Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/0891eb5c-7046-3d14-addf-9f61e7c12cbb.roa
File:                     0891eb5c-7046-3d14-addf-9f61e7c12cbb.roa (raw, json)
Hash identifier:          7hSVt3eQZMKpl6vBjZa/G09YCmdaMgQnqGgK0FwMGJk=
Subject key identifier:   30:E6:44:6C:F3:08:3B:AE:0A:F3:9E:2F:6F:F8:5E:22:8E:53:53:E5
Certificate issuer:       /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial:       010D0C9F4328584742BB4488DCC1BD71E99610E0
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/0891eb5c-7046-3d14-addf-9f61e7c12cbb.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        161.38.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:44:88:dc:c1:bd:71:e9:96:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=c309b1d1-89ef-4b03-b51b-d9510343fcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:01:0e:0d:45:46:72:28:6d:3c:b4:7c:9b:
                    bc:2b:52:e2:cc:43:c0:3b:71:89:26:a3:36:11:75:
                    c8:90:7d:38:b4:e4:2f:ec:7f:93:25:e9:a6:66:ee:
                    98:29:99:1b:c9:7e:42:1a:90:e0:b3:6a:8d:3e:8f:
                    03:e0:05:5a:76:87:23:e1:56:53:a6:2d:21:bf:77:
                    89:d3:88:b9:6c:f9:7a:51:c6:46:fa:1a:6b:c3:0c:
                    64:d0:3a:6a:2f:89:2f:7e:df:03:a1:de:9d:7c:80:
                    1f:3f:da:2b:ff:34:95:0b:60:af:ca:2e:be:5d:58:
                    d3:25:b4:c4:de:f4:b0:e9:8e:0b:cc:7b:d1:cd:a4:
                    8f:16:a3:a9:12:a0:ea:ae:0e:e5:85:42:aa:a8:31:
                    5c:6c:65:2c:25:74:04:8c:aa:c5:a0:72:28:3a:3b:
                    bc:aa:64:7a:0b:7c:8c:28:cc:8e:a0:16:8d:c2:3b:
                    b3:4e:10:47:b3:06:e1:94:da:f9:eb:ed:8b:c0:98:
                    0c:ee:1f:0c:b6:a3:72:83:77:45:c3:81:ab:b3:96:
                    51:36:b6:07:a0:71:21:f9:2f:9d:f0:43:86:cf:2f:
                    99:ad:41:be:21:a0:c0:c6:bf:ba:f0:df:9d:f6:a7:
                    7b:26:2c:b8:ea:d6:da:1f:d8:2b:e6:8a:d6:29:a5:
                    19:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E6:44:6C:F3:08:3B:AE:0A:F3:9E:2F:6F:F8:5E:22:8E:53:53:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/0891eb5c-7046-3d14-addf-9f61e7c12cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cb:ce:d3:9d:2b:d9:32:e2:ea:0d:98:25:17:e2:5a:38:a5:
         69:f3:9a:58:5b:37:31:49:f0:5a:7e:83:3f:55:6a:84:94:8f:
         44:0c:3a:1e:a3:e1:b6:bd:cc:08:64:17:98:1a:e1:67:bc:0c:
         dc:25:c5:0f:32:1d:a2:ad:bc:a4:69:02:9e:69:6a:89:72:07:
         eb:2d:e4:6f:74:a6:86:3e:c0:ec:13:fa:25:e4:ea:8e:22:11:
         5a:e1:8d:2a:74:8c:c8:b0:10:0f:e5:ca:54:5b:de:9a:9f:09:
         8b:2e:d2:96:3a:95:5b:38:72:c5:35:cc:9b:a9:12:2e:69:f9:
         2a:1a:c1:7c:df:ab:3f:53:07:f7:a8:d4:df:d2:71:07:45:9c:
         c6:50:02:32:aa:32:07:01:62:ff:30:4a:d4:ca:8e:37:ed:96:
         bf:4f:b0:7f:69:ad:0e:f2:80:95:78:f7:30:35:85:6f:07:79:
         d2:5a:69:bf:9c:b8:7b:72:b9:51:38:cd:b2:51:36:70:10:a4:
         b0:79:04:48:27:c2:5a:92:e0:e8:9e:24:b0:b6:77:26:cb:40:
         4f:57:f0:88:7d:c0:dc:cb:b1:d4:6f:af:e8:f0:8a:bb:2f:41:
         ee:54:3f:09:62:9e:f8:e3:30:f1:c4:4a:e5:1e:6b:d3:92:c8:
         d5:2c:bf:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0SI3MG9cemWEOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3
OTI4MB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk
YzMwOWIxZDEtODllZi00YjAzLWI1MWItZDk1MTAzNDNmY2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV8BDg1FRnIobTy0fJu8K1LizEPAO3GJJqM2
EXXIkH04tOQv7H+TJemmZu6YKZkbyX5CGpDgs2qNPo8D4AVadocj4VZTpi0hv3eJ
04i5bPl6UcZG+hprwwxk0DpqL4kvft8Dod6dfIAfP9or/zSVC2Cvyi6+XVjTJbTE
3vSw6Y4LzHvRzaSPFqOpEqDqrg7lhUKqqDFcbGUsJXQEjKrFoHIoOju8qmR6C3yM
KMyOoBaNwjuzThBHswbhlNr56+2LwJgM7h8MtqNyg3dFw4Grs5ZRNrYHoHEh+S+d
8EOGzy+ZrUG+IaDAxr+68N+d9qd7Jiy46tbaH9gr5orWKaUZrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDDmRGzzCDuuCvOeL2/4XiKOU1PlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi
MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvMDg5MWViNWMtNzA0Ni0z
ZDE0LWFkZGYtOWY2MWU3YzEyY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1
MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy
NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2
ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/LztOdK9ky4uoNmCUX4lo4pWnzmlhbNzFJ8Fp+gz9VaoSUj0QMOh6j
4ba9zAhkF5ga4We8DNwlxQ8yHaKtvKRpAp5paolyB+st5G90poY+wOwT+iXk6o4i
EVrhjSp0jMiwEA/lylRb3pqfCYsu0pY6lVs4csU1zJupEi5p+SoawXzfqz9TB/eo
1N/ScQdFnMZQAjKqMgcBYv8wStTKjjftlr9PsH9prQ7ygJV49zA1hW8HedJaab+c
uHtyuVE4zbJRNnAQpLB5BEgnwlqS4OieJLC2dybLQE9X8Ih9wNzLsdRvr+jwirsv
Qe5UPwlinvjjMPHESuUea9OSyNUsvy4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:04 2024 by rpki-client on console-ams.rpki-client.org