Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dc55070-24d6-340e-b28d-c01d02ab9764.roa
File:                     8dc55070-24d6-340e-b28d-c01d02ab9764.roa (raw, json)
Hash identifier:          xyvRHmjeeN7AXNs9JU6r2MO/hNBu4UXgyGOhVymQjCI=
Subject key identifier:   73:69:1A:0D:06:1F:8C:A7:68:F7:53:C3:A1:DE:5F:08:72:E7:DA:84
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F355C9393323787253580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dc55070-24d6-340e-b28d-c01d02ab9764.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        156.34.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:35:5c:93:93:32:37:87:25:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=5286aa3d-bf65-4ea6-8a31-dd8675fa2d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:ba:ab:fd:a7:bd:26:35:e5:c8:9b:cf:20:
                    6e:15:c1:6c:06:a7:cf:07:21:1f:0f:91:5f:2d:8b:
                    35:c5:69:21:cf:82:e8:ad:a2:f7:f3:b8:9d:75:4f:
                    f3:e7:f7:b6:f2:9f:b2:d1:32:d3:bc:da:b7:f9:b9:
                    29:7d:71:31:18:3f:3b:a7:99:6f:a8:f9:85:01:b0:
                    77:87:30:52:dc:6a:57:93:e9:9c:de:37:d4:dd:27:
                    09:71:ff:37:f5:35:99:dc:4a:ed:fd:68:7c:c0:73:
                    20:a1:72:22:f3:00:22:04:19:64:9e:6b:72:ba:b8:
                    9e:0e:34:e0:01:67:91:c5:da:31:8e:2e:7c:0d:1d:
                    40:34:63:79:36:d0:32:6e:9b:b4:e2:dd:af:58:c4:
                    dd:83:42:f4:ce:13:19:28:d3:dc:03:e5:82:4c:9a:
                    40:35:15:b5:6a:82:0b:d9:de:02:77:80:09:ea:d1:
                    56:70:0e:05:99:98:ff:08:92:e5:a8:1a:f1:3c:83:
                    22:4c:ae:ca:20:9e:e0:99:b2:22:9d:00:29:d8:9c:
                    63:d4:67:59:95:b9:fd:21:a7:d1:37:58:69:41:71:
                    13:d5:e9:d5:86:8d:89:df:42:8b:e1:bf:d6:c1:e1:
                    d8:29:40:ab:e9:3a:99:67:a1:67:f4:c5:0d:09:25:
                    ab:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:1A:0D:06:1F:8C:A7:68:F7:53:C3:A1:DE:5F:08:72:E7:DA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8dc55070-24d6-340e-b28d-c01d02ab9764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:0a:0f:1a:57:04:3e:dc:33:4a:12:dc:f1:d5:dc:7e:7d:
         5f:55:d5:40:8d:40:90:18:35:65:65:9d:a1:e2:fd:00:35:dc:
         1e:ba:c4:fc:63:5d:8e:51:17:08:95:63:8a:f1:db:fc:a8:53:
         4c:05:78:92:c9:74:24:08:05:f8:13:3f:e9:40:3b:8f:37:0d:
         8d:1f:39:de:f9:de:9b:58:29:16:ca:a2:e0:64:bc:fe:63:9d:
         a4:4a:a8:64:24:8f:9e:bc:de:8b:93:48:ed:63:86:ae:fd:99:
         4c:60:fc:58:75:59:c2:84:eb:e4:48:1b:99:4e:d3:a9:45:b2:
         31:5f:3d:54:d9:54:64:0b:21:bc:4c:b2:8d:9c:35:73:88:81:
         f7:0e:8d:e9:61:75:52:b2:2f:5a:23:39:19:b7:1e:ac:e6:40:
         82:01:c5:26:4b:12:30:b4:13:0b:85:3c:6e:0b:43:a6:c7:76:
         22:83:73:a5:e1:9d:a0:2a:59:4f:70:80:e0:54:86:cf:11:1c:
         54:60:0a:bd:e5:ae:c7:25:fc:a8:94:82:d9:e0:40:2b:62:4d:
         e9:04:a7:cb:db:b1:bf:47:78:be:54:b3:4c:f0:f4:c1:f1:0c:
         54:cb:d9:e7:c0:de:c1:cf:00:64:39:62:af:de:2e:bd:4e:2b:
         c5:ac:2b:21
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcrDzVck5MyN4clNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTI4NmFhM2QtYmY2NS00ZWE2LThhMzEtZGQ4Njc1ZmEyZDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+u6q/2nvSY15cibzyBuFcFsBqfPByEfD5Ff
LYs1xWkhz4LoraL387iddU/z5/e28p+y0TLTvNq3+bkpfXExGD87p5lvqPmFAbB3
hzBS3GpXk+mc3jfU3ScJcf839TWZ3Ert/Wh8wHMgoXIi8wAiBBlknmtyurieDjTg
AWeRxdoxji58DR1ANGN5NtAybpu04t2vWMTdg0L0zhMZKNPcA+WCTJpANRW1aoIL
2d4Cd4AJ6tFWcA4FmZj/CJLlqBrxPIMiTK7KIJ7gmbIinQAp2Jxj1GdZlbn9IafR
N1hpQXET1enVho2J30KL4b/WweHYKUCr6TqZZ6Fn9MUNCSWr/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHNpGg0GH4ynaPdTw6HeXwhy59qEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGRjNTUwNzAtMjRkNi0z
NDBlLWIyOGQtYzAxZDAyYWI5NzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnCIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbq0KDxpXBD7cM0oS3PHV3H59X1XVQI1AkBg1ZWWdoeL9ADXcHrrE/GNd
jlEXCJVjivHb/KhTTAV4ksl0JAgF+BM/6UA7jzcNjR853vnem1gpFsqi4GS8/mOd
pEqoZCSPnrzei5NI7WOGrv2ZTGD8WHVZwoTr5EgbmU7TqUWyMV89VNlUZAshvEyy
jZw1c4iB9w6N6WF1UrIvWiM5GbcerOZAggHFJksSMLQTC4U8bgtDpsd2IoNzpeGd
oCpZT3CA4FSGzxEcVGAKveWuxyX8qJSC2eBAK2JN6QSny9uxv0d4vlSzTPD0wfEM
VMvZ58Dewc8AZDlir94uvU4rxawrIQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:10 2024 by rpki-client on console-fra.rpki-client.org