Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de581767-0351-316d-9a90-7bfeb329a7cf.roa
File:                     de581767-0351-316d-9a90-7bfeb329a7cf.roa (raw, json)
Hash identifier:          /SD90W5NRRsVWN250Q5hYuN0U5fQAd7YP9es/W/HLG8=
Subject key identifier:   04:4F:6F:81:7A:4D:C9:DB:F8:E5:F3:73:0E:20:FC:2A:49:84:3A:6C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FB199A04F370960DF6080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de581767-0351-316d-9a90-7bfeb329a7cf.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        199.243.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:b1:99:a0:4f:37:09:60:df:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=4a3bb48a-45ef-418a-990f-679e93ed3c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fa:a6:8e:e0:71:e9:f6:00:5d:c0:de:eb:b4:
                    9e:c5:42:d9:d3:8d:21:0c:9c:bb:91:c1:ff:a1:c9:
                    1f:fa:af:9e:f1:3f:29:24:6f:d7:b0:5b:78:7c:64:
                    36:5c:3a:1c:a3:d2:39:24:b1:1e:53:d6:f3:a0:a2:
                    71:45:d3:fa:12:20:d0:08:32:3b:bb:31:26:a5:f5:
                    00:45:7a:5c:89:68:43:06:3f:66:5f:af:2e:61:26:
                    3f:f7:45:e0:f1:b1:46:7d:9c:29:bf:25:f5:3c:9d:
                    28:f7:d6:8d:62:b1:03:93:ed:97:96:7c:b4:05:35:
                    93:0d:2a:27:ab:6a:b3:d2:44:fd:af:0a:f3:90:58:
                    e2:4c:3a:bf:dc:79:86:3e:a5:6e:81:40:78:22:ac:
                    86:a5:1b:a3:4e:6b:0e:be:bb:80:36:42:0d:6c:5b:
                    fe:2a:82:57:3f:8d:62:c2:d6:be:a8:83:c5:8f:31:
                    a2:b7:28:1a:94:82:3b:ec:91:f8:bd:03:50:14:cd:
                    5d:fb:30:92:2d:15:9e:98:ba:33:64:ef:28:a0:cb:
                    c9:e1:a6:32:1f:21:39:5e:9b:43:28:12:8e:42:3d:
                    3c:aa:2e:1a:2c:97:a8:3d:e8:fb:09:41:e0:d2:63:
                    bc:8e:2a:7e:3e:0b:ab:ce:c9:34:13:20:23:31:f3:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4F:6F:81:7A:4D:C9:DB:F8:E5:F3:73:0E:20:FC:2A:49:84:3A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de581767-0351-316d-9a90-7bfeb329a7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:20:df:24:17:d5:c7:ad:a9:40:13:cd:c7:ce:f8:88:96:
         57:99:6c:c8:b6:26:f8:85:db:d4:b3:c3:68:d9:b8:53:4e:74:
         4f:76:45:fa:f9:db:8a:b5:40:49:55:fb:6f:16:57:d5:d1:b8:
         43:c1:9f:9e:67:76:13:ca:f5:8a:7a:11:39:8e:ec:d5:92:42:
         dd:e4:1c:6e:9c:3d:52:5d:9f:d0:99:e3:c4:61:f6:d8:6b:2a:
         8c:b7:78:be:eb:58:e3:e6:4b:10:92:36:2e:84:2a:3c:48:17:
         25:9c:da:5c:18:10:c7:bf:1d:54:bc:74:66:a0:0e:62:82:b9:
         97:d7:1e:77:c9:cd:2a:e0:69:fb:b1:08:03:7e:ba:8f:85:73:
         f3:0c:6a:82:b8:cb:0f:4f:1a:8a:69:7c:ce:dc:bc:72:40:50:
         7f:28:e6:a1:31:96:81:a0:86:93:cb:79:60:8f:8a:59:42:53:
         3f:9f:d8:4e:08:12:dd:72:53:92:80:f2:09:e5:35:9f:6c:45:
         1b:c9:cd:7c:ed:8d:f7:b5:6e:29:a8:03:15:9b:8c:31:3d:93:
         3f:5f:3c:e7:e8:18:8e:b5:01:a5:80:5f:ef:da:a6:c0:63:a9:
         fe:21:ae:08:fc:1d:b3:a9:db:2f:e0:6b:30:67:56:66:10:8b:
         12:d6:e1:26
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcrD7GZoE83CWDfYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
NGEzYmI0OGEtNDVlZi00MThhLTk5MGYtNjc5ZTkzZWQzYzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfqmjuBx6fYAXcDe67SexULZ040hDJy7kcH/
ockf+q+e8T8pJG/XsFt4fGQ2XDoco9I5JLEeU9bzoKJxRdP6EiDQCDI7uzEmpfUA
RXpciWhDBj9mX68uYSY/90Xg8bFGfZwpvyX1PJ0o99aNYrEDk+2Xlny0BTWTDSon
q2qz0kT9rwrzkFjiTDq/3HmGPqVugUB4IqyGpRujTmsOvruANkINbFv+KoJXP41i
wta+qIPFjzGitygalII77JH4vQNQFM1d+zCSLRWemLozZO8ooMvJ4aYyHyE5XptD
KBKOQj08qi4aLJeoPej7CUHg0mO8jip+Pgurzsk0EyAjMfODSQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFARPb4F6Tcnb+OXzcw4g/CpJhDpsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZGU1ODE3NjctMDM1MS0z
MTZkLTlhOTAtN2JmZWIzMjlhN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAx/MwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEcsg3yQX1cetqUATzcfO+IiWV5lsyLYm+IXb1LPDaNm4U050T3ZF+vnb
irVASVX7bxZX1dG4Q8Gfnmd2E8r1inoROY7s1ZJC3eQcbpw9Ul2f0JnjxGH22Gsq
jLd4vutY4+ZLEJI2LoQqPEgXJZzaXBgQx78dVLx0ZqAOYoK5l9ced8nNKuBp+7EI
A366j4Vz8wxqgrjLD08aiml8zty8ckBQfyjmoTGWgaCGk8t5YI+KWUJTP5/YTggS
3XJTkoDyCeU1n2xFG8nNfO2N97VuKagDFZuMMT2TP1885+gYjrUBpYBf79qmwGOp
/iGuCPwds6nbL+BrMGdWZhCLEtbhJg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:00 2024 by rpki-client on console-ams.rpki-client.org