Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3d08237-eb03-3f3d-970a-3684a7dcd37b.roa
File:                     d3d08237-eb03-3f3d-970a-3684a7dcd37b.roa (raw, json)
Hash identifier:          kYkMHm24GgXY4IjI6X6Vp/PxHkiMntQD7akoGCCfTCk=
Subject key identifier:   18:1B:E3:3F:6C:A1:7F:40:C5:A7:6D:82:2C:AF:C1:90:A3:42:54:FB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B107923CAC89C22C1FD22E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3d08237-eb03-3f3d-970a-3684a7dcd37b.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     40934
IP address blocks:        206.47.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:10:79:23:ca:c8:9c:22:c1:fd:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=137e7e25-6266-44f1-933c-6ad6c61717b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:b4:92:e2:1e:00:17:53:c5:37:ea:d9:6f:
                    cf:fa:ca:3b:a9:b4:f6:77:2a:e6:ff:3d:4c:f9:60:
                    9c:1b:81:40:39:82:3f:ae:34:7c:04:5b:9b:82:02:
                    38:a8:d9:3b:9e:e3:64:69:c3:69:77:18:71:6d:03:
                    e6:6a:c7:9f:69:20:d5:7d:d4:e6:09:2b:db:c8:40:
                    74:7e:6d:fb:3f:4a:d5:f2:02:b3:15:24:59:e0:55:
                    67:47:e4:8c:99:ed:b9:91:88:d2:2c:a8:9a:f4:7b:
                    90:5d:ae:82:ba:d1:09:63:62:a7:9c:ed:19:90:3d:
                    6f:d1:75:92:30:63:c5:ac:0e:ff:c8:53:ae:48:71:
                    9b:90:69:f8:a3:26:22:0d:43:30:84:6d:42:d5:0c:
                    4d:c2:f8:cb:d8:e4:93:42:0b:8e:7c:9e:8e:ff:85:
                    78:18:9a:39:a2:a4:ed:3a:fa:f6:30:cd:ac:9f:7e:
                    06:89:cf:ac:6a:66:01:dd:a3:26:b7:f7:52:7f:75:
                    c0:96:3c:15:69:64:50:7f:74:51:4e:93:d6:34:05:
                    b4:3f:f3:72:34:f3:38:28:a1:4f:5b:88:26:64:4a:
                    4e:a7:c6:e4:e6:2f:60:e2:ac:7c:5f:82:e5:30:88:
                    c1:82:98:6f:d2:92:32:0c:bc:58:df:8c:a9:d2:e9:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:E3:3F:6C:A1:7F:40:C5:A7:6D:82:2C:AF:C1:90:A3:42:54:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d3d08237-eb03-3f3d-970a-3684a7dcd37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:87:e1:98:53:3c:07:f2:92:65:c4:2d:a1:75:19:66:46:c3:
         44:d1:13:a6:82:3c:c5:ff:c6:df:92:29:ef:63:98:77:9f:32:
         8c:d0:87:b9:44:ee:d1:ff:88:d0:49:30:4b:f8:0c:f1:76:31:
         c0:1a:cc:07:0d:48:c6:75:d5:72:a4:31:d8:fd:f4:1f:b2:84:
         3a:85:c7:93:b2:ca:92:3d:bf:6d:d6:a0:91:77:7d:64:e0:a0:
         1f:04:e6:12:92:16:8e:4e:b8:ab:f0:2c:a6:e7:37:e6:23:e3:
         e4:03:12:04:ec:63:30:62:e4:62:2b:66:43:5d:7f:bb:d5:7b:
         fa:3f:d4:6d:c6:76:75:6e:a0:33:b6:99:eb:77:ba:87:37:c9:
         55:f1:28:ec:ef:45:cb:8b:81:82:14:51:0a:cf:03:86:fe:1c:
         bd:90:c3:20:a2:b4:66:00:1f:29:40:77:b1:ad:ae:65:31:60:
         44:89:ba:8c:c9:eb:33:84:cb:49:4f:8e:bd:9e:f0:d4:e1:31:
         f4:38:5d:07:31:95:cf:4d:86:50:50:7d:f9:f1:e6:d9:c6:25:
         24:33:aa:e7:6c:8e:73:5b:d8:54:f8:82:d6:4e:1c:27:d0:b3:
         43:53:3c:f6:68:1d:0d:0b:7e:b5:9c:99:7f:95:bf:69:b8:da:
         6c:e6:7d:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEHkjysicIsH9IuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MTM3ZTdlMjUtNjI2Ni00NGYxLTkzM2MtNmFkNmM2MTcxN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqi0kuIeABdTxTfq2W/P+so7qbT2dyrm/z1M
+WCcG4FAOYI/rjR8BFubggI4qNk7nuNkacNpdxhxbQPmasefaSDVfdTmCSvbyEB0
fm37P0rV8gKzFSRZ4FVnR+SMme25kYjSLKia9HuQXa6CutEJY2KnnO0ZkD1v0XWS
MGPFrA7/yFOuSHGbkGn4oyYiDUMwhG1C1QxNwvjL2OSTQguOfJ6O/4V4GJo5oqTt
Ovr2MM2sn34Gic+samYB3aMmt/dSf3XAljwVaWRQf3RRTpPWNAW0P/NyNPM4KKFP
W4gmZEpOp8bk5i9g4qx8X4LlMIjBgphv0pIyDLxY34yp0uk8rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgb4z9soX9AxadtgiyvwZCjQlT7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDNkMDgyMzctZWIwMy0z
ZjNkLTk3MGEtMzY4NGE3ZGNkMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi+EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECH4ZhTPAfykmXELaF1GWZGw0TRE6aCPMX/xt+SKe9jmHefMozQh7lE
7tH/iNBJMEv4DPF2McAazAcNSMZ11XKkMdj99B+yhDqFx5OyypI9v23WoJF3fWTg
oB8E5hKSFo5OuKvwLKbnN+Yj4+QDEgTsYzBi5GIrZkNdf7vVe/o/1G3GdnVuoDO2
met3uoc3yVXxKOzvRcuLgYIUUQrPA4b+HL2QwyCitGYAHylAd7GtrmUxYESJuozJ
6zOEy0lPjr2e8NThMfQ4XQcxlc9NhlBQffnx5tnGJSQzqudsjnNb2FT4gtZOHCfQ
s0NTPPZoHQ0LfrWcmX+Vv2m42mzmffs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org