Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa
File:                     b7f49026-ae81-329a-8ec0-a16f2a074f88.roa (raw, json)
Hash identifier:          Fww1KzRtXaGyuG/6V5G5/viEmP3nJjkE8hFgU/X7J0c=
Subject key identifier:   A5:89:B1:77:4B:91:22:0E:A7:28:4C:F5:A2:0B:F9:B6:FF:D9:5D:1B
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F43285845C5A8EB7AA7CF526BB364D180
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa
Signing time:             Sun 05 May 2024 13:00:34 +0000
ROA not before:           Sun 05 May 2024 13:00:34 +0000
ROA not after:            Sat 03 Aug 2024 13:00:34 +0000
asID:                     14618
IP address blocks:        207.202.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c5:a8:eb:7a:a7:cf:52:6b:b3:64:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May  5 13:00:34 2024 GMT
            Not After : Aug  3 13:00:34 2024 GMT
        Subject: CN=826bd6f6-c991-451d-a4ab-469bec3fcffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:d2:b2:eb:39:ec:41:45:25:cc:c3:04:74:
                    8c:37:a5:5f:9d:01:5a:b2:19:fa:59:24:5c:bb:03:
                    be:7f:37:32:fb:76:6e:86:42:a7:f7:f5:1c:1b:4b:
                    e9:1a:3b:eb:a6:5d:34:15:d1:99:cb:f0:13:dc:8d:
                    77:01:ed:3e:cf:b7:77:32:39:dc:e8:87:70:39:ad:
                    b7:89:c7:7a:8a:1e:15:91:ba:2a:bd:59:27:26:59:
                    dd:79:c7:90:cf:fb:bc:5f:f4:88:89:69:c3:3d:6b:
                    34:e3:23:96:3f:52:1b:84:e3:e3:c9:0f:1f:d5:0e:
                    13:03:45:be:91:90:71:c2:c5:ce:1d:07:35:a6:3c:
                    6e:4a:f9:d7:2a:61:eb:dc:b2:f6:28:6c:fc:e2:28:
                    17:07:f3:13:36:19:34:bd:f9:af:24:3c:25:66:d8:
                    99:0a:f0:3a:3f:73:76:00:f7:c3:6c:3d:eb:17:57:
                    0a:06:66:2a:65:a2:1d:4a:d7:ab:58:6b:28:f8:9c:
                    eb:50:47:7b:a9:27:91:f3:18:78:66:63:69:d2:3c:
                    84:e8:3d:d3:e7:e7:ed:90:e4:0c:2c:04:5c:69:83:
                    b5:45:76:ce:3d:03:c9:4b:f8:2c:05:e3:34:c9:4c:
                    cb:e5:dd:70:7f:f3:10:f6:f1:4c:ee:5a:6c:08:f8:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:89:B1:77:4B:91:22:0E:A7:28:4C:F5:A2:0B:F9:B6:FF:D9:5D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:23:ac:8e:2c:d0:cb:e3:2b:3a:f5:ca:85:14:8d:8e:2e:c6:
         72:e2:d6:86:2e:d8:5d:2c:b1:8b:fd:8f:2c:0b:99:db:e1:a4:
         4e:ee:5d:c9:e7:b9:a1:c7:1f:36:47:72:a0:fb:52:d5:97:a1:
         d2:24:fc:24:8b:88:f3:27:1b:de:7d:19:db:e8:f6:cc:2f:5e:
         eb:d3:f5:be:8b:72:a6:b0:69:63:58:bb:a3:8c:4d:4f:eb:67:
         db:9b:18:c5:6c:35:70:22:69:73:b3:7d:03:42:f3:af:a3:2e:
         71:c4:ca:2f:68:d4:4c:ae:f3:6c:74:5f:d4:41:5c:16:2a:9f:
         1e:88:15:04:8a:91:75:cd:ff:69:4a:53:cc:07:d9:3b:e3:a6:
         15:cb:45:63:70:22:17:71:f0:01:50:3d:8b:6a:da:b1:79:81:
         4f:a4:0d:98:d6:5e:bf:14:de:a0:43:48:fe:c9:d7:f5:c7:19:
         24:8f:6c:3b:99:4e:96:2a:d5:74:65:80:e2:10:77:7e:be:4e:
         1c:6e:ab:fb:67:ab:bf:45:cd:7d:50:9e:8a:a0:f7:a6:af:46:
         7c:cb:d2:08:a5:f0:fb:a6:b2:19:80:0d:0d:da:15:26:99:d4:
         5a:6b:86:96:32:5a:29:61:93:17:5c:d4:68:4f:dc:53:29:bc:
         d4:17:c4:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXFqOt6p89Sa7Nk0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI0MDUwNTEzMDAzNFoXDTI0MDgwMzEzMDAzNFowLzEtMCsGA1UEAxMk
ODI2YmQ2ZjYtYzk5MS00NTFkLWE0YWItNDY5YmVjM2ZjZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT/Ssus57EFFJczDBHSMN6VfnQFashn6WSRc
uwO+fzcy+3ZuhkKn9/UcG0vpGjvrpl00FdGZy/AT3I13Ae0+z7d3Mjnc6IdwOa23
icd6ih4VkboqvVknJlndeceQz/u8X/SIiWnDPWs04yOWP1IbhOPjyQ8f1Q4TA0W+
kZBxwsXOHQc1pjxuSvnXKmHr3LL2KGz84igXB/MTNhk0vfmvJDwlZtiZCvA6P3N2
APfDbD3rF1cKBmYqZaIdSterWGso+JzrUEd7qSeR8xh4ZmNp0jyE6D3T5+ftkOQM
LARcaYO1RXbOPQPJS/gsBeM0yUzL5d1wf/MQ9vFM7lpsCPjonQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWJsXdLkSIOpyhM9aIL+bb/2V0bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjdmNDkwMjYtYWU4MS0z
MjlhLThlYzAtYTE2ZjJhMDc0Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkjrI4s0MvjKzr1yoUUjY4uxnLi1oYu2F0ssYv9jywLmdvhpE7uXcnn
uaHHHzZHcqD7UtWXodIk/CSLiPMnG959Gdvo9swvXuvT9b6LcqawaWNYu6OMTU/r
Z9ubGMVsNXAiaXOzfQNC86+jLnHEyi9o1Eyu82x0X9RBXBYqnx6IFQSKkXXN/2lK
U8wH2TvjphXLRWNwIhdx8AFQPYtq2rF5gU+kDZjWXr8U3qBDSP7J1/XHGSSPbDuZ
TpYq1XRlgOIQd36+Thxuq/tnq79FzX1Qnoqg96avRnzL0gil8PumshmADQ3aFSaZ
1FprhpYyWilhkxdc1GhP3FMpvNQXxIE=
-----END CERTIFICATE-----
Generated at Mon May 6 02:01:42 2024 by rpki-client on console-fra.rpki-client.org