Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1ed6fad-142d-36d6-860a-17cbeb9fea95.roa
File:                     d1ed6fad-142d-36d6-860a-17cbeb9fea95.roa (raw, json)
Hash identifier:          12cEXs+UNdQQ95rmXXWcuaFL8sTMMN70LnPAmiu2Qvs=
Subject key identifier:   38:E7:23:DE:09:D7:F6:06:2C:6F:B9:40:4B:A9:CD:E4:3A:2D:4D:38
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11BA83CCAB785F90403300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1ed6fad-142d-36d6-860a-17cbeb9fea95.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        209.226.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:ba:83:cc:ab:78:5f:90:40:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=3e33ab14-da69-435b-a266-fc3a38d9bd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:e9:6d:4e:15:6e:1a:36:6c:78:7d:29:04:
                    47:54:8f:34:c8:51:20:66:ae:47:f7:9d:2d:d3:e6:
                    9d:d1:50:bd:8d:43:0f:6e:be:7f:07:1f:4a:b7:d5:
                    0c:18:26:a2:b8:76:9a:0a:eb:62:52:a0:b2:a1:f9:
                    d1:74:41:23:5e:41:f9:22:ae:69:e6:ca:25:1b:92:
                    e1:43:17:55:38:69:05:bf:7d:9a:1e:ab:3e:0e:b0:
                    37:aa:40:a8:36:b8:91:17:04:20:08:d7:8a:79:ed:
                    b3:6f:34:7b:8b:1a:dd:53:41:22:0a:58:64:bd:dc:
                    6d:d8:f6:57:c6:67:f9:c8:8c:bc:be:ca:52:63:c5:
                    16:81:26:a4:79:91:15:66:7e:e9:32:75:b7:ab:ef:
                    8b:65:72:79:3a:1e:5c:02:7e:9e:2e:3c:2b:c4:a1:
                    bf:9e:83:d7:91:0f:09:d8:fe:53:80:18:81:af:9f:
                    14:a4:bb:06:c3:26:e7:9a:ae:5d:12:fd:71:a9:07:
                    97:39:f4:53:6e:ba:25:66:71:58:32:f8:12:9c:4a:
                    f0:13:28:b3:24:34:00:a8:93:36:46:88:e1:71:08:
                    f2:6e:53:b3:23:8b:a1:72:a8:c3:44:9b:63:f0:1e:
                    d3:cd:4b:6f:2e:3d:b2:34:ff:c1:3b:7f:96:ec:0a:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:23:DE:09:D7:F6:06:2C:6F:B9:40:4B:A9:CD:E4:3A:2D:4D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1ed6fad-142d-36d6-860a-17cbeb9fea95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:95:42:58:7f:42:97:17:8b:b9:b9:60:f1:12:1c:f9:b0:
         26:4a:57:b1:94:6c:f5:dd:ed:04:e5:f8:95:18:d2:1b:54:e7:
         ef:9c:72:e8:60:2d:d7:23:43:29:0f:f6:18:b0:8d:91:35:3b:
         14:3e:4d:3e:59:93:f2:e3:ab:e8:9a:e8:61:96:56:9d:3a:ed:
         87:90:26:bc:99:4c:ef:b4:de:0a:93:54:fa:f7:2c:ec:71:5a:
         67:0d:4b:39:3a:77:24:a0:e6:5e:1e:ba:09:e9:53:60:10:31:
         bc:a7:bd:17:dd:09:e8:ca:06:30:4e:dc:b3:34:de:e4:09:2f:
         f1:49:2b:1c:e3:b7:7f:a8:86:03:fa:0b:8d:fc:ab:78:fe:0d:
         05:85:f9:08:62:10:fd:61:27:05:a6:1d:d4:aa:7d:79:a1:5f:
         4c:ce:77:e2:20:6a:df:c1:d2:2d:20:e2:b1:17:60:78:85:26:
         24:7b:7c:2c:da:47:df:07:0d:9f:64:0f:18:81:b1:dd:c5:83:
         62:e7:50:3d:84:54:22:cd:4b:11:20:e1:56:c0:45:03:6a:77:
         73:94:be:42:b7:a7:fd:43:4a:7e:a5:f4:a4:fe:c4:67:3c:76:
         b9:6b:4d:0e:5c:fe:fc:dc:94:87:f5:51:86:76:57:c3:2c:ef:
         30:71:c6:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEbqDzKt4X5BAMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
M2UzM2FiMTQtZGE2OS00MzViLWEyNjYtZmMzYTM4ZDliZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCnpbU4Vbho2bHh9KQRHVI80yFEgZq5H950t
0+ad0VC9jUMPbr5/Bx9Kt9UMGCaiuHaaCutiUqCyofnRdEEjXkH5Iq5p5solG5Lh
QxdVOGkFv32aHqs+DrA3qkCoNriRFwQgCNeKee2zbzR7ixrdU0EiClhkvdxt2PZX
xmf5yIy8vspSY8UWgSakeZEVZn7pMnW3q++LZXJ5Oh5cAn6eLjwrxKG/noPXkQ8J
2P5TgBiBr58UpLsGwybnmq5dEv1xqQeXOfRTbrolZnFYMvgSnErwEyizJDQAqJM2
RojhcQjyblOzI4uhcqjDRJtj8B7TzUtvLj2yNP/BO3+W7Ap56wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjnI94J1/YGLG+5QEupzeQ6LU04MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDFlZDZmYWQtMTQyZC0z
NmQ2LTg2MGEtMTdjYmViOWZlYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eIHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4glUJYf0KXF4u5uWDxEhz5sCZKV7GUbPXd7QTl+JUY0htU5++ccuhg
LdcjQykP9hiwjZE1OxQ+TT5Zk/Ljq+ia6GGWVp067YeQJryZTO+03gqTVPr3LOxx
WmcNSzk6dySg5l4eugnpU2AQMbynvRfdCejKBjBO3LM03uQJL/FJKxzjt3+ohgP6
C438q3j+DQWF+QhiEP1hJwWmHdSqfXmhX0zOd+Igat/B0i0g4rEXYHiFJiR7fCza
R98HDZ9kDxiBsd3Fg2LnUD2EVCLNSxEg4VbARQNqd3OUvkK3p/1DSn6l9KT+xGc8
drlrTQ5c/vzclIf1UYZ2V8Ms7zBxxtM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:11 2024 by rpki-client on console-fra.rpki-client.org