Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3f94e6-1d1f-3c1e-b938-42bdd61dfa9e.roa
File:                     cd3f94e6-1d1f-3c1e-b938-42bdd61dfa9e.roa (raw, json)
Hash identifier:          19muQV1CVd3A+kBn8d2isYUYjAPsP4DBJPbQckGydLc=
Subject key identifier:   82:D9:FB:62:24:1D:97:FB:A4:C4:D2:C6:AC:EA:BC:8F:C2:F5:13:DD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B12571E4CB786CE2C7789A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3f94e6-1d1f-3c1e-b938-42bdd61dfa9e.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:12:57:1e:4c:b7:86:ce:2c:77:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=11560c7b-4353-4c12-91c9-28adde62b4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:29:b6:b9:5f:8d:36:00:97:97:41:6a:1a:
                    46:a4:9b:73:bb:15:61:93:72:dc:e0:88:65:63:d1:
                    c6:01:a9:27:38:ea:fb:b2:7e:70:25:07:9d:67:6d:
                    9e:48:8e:1e:17:5f:a0:b7:c4:7c:45:12:07:5b:95:
                    b1:27:a4:ff:22:1a:f8:eb:6b:e7:80:f7:93:05:23:
                    83:76:10:eb:23:51:5b:cb:f9:55:95:7d:2a:4e:60:
                    98:ad:61:fe:6e:ef:d2:c8:db:cf:09:36:28:4b:2d:
                    54:b9:ae:ad:78:fe:14:53:8f:a6:dd:6e:41:b8:98:
                    45:e0:86:26:59:9c:69:47:b1:7f:de:95:dc:3e:ab:
                    e2:e6:47:88:bc:b8:c7:a1:3f:8e:43:86:e6:ec:1a:
                    dc:8e:1d:37:c4:5a:09:ee:87:32:76:5d:ad:d7:f8:
                    08:33:27:0f:df:20:30:0f:ac:42:fa:12:d7:e4:7a:
                    eb:c1:eb:79:06:44:d0:dd:3d:83:25:37:96:72:b0:
                    09:69:f1:77:ef:cf:e8:18:9f:98:75:de:ea:79:c3:
                    98:f1:47:98:8a:4a:5a:66:05:c8:3b:27:21:ad:d8:
                    64:54:c0:0b:d4:79:58:25:db:c8:46:40:6e:34:8f:
                    cb:5e:02:a4:0d:5c:7c:67:2a:42:ef:7c:64:96:bf:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D9:FB:62:24:1D:97:FB:A4:C4:D2:C6:AC:EA:BC:8F:C2:F5:13:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cd3f94e6-1d1f-3c1e-b938-42bdd61dfa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:94:0d:f6:a2:b6:ba:aa:24:c2:44:5f:20:eb:4b:26:82:fb:
         db:7e:4f:f0:31:9c:57:ec:39:30:a0:62:03:a5:d3:ad:7d:89:
         53:fd:e3:8c:ee:39:22:02:13:e3:3f:2b:0b:c4:f2:8e:81:43:
         2e:29:cc:83:4c:6c:36:1d:57:bd:19:a6:8d:1e:a9:de:bd:8c:
         e0:b2:9c:76:8c:59:19:5d:64:9b:67:7c:4d:a9:69:d0:e3:e6:
         a7:9f:14:49:e3:60:ce:46:7d:f1:cd:27:52:ad:3f:fd:dc:2c:
         1b:61:7d:68:73:78:d8:18:4a:eb:e6:03:65:14:96:fc:ba:79:
         be:a8:76:16:11:ce:7e:aa:de:22:25:02:61:7f:32:6a:b7:69:
         5c:fe:f7:ae:b8:23:2b:58:11:5b:a3:81:db:18:32:f0:14:ce:
         e0:2f:04:63:99:b1:57:8c:55:82:e8:f2:53:85:97:1f:a7:50:
         92:07:12:6d:e0:da:f6:b0:60:c9:6d:7a:dd:9a:81:a9:42:71:
         2a:5d:14:b3:53:db:11:c4:7c:f5:23:08:99:3a:09:c6:f7:8d:
         8c:c1:f8:15:2f:c3:b6:55:b3:65:59:ef:d6:32:ad:cb:27:b5:
         d9:36:c1:2f:fe:ec:9e:5c:b0:2d:4e:50:3e:5b:41:09:eb:6c:
         f8:b6:3f:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcrElceTLeGzix3iaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MTE1NjBjN2ItNDM1My00YzEyLTkxYzktMjhhZGRlNjJiNGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl48ptrlfjTYAl5dBahpGpJtzuxVhk3Lc4Ihl
Y9HGAaknOOr7sn5wJQedZ22eSI4eF1+gt8R8RRIHW5WxJ6T/Ihr462vngPeTBSOD
dhDrI1Fby/lVlX0qTmCYrWH+bu/SyNvPCTYoSy1Uua6teP4UU4+m3W5BuJhF4IYm
WZxpR7F/3pXcPqvi5keIvLjHoT+OQ4bm7Brcjh03xFoJ7ocydl2t1/gIMycP3yAw
D6xC+hLX5Hrrwet5BkTQ3T2DJTeWcrAJafF378/oGJ+Ydd7qecOY8UeYikpaZgXI
OychrdhkVMAL1HlYJdvIRkBuNI/LXgKkDVx8ZypC73xklr8NYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFILZ+2IkHZf7pMTSxqzqvI/C9RPdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvY2QzZjk0ZTYtMWQxZi0z
YzFlLWI5MzgtNDJiZGQ2MWRmYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEwCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFCUDfaitrqqJMJEXyDrSyaC+9t+T/AxnFfsOTCgYgOl0619iVP9
44zuOSICE+M/KwvE8o6BQy4pzINMbDYdV70Zpo0eqd69jOCynHaMWRldZJtnfE2p
adDj5qefFEnjYM5GffHNJ1KtP/3cLBthfWhzeNgYSuvmA2UUlvy6eb6odhYRzn6q
3iIlAmF/Mmq3aVz+9664IytYEVujgdsYMvAUzuAvBGOZsVeMVYLo8lOFlx+nUJIH
Em3g2vawYMltet2agalCcSpdFLNT2xHEfPUjCJk6Ccb3jYzB+BUvw7ZVs2VZ79Yy
rcsntdk2wS/+7J5csC1OUD5bQQnrbPi2Pxc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org