Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4296fa5-536f-3972-ae9a-d7fc15691e97.roa
File:                     e4296fa5-536f-3972-ae9a-d7fc15691e97.roa (raw, json)
Hash identifier:          Bg3IJIm/7OeQM0PeNc4Gk4EpKmtazKO7uj57roJKCx4=
Subject key identifier:   93:3F:8E:31:A3:68:2B:CD:8B:4A:C1:9E:28:D7:05:D3:80:03:B9:AA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E39C9DB3196206FF49900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4296fa5-536f-3972-ae9a-d7fc15691e97.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        47.55.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:39:c9:db:31:96:20:6f:f4:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=7da7fa71-b406-4b01-bf3f-c8183f5a76c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:be:18:69:b2:98:c4:74:a7:fb:5b:a5:01:9f:
                    c0:ed:1b:c5:36:9b:5b:c4:11:c5:f4:d0:37:78:17:
                    93:79:e3:c5:29:c8:29:76:52:63:ce:98:53:8b:9b:
                    90:57:21:38:f5:04:1c:b6:cb:6c:9e:7a:04:0c:96:
                    48:00:9d:4e:30:02:2a:2c:79:c0:65:cc:93:b4:3c:
                    dc:70:ba:07:e4:47:aa:31:85:a7:f8:e8:60:c4:d5:
                    8e:90:21:c0:75:58:bb:3c:34:33:70:9a:15:46:8a:
                    03:53:c9:cf:51:c2:54:d7:04:f3:3a:42:91:0b:61:
                    c3:55:18:e2:c4:ef:f0:5d:b0:88:bb:ce:66:27:34:
                    43:d7:b2:70:a5:09:b1:5e:be:00:d2:23:0d:53:9c:
                    28:7d:c6:1a:1d:85:09:a6:73:b2:82:8a:94:6b:f3:
                    ec:29:88:33:b2:cb:5b:55:1d:23:d4:ea:97:fb:5b:
                    53:4b:e4:45:24:72:dd:51:61:1f:55:13:42:2f:05:
                    b8:86:80:d9:39:84:1a:b2:da:09:b4:1c:44:ce:a4:
                    a2:00:5b:2d:d2:f8:37:18:1a:d7:50:37:26:b6:bd:
                    a0:fa:c9:f5:05:80:f1:ff:3c:90:ff:34:f6:8f:05:
                    69:e8:b4:7f:d6:8b:98:b4:1d:2b:3d:8b:ba:58:18:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3F:8E:31:A3:68:2B:CD:8B:4A:C1:9E:28:D7:05:D3:80:03:B9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4296fa5-536f-3972-ae9a-d7fc15691e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:5b:7b:ec:dd:51:a6:90:86:6e:c5:87:aa:05:30:0b:1a:
         19:89:5f:1a:68:02:c6:07:6a:ba:c6:c3:44:85:a6:25:a4:d5:
         03:a1:3f:e4:0b:12:7a:74:a5:64:35:c6:b9:e5:0f:54:f5:fb:
         ef:2f:18:45:b4:68:86:75:f0:77:fc:e0:1f:c1:4e:ae:25:fa:
         32:09:d8:e5:db:29:63:3d:68:65:cb:45:78:57:db:8e:bc:d0:
         a2:86:d0:f2:0e:a8:5c:95:ba:7a:68:33:9e:c9:68:e0:8c:2e:
         e7:85:b1:b4:04:9c:81:fc:5f:98:3a:da:42:49:86:8a:56:59:
         7f:4c:61:04:b5:31:b8:e8:1e:64:a1:e2:c3:18:e6:96:3f:79:
         91:5e:85:7d:e9:e1:b8:15:83:51:24:7e:3c:df:f0:bd:ac:4f:
         2b:87:8d:35:8f:c6:54:ea:13:87:56:f4:71:fd:f2:41:2e:c5:
         dc:10:dd:57:ee:51:06:1f:52:07:d7:66:71:37:32:19:92:72:
         1d:41:13:e5:ac:73:ce:25:b8:7b:9f:6b:be:00:f3:c3:ab:71:
         3d:57:9f:4d:d9:4a:9d:db:28:67:70:0d:ec:48:7e:46:21:fd:
         ad:f7:9f:a8:ad:cf:22:f0:50:21:0d:9a:39:a3:97:b2:0a:db:
         ba:3d:91:f4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcrDjnJ2zGWIG/0mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
N2RhN2ZhNzEtYjQwNi00YjAxLWJmM2YtYzgxODNmNWE3NmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL4YabKYxHSn+1ulAZ/A7RvFNptbxBHF9NA3
eBeTeePFKcgpdlJjzphTi5uQVyE49QQctstsnnoEDJZIAJ1OMAIqLHnAZcyTtDzc
cLoH5EeqMYWn+OhgxNWOkCHAdVi7PDQzcJoVRooDU8nPUcJU1wTzOkKRC2HDVRji
xO/wXbCIu85mJzRD17JwpQmxXr4A0iMNU5wofcYaHYUJpnOygoqUa/PsKYgzsstb
VR0j1OqX+1tTS+RFJHLdUWEfVRNCLwW4hoDZOYQastoJtBxEzqSiAFst0vg3GBrX
UDcmtr2g+sn1BYDx/zyQ/zT2jwVp6LR/1ouYtB0rPYu6WBhAUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJM/jjGjaCvNi0rBnijXBdOAA7mqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTQyOTZmYTUtNTM2Zi0z
OTcyLWFlOWEtZDdmYzE1NjkxZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALzcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALvdbe+zdUaaQhm7Fh6oFMAsaGYlfGmgCxgdqusbDRIWmJaTVA6E/5AsS
enSlZDXGueUPVPX77y8YRbRohnXwd/zgH8FOriX6MgnY5dspYz1oZctFeFfbjrzQ
oobQ8g6oXJW6emgznslo4Iwu54WxtAScgfxfmDraQkmGilZZf0xhBLUxuOgeZKHi
wxjmlj95kV6FfenhuBWDUSR+PN/wvaxPK4eNNY/GVOoTh1b0cf3yQS7F3BDdV+5R
Bh9SB9dmcTcyGZJyHUET5axzziW4e59rvgDzw6txPVefTdlKndsoZ3AN7Eh+RiH9
rfefqK3PIvBQIQ2aOaOXsgrbuj2R9A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org