Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee3c2ec4-4d4b-332b-bea6-a836109399ef.roa
File:                     ee3c2ec4-4d4b-332b-bea6-a836109399ef.roa (raw, json)
Hash identifier:          yaFWu0s57Gz8TmVlqCkVFx8VwkCZznYIaWAgOwhQMMM=
Subject key identifier:   A1:28:3A:68:F3:4B:AD:44:56:C6:41:14:13:D9:18:1E:CE:75:F1:0E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B3038CD170F1F274756E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee3c2ec4-4d4b-332b-bea6-a836109399ef.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        65.95.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:03:8c:d1:70:f1:f2:74:75:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=c7906376-77e1-4966-bf44-7c154848ac1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5a:a2:4f:82:23:f0:8c:22:36:01:84:56:9a:
                    6f:97:a9:ba:80:aa:e8:d7:00:23:e9:cd:b4:91:6b:
                    53:e8:59:86:cc:07:35:a0:28:02:1b:02:44:7e:12:
                    f9:d7:ff:38:24:39:b6:cd:9d:e8:b0:0b:66:cc:72:
                    41:1d:16:fb:84:61:5f:da:4d:15:74:21:5a:bb:f5:
                    b3:79:62:ab:97:7a:81:ef:f9:07:dc:9f:47:61:37:
                    17:c8:ef:28:67:02:0d:dc:02:5d:3a:54:44:7e:1d:
                    b0:94:88:01:b3:fc:f1:40:88:fb:a7:3b:6f:5b:99:
                    d8:28:6c:fd:75:f7:be:ea:60:4c:16:dc:c1:1a:7e:
                    43:ea:cf:9b:34:22:91:09:15:6c:fa:05:ac:ce:ae:
                    82:85:83:3c:f8:c7:51:07:21:31:a6:a4:85:ff:fa:
                    78:7d:68:5a:2b:77:d5:0a:50:2f:a2:32:3c:79:40:
                    92:68:8d:b9:f7:d6:0d:0a:25:d4:84:d5:47:ac:e5:
                    c4:e9:0b:58:88:07:f7:bc:f1:41:4d:a0:73:3e:11:
                    ad:df:57:c1:d4:f8:65:91:be:6d:a9:a0:08:f9:f1:
                    38:ad:43:1d:63:0c:3c:00:05:0d:da:ea:d6:cc:24:
                    6a:11:4b:76:d2:a7:e8:cc:d2:4b:4d:a7:52:cf:0c:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:28:3A:68:F3:4B:AD:44:56:C6:41:14:13:D9:18:1E:CE:75:F1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee3c2ec4-4d4b-332b-bea6-a836109399ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:17:cf:0a:77:05:1f:69:e9:b7:63:fc:4a:5d:5c:3e:80:
         82:44:eb:b6:e8:00:d2:91:92:cd:71:3c:01:f1:0d:7e:4d:6a:
         73:bc:c9:66:c1:d5:ce:15:f0:13:be:9c:6f:0c:ce:ed:09:93:
         e7:37:1f:75:f7:36:2c:86:76:2e:df:c1:3e:7f:0b:04:5f:7a:
         63:fb:30:95:7e:ab:20:b9:32:24:60:ce:9b:5a:21:77:a4:ef:
         35:55:f0:bc:6f:65:64:de:35:27:58:9b:7f:44:59:11:cf:b3:
         3e:b5:99:66:88:2d:2d:13:8e:e5:d9:59:21:b5:00:5a:58:fa:
         52:d3:b5:76:d6:2f:a9:89:80:18:43:03:7e:18:37:1a:f8:d0:
         35:36:43:30:fa:b8:b1:3b:47:36:69:7e:8a:8e:09:56:11:25:
         06:ab:88:c2:9d:cb:3b:41:62:be:d6:05:32:12:cc:c0:d5:ff:
         65:1f:9d:84:11:d8:c5:6b:73:7b:aa:d4:9a:58:24:f4:10:04:
         6f:c8:65:20:8f:59:86:74:68:ad:b5:e9:a1:cb:6d:f2:72:f1:
         a0:03:bd:86:31:ae:8a:4c:0d:30:2a:3b:2b:2a:90:04:67:9a:
         79:07:de:2e:ff:5f:54:19:e1:b0:52:4a:37:8b:2c:ff:bb:46:
         ef:9e:5a:be
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVWswOM0XDx8nR1bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDMyNTEyMDAwMFoXDTI0MDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
Yzc5MDYzNzYtNzdlMS00OTY2LWJmNDQtN2MxNTQ4NDhhYzFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglqiT4Ij8IwiNgGEVppvl6m6gKro1wAj6c20
kWtT6FmGzAc1oCgCGwJEfhL51/84JDm2zZ3osAtmzHJBHRb7hGFf2k0VdCFau/Wz
eWKrl3qB7/kH3J9HYTcXyO8oZwIN3AJdOlREfh2wlIgBs/zxQIj7pztvW5nYKGz9
dfe+6mBMFtzBGn5D6s+bNCKRCRVs+gWszq6ChYM8+MdRByExpqSF//p4fWhaK3fV
ClAvojI8eUCSaI2599YNCiXUhNVHrOXE6QtYiAf3vPFBTaBzPhGt31fB1Phlkb5t
qaAI+fE4rUMdYww8AAUN2urWzCRqEUt20qfozNJLTadSzwx1iwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKEoOmjzS61EVsZBFBPZGB7OdfEOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZWUzYzJlYzQtNGQ0Yi0z
MzJiLWJlYTYtYTgzNjEwOTM5OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQV8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJ8UXzwp3BR9p6bdj/EpdXD6AgkTrtugA0pGSzXE8AfENfk1qc7zJZsHV
zhXwE76cbwzO7QmT5zcfdfc2LIZ2Lt/BPn8LBF96Y/swlX6rILkyJGDOm1ohd6Tv
NVXwvG9lZN41J1ibf0RZEc+zPrWZZogtLROO5dlZIbUAWlj6UtO1dtYvqYmAGEMD
fhg3GvjQNTZDMPq4sTtHNml+io4JVhElBquIwp3LO0FivtYFMhLMwNX/ZR+dhBHY
xWtze6rUmlgk9BAEb8hlII9ZhnRorbXpoctt8nLxoAO9hjGuikwNMCo7KyqQBGea
eQfeLv9fVBnhsFJKN4ss/7tG755avg==
-----END CERTIFICATE-----
Generated at Sat May 18 01:32:38 2024 by rpki-client on console-fra.rpki-client.org