Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8724435-56e5-33f6-a0ae-a0ec2bb89fdd.roa
File:                     d8724435-56e5-33f6-a0ae-a0ec2bb89fdd.roa (raw, json)
Hash identifier:          LYYH64rvuRL99lPPys2/V+/TEHG93p2xAckrH1eRCc4=
Subject key identifier:   09:C7:2C:04:0F:03:D0:C3:8D:50:A0:C0:98:42:7F:47:7C:4F:DB:37
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B465B5923DE860B932CBA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8724435-56e5-33f6-a0ae-a0ec2bb89fdd.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        204.101.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:65:b5:92:3d:e8:60:b9:32:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=5a544511-e182-4cf6-9d8e-ebdf5077b3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:89:a4:78:34:c8:60:1b:91:11:b9:5f:18:
                    70:3c:04:6c:eb:0c:7c:a7:74:f2:67:54:bf:cd:93:
                    33:d6:c3:9a:5f:59:3d:eb:a7:75:9e:12:38:28:13:
                    c5:da:4e:d9:be:3c:32:a4:94:7b:7b:a1:2e:1c:d3:
                    ea:50:90:09:47:c7:b5:f5:d0:79:c9:27:0e:d1:67:
                    90:6d:33:42:d5:08:fd:82:e3:32:55:1e:5a:3c:b1:
                    2a:6c:7b:77:6c:0a:4a:80:8c:bc:0d:f4:6b:4e:a9:
                    85:c8:19:37:35:92:65:b0:e1:af:55:99:0f:05:32:
                    57:dd:1f:c4:b5:12:c5:82:f0:b4:45:9a:39:46:81:
                    9b:96:24:fd:f5:82:cc:12:55:fd:59:5d:b7:f9:82:
                    04:c6:98:e6:e3:ba:c6:d4:49:e9:2b:1a:0b:41:cf:
                    82:45:0a:4d:af:24:ac:44:fa:60:78:1f:f1:a3:a9:
                    50:0d:d4:3c:ec:ec:ac:55:e8:a6:1d:5d:47:0d:4b:
                    af:f8:7a:0b:bf:ac:b0:0c:47:ae:c4:a5:30:c4:e7:
                    14:f5:d8:ee:67:79:77:2d:ee:ab:df:8e:7a:09:85:
                    97:a1:d1:7d:0a:55:29:e3:c2:29:56:ed:1b:c0:11:
                    2d:56:0d:35:93:45:c4:c3:74:f1:1b:84:2e:a7:9b:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:2C:04:0F:03:D0:C3:8D:50:A0:C0:98:42:7F:47:7C:4F:DB:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d8724435-56e5-33f6-a0ae-a0ec2bb89fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:42:ab:71:3a:24:34:91:f2:f0:dc:1f:d8:ef:fe:31:66:8e:
         ae:20:42:d7:bd:be:e7:73:a8:9d:56:ed:29:12:10:4e:a6:24:
         61:de:54:21:a4:a2:7d:6e:60:5f:5c:b5:d0:fd:77:ab:c8:b4:
         c4:58:ca:3c:a4:cb:51:e4:df:66:22:89:1b:e1:e6:e6:ba:d0:
         63:5a:aa:6d:22:d0:9b:6d:20:a9:76:b1:f6:be:d5:d5:c0:d0:
         da:1b:7e:9c:d8:d4:7e:c2:72:17:48:bf:26:89:cb:f0:1b:d3:
         60:9c:1c:18:9d:97:ef:bb:8b:24:1e:d3:12:a8:d7:1f:92:b2:
         40:94:ec:df:9c:55:7c:88:c0:05:49:4b:72:8e:2d:e7:db:a2:
         32:0b:ff:ad:29:50:b3:9e:ae:30:12:ac:2f:1c:fe:c7:a8:7d:
         3d:96:d5:fa:81:43:35:19:78:5f:1b:08:f5:07:2a:9a:1e:d7:
         0d:27:b4:19:d6:70:04:f4:d9:d7:61:f8:23:94:0d:b6:97:3d:
         1d:f8:31:74:cd:88:ac:50:6e:24:b7:d8:05:61:47:dd:9c:ac:
         b8:bd:b4:96:4c:08:b6:e8:c0:6a:5c:e7:9b:69:03:88:81:d6:
         41:e6:4b:c3:4f:73:fc:0f:5d:3b:58:4a:f5:9a:2e:5c:5e:8b:
         51:36:7c:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVWtGW1kj3oYLkyy6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NWE1NDQ1MTEtZTE4Mi00Y2Y2LTlkOGUtZWJkZjUwNzdiM2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3mJpHg0yGAbkRG5XxhwPARs6wx8p3TyZ1S/
zZMz1sOaX1k966d1nhI4KBPF2k7ZvjwypJR7e6EuHNPqUJAJR8e19dB5yScO0WeQ
bTNC1Qj9guMyVR5aPLEqbHt3bApKgIy8DfRrTqmFyBk3NZJlsOGvVZkPBTJX3R/E
tRLFgvC0RZo5RoGbliT99YLMElX9WV23+YIExpjm47rG1EnpKxoLQc+CRQpNrySs
RPpgeB/xo6lQDdQ87OysVeimHV1HDUuv+HoLv6ywDEeuxKUwxOcU9djuZ3l3Le6r
3456CYWXodF9ClUp48IpVu0bwBEtVg01k0XEw3TxG4Qup5ts5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnHLAQPA9DDjVCgwJhCf0d8T9s3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZDg3MjQ0MzUtNTZlNS0z
M2Y2LWEwYWUtYTBlYzJiYjg5ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtCq3E6JDSR8vDcH9jv/jFmjq4gQte9vudzqJ1W7SkSEE6mJGHeVCGk
on1uYF9ctdD9d6vItMRYyjyky1Hk32YiiRvh5ua60GNaqm0i0JttIKl2sfa+1dXA
0NobfpzY1H7CchdIvyaJy/Ab02CcHBidl++7iyQe0xKo1x+SskCU7N+cVXyIwAVJ
S3KOLefbojIL/60pULOerjASrC8c/seofT2W1fqBQzUZeF8bCPUHKpoe1w0ntBnW
cAT02ddh+COUDbaXPR34MXTNiKxQbiS32AVhR92crLi9tJZMCLbowGpc55tpA4iB
1kHmS8NPc/wPXTtYSvWaLlxei1E2fLY=
-----END CERTIFICATE-----
Generated at Fri May 17 01:48:01 2024 by rpki-client on console-fra.rpki-client.org