Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/9ed797f7-59a1-3eb3-a08c-95e891faa255.roa
File:                     9ed797f7-59a1-3eb3-a08c-95e891faa255.roa (raw, json)
Hash identifier:          IhSA9qG5lSrSiOqB80jmQya5xb1ZQrXjSz/5hwIguT8=
Subject key identifier:   23:90:63:0B:D5:BD:8F:E5:62:62:29:18:53:AB:29:E5:D1:2F:C0:A0
Certificate issuer:       /CN=baebde37-2461-4409-96e1-a720edbe80a7
Certificate serial:       010D0C9F43285845227592FC1EEE2A6074A3D380
Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/9ed797f7-59a1-3eb3-a08c-95e891faa255.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     398848
IP address blocks:        204.107.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:92:fc:1e:ee:2a:60:74:a3:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=32fd3f14-b3ea-439e-a361-3cfefe35633c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:91:ef:83:c1:5a:95:4b:01:30:10:e0:82:
                    32:da:2b:b0:86:21:b5:55:66:ec:b9:3d:ce:5c:ff:
                    c7:4e:95:1d:d1:4c:b7:f8:23:cc:1d:46:0f:4b:b6:
                    73:e6:e5:f1:57:d3:be:92:11:81:1f:74:07:b5:e7:
                    ba:e0:92:15:01:aa:7e:21:99:96:ef:9d:0c:5a:34:
                    3c:05:16:ee:5b:e1:d0:f9:be:0e:4a:20:83:31:2b:
                    ad:d6:1a:46:dd:1d:98:12:46:c0:dc:21:68:5f:71:
                    30:0c:b4:bf:71:cb:7a:63:4f:43:9b:63:94:6b:02:
                    49:4b:70:06:2c:b5:1d:d8:a8:20:88:b4:44:df:71:
                    82:22:c0:44:eb:28:aa:cc:dc:dc:85:0f:72:01:27:
                    31:53:d2:0d:6c:ff:01:e8:8b:fe:6c:e2:24:9f:9e:
                    62:f3:2e:60:e6:95:cf:31:f5:69:41:86:37:a1:ac:
                    21:f6:79:23:50:89:19:40:44:3e:8d:bd:9c:5c:1a:
                    c8:4d:02:e3:f0:66:cc:36:ce:13:b1:72:e2:45:58:
                    4f:b4:ff:f6:d4:0b:4e:0a:29:4b:bb:91:b6:58:fb:
                    d8:f5:58:c3:df:ed:7b:0d:15:79:e5:31:a2:b7:6d:
                    69:dd:09:53:8a:35:fa:16:00:5c:3e:d0:12:40:f7:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:90:63:0B:D5:BD:8F:E5:62:62:29:18:53:AB:29:E5:D1:2F:C0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/9ed797f7-59a1-3eb3-a08c-95e891faa255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl

            X509v3 Authority Key Identifier:
                keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b3:f1:0a:c6:b4:42:53:11:f6:c7:34:b6:4e:51:3c:b2:7d:
         f6:96:ab:32:6d:2e:b5:07:3d:7a:f1:01:46:78:c7:3c:df:d6:
         61:5d:0c:79:f2:dc:ef:93:44:0b:2d:1f:29:c5:41:40:95:07:
         58:ce:37:28:b5:9c:33:a3:08:ae:8c:98:54:3c:ef:49:cc:be:
         aa:18:00:b7:fa:2d:10:f2:66:a7:39:25:cb:d2:7d:d5:10:29:
         23:1f:42:54:81:e9:3d:26:94:c1:57:41:bd:df:e8:34:18:ed:
         60:4c:69:27:f3:cd:c6:a9:61:ca:c6:56:30:73:a9:f5:86:85:
         dc:a4:22:cc:c5:b1:82:2f:2a:b0:1e:59:cb:1d:9e:f2:e0:04:
         92:58:97:1e:5a:c1:ca:5f:66:a8:ee:57:9d:9c:16:86:5c:0e:
         b0:1c:59:7d:96:33:f9:85:1b:67:23:63:23:bf:4f:b5:5e:cb:
         51:f3:6b:99:b9:fd:39:7b:60:61:d5:dd:16:5d:45:f8:aa:b4:
         c6:ba:3e:c2:5b:9e:75:01:b1:28:32:06:61:ee:43:e5:9c:a2:
         23:99:98:78:57:7f:4c:5e:d1:1c:d1:ec:9a:ee:9e:18:f0:49:
         6d:5d:33:89:26:24:3e:e8:ca:cb:8d:7a:13:1d:15:d3:18:0a:
         41:97:57:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUidZL8Hu4qYHSj04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4
MGE3MB4XDTI0MDMwODAyMDAyNloXDTI0MDYwNjAxMDAyNlowLzEtMCsGA1UEAxMk
MzJmZDNmMTQtYjNlYS00MzllLWEzNjEtM2NmZWZlMzU2MzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJyR74PBWpVLATAQ4IIy2iuwhiG1VWbsuT3O
XP/HTpUd0Uy3+CPMHUYPS7Zz5uXxV9O+khGBH3QHtee64JIVAap+IZmW750MWjQ8
BRbuW+HQ+b4OSiCDMSut1hpG3R2YEkbA3CFoX3EwDLS/cct6Y09Dm2OUawJJS3AG
LLUd2KggiLRE33GCIsBE6yiqzNzchQ9yAScxU9INbP8B6Iv+bOIkn55i8y5g5pXP
MfVpQYY3oawh9nkjUIkZQEQ+jb2cXBrITQLj8GbMNs4TsXLiRVhPtP/21AtOCilL
u5G2WPvY9VjD3+17DRV55TGit21p3QlTijX6FgBcPtASQPcQ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOQYwvVvY/lYmIpGFOrKeXRL8CgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi
ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvOWVkNzk3ZjctNTlhMS0z
ZWIzLWEwOGMtOTVlODkxZmFhMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2
ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl
ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw
ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGseMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOz8QrGtEJTEfbHNLZOUTyyffaWqzJtLrUHPXrxAUZ4xzzf1mFdDHny
3O+TRAstHynFQUCVB1jONyi1nDOjCK6MmFQ870nMvqoYALf6LRDyZqc5JcvSfdUQ
KSMfQlSB6T0mlMFXQb3f6DQY7WBMaSfzzcapYcrGVjBzqfWGhdykIszFsYIvKrAe
WcsdnvLgBJJYlx5awcpfZqjuV52cFoZcDrAcWX2WM/mFG2cjYyO/T7Vey1Hza5m5
/Tl7YGHV3RZdRfiqtMa6PsJbnnUBsSgyBmHuQ+WcoiOZmHhXf0xe0RzR7Jrunhjw
SW1dM4kmJD7oysuNehMdFdMYCkGXVyY=
-----END CERTIFICATE-----
Generated at Sun May 19 02:00:25 2024 by rpki-client on console-ams.rpki-client.org