Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5361761-27c7-343e-8acd-e5cdeab36118.roa
File:                     b5361761-27c7-343e-8acd-e5cdeab36118.roa (raw, json)
Hash identifier:          uAz7ZSfdbp1/T+tWS4zkcTX3Y+43NJAS3y6QC1Da6xs=
Subject key identifier:   01:FD:7A:E8:79:36:E3:73:C1:7B:D5:78:A0:46:17:A0:D0:6B:F2:83
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4028D236B8D081A6E1DA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5361761-27c7-343e-8acd-e5cdeab36118.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        198.235.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:02:8d:23:6b:8d:08:1a:6e:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=47e6d2ed-afbc-4a36-843b-6c9653d1c440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:d1:3b:f0:be:e6:59:ec:b0:2a:70:51:af:
                    38:13:34:7c:f3:4a:39:2f:b3:8a:33:fe:9f:d1:7c:
                    dc:1c:b0:9a:88:1b:64:1d:73:57:e9:c8:1c:be:f6:
                    fe:04:eb:f3:7c:07:9f:20:fc:25:b4:f7:6f:5d:38:
                    dd:1d:55:bd:bb:a6:69:49:03:9b:ec:a4:3b:d5:98:
                    74:af:4b:43:b0:89:b2:19:1b:31:e5:2d:e6:fe:34:
                    f8:7b:7b:15:3a:ca:1a:98:d6:aa:ba:ec:af:c5:20:
                    01:74:d1:10:82:fe:16:f0:f8:b8:9c:bc:8a:fa:c1:
                    8f:17:ec:f4:41:33:43:4b:ec:f1:97:9a:d5:29:8f:
                    aa:af:9b:1c:ce:f5:85:a6:48:37:5b:5e:a0:6c:61:
                    9a:0a:61:a2:b5:b1:53:08:9c:66:82:74:a1:33:f3:
                    cb:28:d5:b4:5b:99:9c:6a:67:03:8c:1d:8f:d9:8d:
                    d5:a3:a3:58:c4:1f:7b:e5:73:33:96:20:47:7e:a0:
                    c4:59:23:f3:1e:c9:1f:2d:2b:48:85:e9:11:48:c9:
                    67:3d:63:a7:84:d6:87:00:cd:62:1c:94:4b:04:9f:
                    ed:79:c8:a4:a7:c0:04:90:93:d4:b5:de:a4:18:32:
                    1c:47:12:b1:31:66:19:8f:9d:15:aa:b2:42:91:11:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FD:7A:E8:79:36:E3:73:C1:7B:D5:78:A0:46:17:A0:D0:6B:F2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b5361761-27c7-343e-8acd-e5cdeab36118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:96:67:38:ef:09:2d:b3:c9:e9:52:ee:7a:41:d3:1e:fb:05:
         38:28:32:2d:a1:91:c5:f9:f5:93:3a:de:a3:8f:8d:35:d2:35:
         aa:0b:2f:ae:d8:01:5a:05:a0:40:be:89:18:d0:8c:f1:ea:36:
         4f:2f:7d:94:21:e5:08:93:18:b1:ec:a3:ce:b0:f2:84:78:58:
         12:40:33:be:86:bc:d2:55:e8:b8:78:2e:0f:23:e2:66:55:59:
         0f:d5:23:1b:52:4a:a6:f1:e2:79:7e:66:b3:c7:b1:8f:f0:b9:
         8e:77:a8:c5:78:2e:c1:53:8f:8f:64:5c:ee:eb:19:31:07:6e:
         24:ac:0d:05:80:23:b9:7e:3a:7c:68:45:e3:bd:56:b3:31:29:
         7a:c9:cc:80:16:28:eb:6e:21:d6:32:f7:ba:66:e1:e1:2c:85:
         d3:89:53:62:4e:bd:bc:75:16:61:09:25:69:db:86:70:6d:68:
         90:a0:e0:aa:20:ff:32:6f:66:cd:c2:e6:10:e1:bd:3b:31:f4:
         43:7e:8f:0c:93:cf:2e:1d:21:84:8f:d5:98:73:8b:33:3b:70:
         98:fb:0e:9f:8e:f1:73:85:d8:0f:c4:54:22:75:d1:b5:b3:35:
         6c:1d:48:61:e6:b8:2b:3f:c5:7a:2a:0e:b0:eb:3d:4b:23:0c:
         af:50:ea:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtAKNI2uNCBpuHaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NDdlNmQyZWQtYWZiYy00YTM2LTg0M2ItNmM5NjUzZDFjNDQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOjRO/C+5lnssCpwUa84EzR880o5L7OKM/6f
0XzcHLCaiBtkHXNX6cgcvvb+BOvzfAefIPwltPdvXTjdHVW9u6ZpSQOb7KQ71Zh0
r0tDsImyGRsx5S3m/jT4e3sVOsoamNaquuyvxSABdNEQgv4W8Pi4nLyK+sGPF+z0
QTNDS+zxl5rVKY+qr5sczvWFpkg3W16gbGGaCmGitbFTCJxmgnShM/PLKNW0W5mc
amcDjB2P2Y3Vo6NYxB975XMzliBHfqDEWSPzHskfLStIhekRSMlnPWOnhNaHAM1i
HJRLBJ/tecikp8AEkJPUtd6kGDIcRxKxMWYZj50VqrJCkRGTDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAH9euh5NuNzwXvVeKBGF6DQa/KDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjUzNjE3NjEtMjdjNy0z
NDNlLThhY2QtZTVjZGVhYjM2MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuvVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiWZzjvCS2zyelS7npB0x77BTgoMi2hkcX59ZM63qOPjTXSNaoLL67Y
AVoFoEC+iRjQjPHqNk8vfZQh5QiTGLHso86w8oR4WBJAM76GvNJV6Lh4Lg8j4mZV
WQ/VIxtSSqbx4nl+ZrPHsY/wuY53qMV4LsFTj49kXO7rGTEHbiSsDQWAI7l+Onxo
ReO9VrMxKXrJzIAWKOtuIdYy97pm4eEshdOJU2JOvbx1FmEJJWnbhnBtaJCg4Kog
/zJvZs3C5hDhvTsx9EN+jwyTzy4dIYSP1ZhzizM7cJj7Dp+O8XOF2A/EVCJ10bWz
NWwdSGHmuCs/xXoqDrDrPUsjDK9Q6lw=
-----END CERTIFICATE-----
Generated at Sat May 18 15:26:54 2024 by rpki-client on console-fra.rpki-client.org