Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e20443bf-bd1a-3613-b791-a2a99560a1b9.roa
File:                     e20443bf-bd1a-3613-b791-a2a99560a1b9.roa (raw, json)
Hash identifier:          NrrUbjkYJLRPfW7qH890tHOxZbDch0r2zVvve31TlfM=
Subject key identifier:   99:82:28:14:D6:2B:58:51:BE:C1:97:62:58:C4:00:3B:C2:A8:F1:B6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0F564107413AAA19607100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e20443bf-bd1a-3613-b791-a2a99560a1b9.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.148.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:56:41:07:41:3a:aa:19:60:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=32b2b261-9227-4a72-bfa1-e869db658467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:0b:98:fd:67:46:6e:cd:70:44:52:6f:4a:
                    f4:40:98:51:6e:4c:df:df:fb:5a:2c:93:f3:29:64:
                    0f:bc:e0:a4:29:0c:96:d3:42:22:20:2a:02:8e:e4:
                    ef:cf:a8:57:c3:3a:3e:b8:68:ff:f1:84:90:17:76:
                    85:9a:34:60:fc:2f:c4:75:36:e9:cc:be:f0:af:01:
                    11:7d:e5:69:14:22:98:59:d4:2a:54:d0:cc:6d:76:
                    ad:4f:0e:7a:19:ef:fd:f6:97:bf:ac:04:e1:b2:63:
                    ac:a0:00:c8:eb:b0:12:bf:cb:5a:23:93:02:33:52:
                    23:44:18:39:76:92:06:1d:81:21:30:1d:c4:ba:cc:
                    6a:31:d5:36:2a:c9:4b:71:07:b4:d7:71:e3:6b:12:
                    b6:c9:04:a7:fe:05:6f:4d:ca:32:be:2e:e4:4d:e8:
                    11:05:18:01:9f:32:a2:87:7d:6f:28:2d:52:89:14:
                    a1:06:9a:30:30:cd:a9:f8:ea:98:f6:d0:8b:ae:c4:
                    7d:aa:85:d1:ce:06:ee:6b:24:d0:4f:f1:a7:28:22:
                    6f:24:54:4d:ce:2f:47:28:4c:c5:b7:5f:dd:f0:b3:
                    70:6b:c8:8a:15:cf:23:f2:82:11:97:0f:5f:11:b1:
                    aa:4c:4a:30:12:09:50:9d:ca:30:a0:d0:12:c6:2e:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:82:28:14:D6:2B:58:51:BE:C1:97:62:58:C4:00:3B:C2:A8:F1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e20443bf-bd1a-3613-b791-a2a99560a1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:f5:0f:d7:fc:ef:1d:1d:c0:6c:2c:71:9d:3f:53:8e:79:
         bc:e4:c8:d1:ec:1e:1a:6d:7a:ea:45:db:f1:20:2e:27:89:ad:
         a4:e1:d1:99:5b:6a:5a:cb:78:42:6a:aa:2d:3c:98:a3:10:6f:
         55:68:f2:f1:6f:01:c8:7e:52:b9:71:4d:f9:18:0f:18:f2:e4:
         44:f4:5f:ac:36:ab:9e:8d:dd:f5:c9:33:f5:0f:bc:9d:7c:8f:
         0a:9d:d7:de:7b:2b:5b:f7:6e:81:89:1a:6e:85:9c:d4:ab:b1:
         39:6b:56:40:ed:9e:2a:2d:e4:91:3b:23:54:c7:64:fc:27:7f:
         e3:d3:81:b2:89:ca:ae:50:8b:09:aa:48:81:4e:a4:74:b5:d0:
         6f:f3:31:31:7a:b1:49:70:77:bd:fe:d2:f2:59:e1:bf:53:87:
         a1:5b:dd:13:a6:2d:ec:9d:c1:af:2d:a5:f3:da:24:69:0c:fb:
         f8:48:fd:b0:b5:59:c1:01:c1:ab:e0:0f:ff:63:27:49:d8:6c:
         a2:54:61:74:c7:fb:e4:b1:0f:9f:e8:e2:44:84:88:ef:d1:68:
         0b:68:bb:6d:57:18:ed:59:0d:29:2e:33:10:c9:3a:bc:a2:e0:
         b9:3f:50:be:b6:c5:66:b2:68:c8:e0:25:a9:e8:2e:c5:c7:70:
         aa:f4:04:34
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcrD1ZBB0E6qhlgcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MzJiMmIyNjEtOTIyNy00YTcyLWJmYTEtZTg2OWRiNjU4NDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXILmP1nRm7NcERSb0r0QJhRbkzf3/taLJPz
KWQPvOCkKQyW00IiICoCjuTvz6hXwzo+uGj/8YSQF3aFmjRg/C/EdTbpzL7wrwER
feVpFCKYWdQqVNDMbXatTw56Ge/99pe/rAThsmOsoADI67ASv8taI5MCM1IjRBg5
dpIGHYEhMB3EusxqMdU2KslLcQe013HjaxK2yQSn/gVvTcoyvi7kTegRBRgBnzKi
h31vKC1SiRShBpowMM2p+OqY9tCLrsR9qoXRzgbuayTQT/GnKCJvJFRNzi9HKEzF
t1/d8LNwa8iKFc8j8oIRlw9fEbGqTEowEglQncowoNASxi5jwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJmCKBTWK1hRvsGXYljEADvCqPG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTIwNDQzYmYtYmQxYS0z
NjEzLWI3OTEtYTJhOTk1NjBhMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAuJQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACOr1D9f87x0dwGwscZ0/U455vOTI0eweGm166kXb8SAuJ4mtpOHRmVtq
Wst4QmqqLTyYoxBvVWjy8W8ByH5SuXFN+RgPGPLkRPRfrDarno3d9ckz9Q+8nXyP
Cp3X3nsrW/dugYkaboWc1KuxOWtWQO2eKi3kkTsjVMdk/Cd/49OBsonKrlCLCapI
gU6kdLXQb/MxMXqxSXB3vf7S8lnhv1OHoVvdE6Yt7J3Bry2l89okaQz7+Ej9sLVZ
wQHBq+AP/2MnSdhsolRhdMf75LEPn+jiRISI79FoC2i7bVcY7VkNKS4zEMk6vKLg
uT9QvrbFZrJoyOAlqeguxcdwqvQENA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org