Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60fe591c-a408-333f-8c70-807d4842a870.roa
File:                     60fe591c-a408-333f-8c70-807d4842a870.roa (raw, json)
Hash identifier:          srZSJEFnmIVZLuWHRcad1kmRNLwZ42B79o2toQs8l38=
Subject key identifier:   11:EF:8C:41:B7:05:0B:78:FE:70:68:78:2F:B8:45:1A:E3:87:19:EE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F6048EDD1A00177D6A760
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60fe591c-a408-333f-8c70-807d4842a870.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.150.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:60:48:ed:d1:a0:01:77:d6:a7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=76f16924-a3a9-486b-bf26-f4e6296290cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:2b:3a:31:34:73:e9:67:58:0d:50:f2:55:
                    d2:00:d1:fe:77:a2:1b:9a:80:dc:5d:c0:5b:ca:6e:
                    9d:1f:02:8f:cf:63:eb:75:35:a2:2e:eb:86:1d:3c:
                    bd:2e:4c:6a:07:19:29:0d:28:15:14:b7:33:ef:bc:
                    c0:97:6a:18:e9:8e:e1:29:c2:7c:50:3a:68:6d:15:
                    0e:d2:31:dc:78:53:3d:8e:d3:27:4a:f5:40:e6:63:
                    3e:36:55:a6:e4:23:8c:eb:64:67:7e:b7:39:d2:3a:
                    f2:cf:0c:95:e0:42:72:fe:a4:c7:87:88:01:1e:5c:
                    45:c4:9e:8f:51:12:ba:21:ce:8c:72:d7:20:11:e4:
                    29:3e:ed:22:9a:e5:69:cb:b9:fe:6d:0f:f4:57:88:
                    1e:1c:ef:84:51:84:3f:98:2c:1c:92:b4:d0:55:7d:
                    6c:61:ac:0e:6f:65:f0:f0:b0:d5:6b:24:db:22:fb:
                    58:6a:dd:98:29:2e:82:d0:fe:61:1c:d9:b0:58:76:
                    11:0b:86:91:8c:ad:b1:24:5b:06:f8:66:a1:de:e9:
                    5f:50:b1:e5:ab:35:2e:fd:23:76:11:71:0f:80:01:
                    d0:3c:2e:ff:f3:5d:81:1a:37:be:e4:54:6f:b9:b0:
                    3b:44:a9:dc:c5:4a:13:22:b7:00:a6:f2:9b:58:6d:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EF:8C:41:B7:05:0B:78:FE:70:68:78:2F:B8:45:1A:E3:87:19:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/60fe591c-a408-333f-8c70-807d4842a870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e3:d9:de:04:45:3e:12:27:29:6e:71:1f:3d:19:34:e2:69:
         80:ea:94:35:a0:c0:f1:75:16:f1:31:00:e7:06:9a:0b:37:67:
         87:04:ff:31:f6:0c:50:c2:c9:1e:42:97:d4:6f:36:92:49:4b:
         09:3e:24:ce:e9:74:69:4c:9d:1a:43:6c:40:4a:46:1e:e5:e2:
         c4:c8:1e:76:ee:ea:e5:56:55:cc:92:13:63:ce:91:26:06:d5:
         34:d2:b0:72:ae:f4:a7:0a:c8:97:15:5c:85:b8:7c:86:9a:ec:
         72:11:70:b0:66:53:3d:66:c9:4b:bc:23:d0:0c:c4:d1:e1:e6:
         6c:f7:2b:4d:85:96:75:b8:19:57:1e:10:0d:74:5f:09:ae:9c:
         50:ea:fa:21:42:39:e9:8a:44:ac:4e:d6:6d:b2:15:e7:3c:0f:
         55:a6:f7:c3:3a:66:ea:0f:d2:2b:81:d0:b0:a6:fe:80:c4:4c:
         3a:02:39:8d:85:ff:1b:ca:4d:f2:21:d9:df:11:f3:90:2b:30:
         91:f3:e4:32:72:0b:6c:3e:4e:f4:13:5d:3c:1e:a9:40:e5:38:
         fe:39:0d:ef:74:5f:b5:68:40:04:58:80:4d:3b:1c:b5:c9:37:
         b1:01:da:8d:c9:a9:71:63:82:97:cc:c5:32:c7:f8:af:40:91:
         d7:fb:3d:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrD2BI7dGgAXfWp2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NzZmMTY5MjQtYTNhOS00ODZiLWJmMjYtZjRlNjI5NjI5MGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSQrOjE0c+lnWA1Q8lXSANH+d6IbmoDcXcBb
ym6dHwKPz2PrdTWiLuuGHTy9LkxqBxkpDSgVFLcz77zAl2oY6Y7hKcJ8UDpobRUO
0jHceFM9jtMnSvVA5mM+NlWm5COM62Rnfrc50jryzwyV4EJy/qTHh4gBHlxFxJ6P
URK6Ic6MctcgEeQpPu0imuVpy7n+bQ/0V4geHO+EUYQ/mCwckrTQVX1sYawOb2Xw
8LDVayTbIvtYat2YKS6C0P5hHNmwWHYRC4aRjK2xJFsG+Gah3ulfULHlqzUu/SN2
EXEPgAHQPC7/812BGje+5FRvubA7RKncxUoTIrcApvKbWG3PcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHvjEG3BQt4/nBoeC+4RRrjhxnuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjBmZTU5MWMtYTQwOC0z
MzNmLThjNzAtODA3ZDQ4NDJhODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuJZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPj2d4ERT4SJylucR89GTTiaYDqlDWgwPF1FvExAOcGmgs3Z4cE/zH2
DFDCyR5Cl9RvNpJJSwk+JM7pdGlMnRpDbEBKRh7l4sTIHnbu6uVWVcySE2POkSYG
1TTSsHKu9KcKyJcVXIW4fIaa7HIRcLBmUz1myUu8I9AMxNHh5mz3K02FlnW4GVce
EA10XwmunFDq+iFCOemKRKxO1m2yFec8D1Wm98M6ZuoP0iuB0LCm/oDETDoCOY2F
/xvKTfIh2d8R85ArMJHz5DJyC2w+TvQTXTweqUDlOP45De90X7VoQARYgE07HLXJ
N7EB2o3JqXFjgpfMxTLH+K9Akdf7PQA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:59 2024 by rpki-client on console-ams.rpki-client.org