Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/abc8eb70-b1a1-34ce-a516-b7009e823dbf.roa
File:                     abc8eb70-b1a1-34ce-a516-b7009e823dbf.roa (raw, json)
Hash identifier:          9ZTPnIaqsqmjzcw/bgO+YWhQpDX8GOxLf9QKnoXmgcw=
Subject key identifier:   43:28:BE:89:43:52:96:A1:85:7A:AF:AE:E5:BA:21:CF:3B:9F:17:E7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B5A0A13BEE3DDBAC01CB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/abc8eb70-b1a1-34ce-a516-b7009e823dbf.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        209.226.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b5:a0:a1:3b:ee:3d:db:ac:01:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=d536ab27-25f8-46f5-9a06-339114b9bff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:de:04:45:af:7f:86:2e:b2:36:4f:37:c1:
                    18:a1:74:d0:b3:7f:0c:e8:1d:51:b4:17:dd:70:f5:
                    62:87:2e:5c:dd:17:8d:08:6e:c4:69:06:d4:96:47:
                    13:02:05:8c:06:66:99:78:9f:8f:19:49:48:5d:49:
                    9e:d2:39:d4:11:5e:2e:c2:e7:01:ca:28:f4:96:01:
                    98:b0:11:4f:d0:f0:c8:d9:67:ca:14:52:e4:50:eb:
                    bc:b2:84:77:cf:71:8d:94:39:cf:fe:7c:8c:bd:df:
                    4d:d8:a3:48:22:26:3c:1e:2d:aa:80:86:11:0d:8c:
                    11:f3:ad:6a:79:ac:9a:2d:9a:cc:61:23:bc:99:c9:
                    6b:93:0b:cc:26:ec:4d:b8:26:7d:1c:27:ea:d1:44:
                    e9:72:e6:b6:87:be:85:31:f1:db:f3:6f:d1:42:07:
                    3a:d8:92:65:91:ff:4f:51:01:d6:e5:d3:ef:5b:a6:
                    5d:cc:29:a2:23:22:41:53:71:95:c5:d3:89:86:e8:
                    bd:5e:ed:7c:b6:9e:bd:7d:5a:33:37:7c:c9:49:4e:
                    a2:2a:ae:7f:c6:78:d8:ca:44:c4:02:f4:fe:d4:45:
                    6f:52:ea:f3:39:88:c3:39:25:56:7e:78:ff:62:85:
                    9e:82:5c:d5:ba:a2:a5:6e:ee:14:cd:53:71:9d:14:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:BE:89:43:52:96:A1:85:7A:AF:AE:E5:BA:21:CF:3B:9F:17:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/abc8eb70-b1a1-34ce-a516-b7009e823dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:00:56:69:26:89:fd:6c:6d:e7:53:2b:d5:92:5d:e4:04:
         9b:44:e2:e2:e3:a1:71:a7:bb:55:e8:71:f5:55:64:30:9b:7a:
         16:73:32:bd:02:aa:4b:af:b0:8b:5f:81:56:f7:7e:db:f5:a6:
         d7:4e:e8:dc:63:d4:ae:f1:81:02:5b:34:2d:2b:22:81:a2:29:
         a0:06:8d:60:87:98:4e:f7:d3:53:c7:ac:4d:c0:96:8b:f6:f0:
         cc:d1:f5:0e:fb:c6:81:d5:6c:b1:22:2b:c2:58:1a:12:9e:b9:
         41:68:8f:8f:aa:dd:67:a4:fd:33:b5:04:d0:16:a9:e2:81:0f:
         c8:ff:e8:f9:f8:fd:ef:7b:ff:d8:0d:c1:cb:db:57:64:b1:26:
         65:07:c9:86:3c:86:94:74:21:bc:9e:73:a8:88:3c:0f:dc:b1:
         57:3d:ca:a8:b0:3d:63:3a:5e:2f:75:a5:f4:33:ab:5b:43:f8:
         7f:f6:36:55:a5:c5:cd:e1:49:25:66:7f:01:81:6c:d5:93:66:
         51:30:bd:20:12:ac:91:52:51:c6:9f:03:85:01:f0:f9:bf:85:
         b8:cb:b9:84:32:02:8b:9a:5c:30:6e:16:24:ba:18:79:23:ef:
         49:a3:3c:fb:da:90:c3:18:82:e6:63:e5:a0:9f:1e:56:2d:6d:
         04:50:44:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtaChO+4926wBywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDUzNmFiMjctMjVmOC00NmY1LTlhMDYtMzM5MTE0YjliZmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07jeBEWvf4YusjZPN8EYoXTQs38M6B1RtBfd
cPVihy5c3ReNCG7EaQbUlkcTAgWMBmaZeJ+PGUlIXUme0jnUEV4uwucByij0lgGY
sBFP0PDI2WfKFFLkUOu8soR3z3GNlDnP/nyMvd9N2KNIIiY8Hi2qgIYRDYwR861q
eayaLZrMYSO8mclrkwvMJuxNuCZ9HCfq0UTpcua2h76FMfHb82/RQgc62JJlkf9P
UQHW5dPvW6ZdzCmiIyJBU3GVxdOJhui9Xu18tp69fVozN3zJSU6iKq5/xnjYykTE
AvT+1EVvUurzOYjDOSVWfnj/YoWeglzVuqKlbu4UzVNxnRQ6ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMovolDUpahhXqvruW6Ic87nxfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYWJjOGViNzAtYjFhMS0z
NGNlLWE1MTYtYjcwMDllODIzZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eIdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWhAFZpJon9bG3nUyvVkl3kBJtE4uLjoXGnu1XocfVVZDCbehZzMr0C
qkuvsItfgVb3ftv1ptdO6Nxj1K7xgQJbNC0rIoGiKaAGjWCHmE7301PHrE3Alov2
8MzR9Q77xoHVbLEiK8JYGhKeuUFoj4+q3Wek/TO1BNAWqeKBD8j/6Pn4/e97/9gN
wcvbV2SxJmUHyYY8hpR0Ibyec6iIPA/csVc9yqiwPWM6Xi91pfQzq1tD+H/2NlWl
xc3hSSVmfwGBbNWTZlEwvSASrJFSUcafA4UB8Pm/hbjLuYQyAouaXDBuFiS6GHkj
70mjPPvakMMYguZj5aCfHlYtbQRQRBc=
-----END CERTIFICATE-----
Generated at Sun May 19 01:47:28 2024 by rpki-client on console-ams.rpki-client.org