Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7cbd3869-7c9c-3e93-8c4c-c755983a6d22.roa
File:                     7cbd3869-7c9c-3e93-8c4c-c755983a6d22.roa (raw, json)
Hash identifier:          w21ls8zyENRcu2I9nuzzT5sZTrfcsVpVc39MUC/99KI=
Subject key identifier:   9C:DF:B8:62:FF:59:00:3F:0D:9D:04:75:07:77:37:A4:A7:0A:CE:9C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FC82F205287CD07810B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7cbd3869-7c9c-3e93-8c4c-c755983a6d22.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        204.101.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:c8:2f:20:52:87:cd:07:81:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=b8cdb182-95cc-432d-84b3-efb600de3a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:7e:33:ff:ba:2a:c7:0b:8f:14:75:79:14:
                    59:de:49:e0:89:09:86:d8:f3:b3:aa:fc:1b:0a:45:
                    e9:4b:ac:45:cf:c3:ee:b1:94:35:ec:1a:20:52:4d:
                    e7:ef:81:fb:dc:c6:df:2c:fd:bf:c6:82:a8:57:f8:
                    fa:7f:47:43:92:0c:43:68:d8:a6:92:ef:13:b3:45:
                    e3:04:c3:35:6f:67:95:7d:64:5c:fe:c6:fc:93:ef:
                    cb:fe:69:16:f7:85:47:69:bb:c6:20:63:ef:0e:8b:
                    e5:ee:a3:87:4c:7a:15:c0:66:47:da:90:11:6c:bb:
                    81:ad:7d:be:90:d8:9a:96:ff:cb:44:e2:d1:74:13:
                    0c:32:27:88:2a:98:5b:3c:6a:2d:f2:1a:34:07:c0:
                    4a:7e:37:80:a8:36:6f:82:90:64:32:9b:6f:bc:e2:
                    a4:bb:84:24:b0:30:82:9e:33:22:3e:05:ad:f4:fe:
                    38:c3:7e:23:cb:a9:d6:e2:0a:14:ee:70:9b:7f:22:
                    68:7c:dc:8b:f4:5b:37:ee:fd:d0:07:2e:47:50:5a:
                    50:ba:32:0a:74:7d:79:a4:29:5c:dc:69:fd:a6:3c:
                    4a:ca:ff:08:97:35:86:39:68:f3:fb:d8:52:e0:09:
                    7d:7c:b2:b6:ea:e3:a6:ea:52:a8:14:41:71:93:e0:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DF:B8:62:FF:59:00:3F:0D:9D:04:75:07:77:37:A4:A7:0A:CE:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7cbd3869-7c9c-3e93-8c4c-c755983a6d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:3b:0f:54:9b:4d:c7:a7:cc:fe:8c:9d:2a:5b:7f:90:73:
         16:f0:1a:87:a0:5b:b8:5c:97:e6:c6:fd:29:9e:44:8b:97:36:
         b0:3e:c9:85:08:79:c9:bb:59:5f:f9:22:0b:19:3e:b7:19:aa:
         b5:ec:62:85:13:1b:fb:86:df:f6:32:cf:ec:7f:40:eb:18:38:
         11:59:06:e3:19:15:b2:65:af:47:55:4b:3d:63:91:cd:24:fe:
         0e:08:8d:dd:90:f3:de:2b:96:21:a6:7c:a2:c2:a1:77:c2:d0:
         4a:56:01:15:81:0d:63:61:89:95:49:25:c7:5c:8b:5e:b1:61:
         49:4a:e7:48:c3:47:5f:23:6c:ee:2b:07:c2:4a:13:6e:f6:04:
         81:2e:95:bb:50:0f:0a:e4:05:62:2a:81:bd:79:61:45:5d:a6:
         54:a1:49:cb:88:68:a0:68:73:9b:19:7d:0b:5f:5f:e0:56:e7:
         27:ff:86:28:05:75:3e:bf:ea:e1:18:b1:fd:17:29:bc:b2:c9:
         c4:0f:44:d3:7b:93:62:77:04:77:8a:6b:b8:63:01:1a:b9:cf:
         04:fd:e0:10:b7:f2:02:c3:68:35:3f:39:69:7f:e4:77:78:cb:
         b5:2e:78:01:9b:16:88:f8:0d:35:d0:74:8f:b2:34:02:7d:9e:
         31:cb:ef:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrD8gvIFKHzQeBCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
YjhjZGIxODItOTVjYy00MzJkLTg0YjMtZWZiNjAwZGUzYTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+R+M/+6KscLjxR1eRRZ3kngiQmG2POzqvwb
CkXpS6xFz8PusZQ17BogUk3n74H73MbfLP2/xoKoV/j6f0dDkgxDaNimku8Ts0Xj
BMM1b2eVfWRc/sb8k+/L/mkW94VHabvGIGPvDovl7qOHTHoVwGZH2pARbLuBrX2+
kNialv/LROLRdBMMMieIKphbPGot8ho0B8BKfjeAqDZvgpBkMptvvOKku4QksDCC
njMiPgWt9P44w34jy6nW4goU7nCbfyJofNyL9Fs37v3QBy5HUFpQujIKdH15pClc
3Gn9pjxKyv8IlzWGOWjz+9hS4Al9fLK26uOm6lKoFEFxk+B7EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzfuGL/WQA/DZ0EdQd3N6SnCs6cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvN2NiZDM4NjktN2M5Yy0z
ZTkzLThjNGMtYzc1NTk4M2E2ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGUWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1qOw9Um03Hp8z+jJ0qW3+QcxbwGoegW7hcl+bG/SmeRIuXNrA+yYUI
ecm7WV/5IgsZPrcZqrXsYoUTG/uG3/Yyz+x/QOsYOBFZBuMZFbJlr0dVSz1jkc0k
/g4Ijd2Q894rliGmfKLCoXfC0EpWARWBDWNhiZVJJcdci16xYUlK50jDR18jbO4r
B8JKE272BIEulbtQDwrkBWIqgb15YUVdplShScuIaKBoc5sZfQtfX+BW5yf/higF
dT6/6uEYsf0XKbyyycQPRNN7k2J3BHeKa7hjARq5zwT94BC38gLDaDU/OWl/5Hd4
y7UueAGbFoj4DTXQdI+yNAJ9njHL78g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:11 2024 by rpki-client on console-ams.rpki-client.org