Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4cd7a76-bcdc-39ca-ac6c-1b19ef1da1d9.roa
File:                     e4cd7a76-bcdc-39ca-ac6c-1b19ef1da1d9.roa (raw, json)
Hash identifier:          BxFxCJsY2WB/S3BAK69uictWvdeDggwaP0AXwndnm3E=
Subject key identifier:   64:AA:48:30:1E:FB:AD:17:F1:5A:02:7D:65:31:6D:77:29:92:CC:7C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11108055970B750EE38C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4cd7a76-bcdc-39ca-ac6c-1b19ef1da1d9.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     855
IP address blocks:        47.54.0.0/16 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Oct 2023 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:10:80:55:97:0b:75:0e:e3:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=17bd86f2-bf9c-44d7-b1e4-03431b303d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:7e:a5:1a:e2:48:83:e1:60:e8:3f:14:6c:
                    0c:63:20:48:21:cc:f3:99:86:3d:ad:fc:1b:f2:a8:
                    b8:ea:08:cf:08:f1:52:3a:16:ff:e3:7f:b5:18:a7:
                    72:b3:72:b2:5b:54:0c:47:15:46:e9:cf:f3:1a:92:
                    6b:64:29:fb:08:3e:9c:dd:02:b4:81:37:d7:57:d1:
                    1e:76:35:7f:dc:b3:09:60:ea:49:26:62:96:6f:71:
                    40:b9:d0:c4:d3:5d:4f:3f:5f:78:1e:be:f8:96:6e:
                    33:3a:f4:90:cc:4d:8e:a8:f9:54:94:56:f8:93:df:
                    b2:87:80:38:a6:ba:ca:4d:0e:09:63:3f:bc:0a:d7:
                    09:3a:e7:f3:32:47:d3:54:de:0e:81:7e:b2:7d:a8:
                    11:f7:87:c3:a0:e1:23:1a:43:c1:96:5e:86:c0:9e:
                    24:ab:aa:88:c3:63:55:74:72:87:3a:38:a5:02:43:
                    c2:36:c7:49:d2:69:d9:a8:c3:08:16:6c:66:e5:88:
                    ee:b4:d5:ed:7f:2b:39:cb:a0:4a:dc:42:bf:08:ae:
                    fa:f1:be:34:f5:95:2d:e8:d0:ef:55:75:bf:8b:a0:
                    67:03:97:9f:6d:7e:c5:2a:d3:a5:74:b0:07:02:d5:
                    29:c3:4c:30:c4:05:a0:cc:24:61:e6:c8:ab:15:66:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AA:48:30:1E:FB:AD:17:F1:5A:02:7D:65:31:6D:77:29:92:CC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e4cd7a76-bcdc-39ca-ac6c-1b19ef1da1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:de:00:9b:0a:e0:ca:8a:f0:66:c2:60:46:f6:4c:70:8c:cb:
         80:b0:44:e6:92:4e:3e:5d:7d:e4:d3:ca:24:4a:4a:e8:0a:ce:
         86:50:26:dc:25:b9:74:4c:5b:6c:bb:4f:55:6f:ee:20:cb:79:
         a1:02:c9:0e:bb:a5:76:c3:eb:f4:99:93:11:41:5d:ca:7c:7d:
         b0:5a:43:55:4a:78:54:4b:9c:a4:07:61:0f:ac:20:53:8e:2a:
         cc:f0:ad:35:22:70:4b:6b:48:41:b0:e8:57:ad:b5:83:3d:bc:
         7b:dd:b2:2f:a2:17:34:03:5b:25:19:d7:ff:bf:26:fd:db:fb:
         a4:9e:f8:ad:ab:ba:2c:e8:be:9e:cd:3d:eb:6d:eb:33:f8:63:
         a8:35:d2:f6:8f:77:18:54:bf:5a:48:d7:ca:f9:ca:9f:fa:12:
         6e:4a:f4:d5:56:62:7b:d6:b7:28:60:f9:80:d1:db:46:73:7c:
         23:5c:15:06:2a:62:6f:a4:1c:91:31:2f:cb:82:fe:1b:45:e2:
         da:59:6c:91:3a:28:21:d4:f0:ea:8f:70:35:0e:45:68:ff:28:
         ea:e5:ed:4c:80:16:69:37:fb:7a:08:61:40:00:65:d7:66:af:
         d6:98:71:e0:bf:c1:3e:d8:d0:72:20:5a:ec:ce:7a:ce:58:01:
         a1:3f:d3:ba
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEKqERCAVZcLdQ7jjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMDcyNDEyMDAwMFoXDTIzMTAyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MTdiZDg2ZjItYmY5Yy00NGQ3LWIxZTQtMDM0MzFiMzAzZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56h+pRriSIPhYOg/FGwMYyBIIczzmYY9rfwb
8qi46gjPCPFSOhb/43+1GKdys3KyW1QMRxVG6c/zGpJrZCn7CD6c3QK0gTfXV9Ee
djV/3LMJYOpJJmKWb3FAudDE011PP194Hr74lm4zOvSQzE2OqPlUlFb4k9+yh4A4
prrKTQ4JYz+8CtcJOufzMkfTVN4OgX6yfagR94fDoOEjGkPBll6GwJ4kq6qIw2NV
dHKHOjilAkPCNsdJ0mnZqMMIFmxm5YjutNXtfys5y6BK3EK/CK768b409ZUt6NDv
VXW/i6BnA5efbX7FKtOldLAHAtUpw0wwxAWgzCRh5sirFWbFuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGSqSDAe+60X8VoCfWUxbXcpksx8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTRjZDdhNzYtYmNkYy0z
OWNhLWFjNmMtMWIxOWVmMWRhMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMALzYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACt4AmwrgyorwZsJgRvZMcIzLgLBE5pJOPl195NPKJEpK6ArOhlAm3CW5
dExbbLtPVW/uIMt5oQLJDruldsPr9JmTEUFdynx9sFpDVUp4VEucpAdhD6wgU44q
zPCtNSJwS2tIQbDoV621gz28e92yL6IXNANbJRnX/78m/dv7pJ74rau6LOi+ns09
623rM/hjqDXS9o93GFS/WkjXyvnKn/oSbkr01VZie9a3KGD5gNHbRnN8I1wVBipi
b6QckTEvy4L+G0Xi2llskTooIdTw6o9wNQ5FaP8o6uXtTIAWaTf7eghhQABl12av
1phx4L/BPtjQciBa7M56zlgBoT/Tug==
-----END CERTIFICATE-----
Generated at Tue Oct 24 03:59:02 2023 by rpki-client on console-fra.rpki-client.org