Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa
File:                     2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa (raw, json)
Hash identifier:          DAo1KTkzCbOiyHLqLR0KxhO6vM43eqsGXOvBa41eaPA=
Subject key identifier:   61:5C:9B:7D:B4:EE:F6:97:7C:45:BB:9E:7E:CE:E5:79:BC:14:51:96
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F43285845B4E8CED66C9690ABB1A03F00
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     5650
IP address blocks:        168.91.92.0/24 maxlen: 24
                          168.91.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:ce:d6:6c:96:90:ab:b1:a0:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=01a36d73-d34d-490a-914c-829fdc644b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:2b:db:18:c7:a8:b4:11:f0:dc:e9:35:76:
                    fe:11:51:33:bf:ce:28:14:18:75:be:77:c9:7c:d1:
                    b9:a5:db:6f:ba:e2:d7:7f:4c:18:ee:9a:5e:09:6d:
                    ee:07:69:81:05:d1:c9:39:3c:0d:40:31:50:19:91:
                    d9:76:98:6a:d1:0d:da:9a:16:2b:40:b5:0f:f1:39:
                    c9:97:25:18:73:54:72:95:10:05:13:b5:40:05:e6:
                    53:d0:f9:86:b1:2e:b9:14:5b:83:e2:ee:bd:c6:44:
                    76:ce:f0:33:a3:e3:b6:2a:a6:d4:b8:f2:db:e7:59:
                    05:8c:0b:78:d7:1f:2e:6b:d4:b6:f4:f2:ca:f8:38:
                    3c:bc:61:06:19:99:a0:4a:46:bb:96:b5:b9:a7:23:
                    49:57:e9:ef:4d:61:47:94:95:ea:72:b1:56:fb:49:
                    25:bd:11:0e:ca:45:fa:94:ff:95:e1:10:9b:b7:1e:
                    ca:a1:b4:08:2b:60:7d:ad:c6:61:2a:35:bd:6f:c2:
                    05:68:b7:d1:b8:5e:dd:15:aa:13:b5:82:1c:b9:dc:
                    a3:01:fb:26:d6:f3:a5:56:9d:36:49:10:6c:41:76:
                    77:b1:9e:32:af:d1:d0:37:f0:65:56:03:5b:81:f3:
                    45:33:64:d6:98:40:e7:ac:e6:3b:55:02:57:a9:27:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5C:9B:7D:B4:EE:F6:97:7C:45:BB:9E:7E:CE:E5:79:BC:14:51:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2d875c89-89ae-35d7-bbb4-09d5f24ccda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.92.0/24
                  168.91.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ed:97:79:79:69:f9:9c:af:c4:f5:10:ec:50:ef:4a:b0:9d:
         91:54:ee:a5:77:e6:76:2b:73:1f:0a:bd:6e:f6:53:94:8a:99:
         82:9c:df:61:9f:66:47:a8:03:90:7c:b7:94:31:c8:c2:d5:87:
         db:c5:86:f8:7e:f4:a6:64:d8:8a:2f:b3:df:6d:0a:23:69:e5:
         2d:ee:0b:e0:df:b7:54:f8:b5:40:90:cd:27:6b:4f:8c:a0:a2:
         e3:93:a3:4a:67:48:cc:2b:4d:30:d4:14:e9:6c:7b:fa:3f:96:
         f0:75:79:e2:ee:68:d3:7f:f4:46:2d:3e:0b:a3:c8:cf:c1:28:
         ca:d3:42:9d:8d:36:32:13:2e:4a:c2:de:31:e9:e7:a7:29:3b:
         ca:12:a7:95:d7:d6:51:3d:8c:7c:b1:7f:ea:86:29:e8:49:52:
         32:05:ce:a4:f1:de:49:73:10:ee:ff:7b:f7:c8:b4:db:70:79:
         1c:35:53:79:11:59:b8:7c:1a:9e:97:1e:7b:61:b0:50:37:56:
         93:33:72:01:53:09:8e:00:d4:ca:a5:4c:21:3a:01:6a:c1:fb:
         9d:fc:09:9a:7d:a1:73:6e:33:4c:d6:71:ab:cb:2b:ff:38:7a:
         8a:53:ee:4e:c9:e9:53:77:da:34:49:5d:f6:46:cd:59:b9:c3:
         79:a5:85:6b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEW06M7WbJaQq7GgPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw
MWIxMB4XDTI0MDQyOTEzMDAzM1oXDTI0MDcyODEzMDAzM1owLzEtMCsGA1UEAxMk
MDFhMzZkNzMtZDM0ZC00OTBhLTkxNGMtODI5ZmRjNjQ0YjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZEr2xjHqLQR8NzpNXb+EVEzv84oFBh1vnfJ
fNG5pdtvuuLXf0wY7ppeCW3uB2mBBdHJOTwNQDFQGZHZdphq0Q3amhYrQLUP8TnJ
lyUYc1RylRAFE7VABeZT0PmGsS65FFuD4u69xkR2zvAzo+O2KqbUuPLb51kFjAt4
1x8ua9S29PLK+Dg8vGEGGZmgSka7lrW5pyNJV+nvTWFHlJXqcrFW+0klvREOykX6
lP+V4RCbtx7KobQIK2B9rcZhKjW9b8IFaLfRuF7dFaoTtYIcudyjAfsm1vOlVp02
SRBsQXZ3sZ4yr9HQN/BlVgNbgfNFM2TWmEDnrOY7VQJXqSdw7QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGFcm3207vaXfEW7nn7O5Xm8FFGWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj
NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvMmQ4NzVjODktODlhZS0z
NWQ3LWJiYjQtMDlkNWYyNGNjZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3
YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy
MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz
MDhhMjAxYjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqFtcAwQA
qFt0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADrtl3l5afmcr8T1EOxQ70qwnZFU7qV35nYrcx8KvW72U5SK
mYKc32GfZkeoA5B8t5QxyMLVh9vFhvh+9KZk2Iovs99tCiNp5S3uC+Dft1T4tUCQ
zSdrT4ygouOTo0pnSMwrTTDUFOlse/o/lvB1eeLuaNN/9EYtPgujyM/BKMrTQp2N
NjITLkrC3jHp56cpO8oSp5XX1lE9jHyxf+qGKehJUjIFzqTx3klzEO7/e/fItNtw
eRw1U3kRWbh8Gp6XHnthsFA3VpMzcgFTCY4A1MqlTCE6AWrB+538CZp9oXNuM0zW
cavLK/84eopT7k7J6VN32jRJXfZGzVm5w3mlhWs=
-----END CERTIFICATE-----
Generated at Fri May 3 08:24:44 2024 by rpki-client on console-ams.rpki-client.org