:8c:80:ce:ec:2a:
         0a:60:36:2a:54:86:7b:f6:0d:4c:a3:fe:b9:40:54:7d:e6:fb:
         dd:b3:a1:bb:94:7e:15:71:01:9f:11:90:8b:bd:d5:25:6d:16:
         bf:2f:1b:73:c4:7c:a5:38:cc:81:a2:96:5d:42:0d:f4:8c:5e:
         a7:62:37:f8:d3:e7:34:e0:87:20:3d:20:f4:5f:ec:fa:3b:fd:
         20:79:83:43:3a:5a:35:c4:91:f2:ff:eb:e1:93:1e:b0:f7:cd:
         6d:16:b6:10:ce:b3:7f:1c:d5:84:ce:56:9a:0e:d5:e3:7d:78:
         08:a2:75:a2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcrEkCw6q01UxaiqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
YzRjNDdmZjYtMmExMC00MzhiLWI1NjYtODkyOTkxNTM5OWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzEzOfwXD6BUpZ5d+g5FTLzelNIKOQLWqNm0
edkymE/DrXT8z7B0GHMzCA3PXT6QA/EgYY8kBtyWPDFT3xLWWexE0otNVPLnH+9m
BldnfEVEj0MU59hs5F8DoHtRjxT8d9BgjOTph7+MIWo19F31/tx07s1KuBChzSQE
FEmzWeVITiMt55V95fy1savu8tT8CrJYC/ItrFCmtdpwZyz4gcuFvmerZaK+5mtE
EDNkyVUO9g69Stef30+oBtCQQUIp6BpYWJWREQ4fkT7aYEsZw/yQP/aqTxQHMSFb
DgXu/ivWo2k3AegciqyfdmtW5vHNyKnw53RmG5hq62X+VADYOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO3e1SQVU+qAVT0RWt1zMAl6YMWRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWM1MTg2YTAtMTc2YS0z
NzU1LTliYjktYTYxNmFkM2RkZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2NEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgMYzuoMcyDfeUoPZtJM2JcG4rNU5lowu8RqPA9679f4Dt1D/fa0M/5Ub
dvYWKTYg19Lg/e58DWfFPSHzy96USLnOVlYLAJ6czN3JFquLAaUkjS7sJ33JeLtl
DeS6cYhyfy8XULcjeSG7AZqI7Uir6bbH+ASPiwN3YDMtW7xOLthdTzAX+9rcPC5Q
pYyAzuwqCmA2KlSGe/YNTKP+uUBUfeb73bOhu5R+FXEBnxGQi73VJW0Wvy8bc8R8
pTjMgaKWXUIN9Ixep2I3+NPnNOCHID0g9F/s+jv9IHmDQzpaNcSR8v/r4ZMesPfN
bRa2EM6zfxzVhM5Wmg7V4314CKJ1og==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:09 2024 by rpki-client on console-fra.rpki-client.org