Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8264db5b-5eeb-312e-a18a-b68a10185b44.roa
File:                     8264db5b-5eeb-312e-a18a-b68a10185b44.roa (raw, json)
Hash identifier:          xBsmsNtHsda1xzvCfr3llvMub+fUlMWWFIW94MvRNZs=
Subject key identifier:   81:AD:E9:FF:83:83:48:3B:22:89:CE:C9:70:F0:91:F3:AE:73:96:03
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285847FC7F9F4FCA6C02A213A91D80
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8264db5b-5eeb-312e-a18a-b68a10185b44.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     396949
IP address blocks:        207.126.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:9f:4f:ca:6c:02:a2:13:a9:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=df00b503-00f5-4bcb-9147-33b0eaaba38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:d4:76:4d:61:19:ab:2b:a5:dc:56:05:33:
                    c4:37:ef:ea:d8:b3:dc:1b:09:72:b2:8f:d1:61:db:
                    1f:d1:cf:9f:f2:78:54:a9:89:ec:fc:7c:f2:cf:d9:
                    80:2e:a6:52:ec:00:98:31:43:e9:72:62:89:bb:b3:
                    5c:91:5e:49:03:23:5a:cc:3e:09:95:d8:a9:a6:bc:
                    6b:87:77:fb:ec:17:98:3c:b6:79:3b:17:8f:de:8d:
                    3f:22:42:4f:63:4f:e9:45:d1:94:d8:c9:93:38:28:
                    d8:14:f4:f3:86:aa:1d:85:c0:8f:f9:e0:e8:c5:17:
                    57:8f:60:d6:43:ac:b7:47:8f:57:9b:45:84:53:c0:
                    f8:93:65:af:13:98:90:e6:ca:c0:c7:eb:d5:6b:e6:
                    4b:df:48:0f:cf:e1:04:a9:38:38:11:53:3a:fe:cb:
                    03:7c:b1:a2:85:2d:b2:bb:bf:94:bb:bc:52:f6:2c:
                    c3:63:a0:ca:c9:63:1a:c1:47:f6:65:f1:27:80:0b:
                    19:ff:3b:01:5b:19:92:ed:cc:f9:e9:42:aa:72:93:
                    fc:11:07:4c:8e:c5:8f:bc:68:db:59:6c:52:2e:09:
                    b0:6c:a5:73:0d:1c:97:b3:04:3f:74:59:76:b9:60:
                    4c:98:0a:d0:8a:3b:2c:83:73:b2:40:e5:f5:d7:64:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AD:E9:FF:83:83:48:3B:22:89:CE:C9:70:F0:91:F3:AE:73:96:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/8264db5b-5eeb-312e-a18a-b68a10185b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:e7:6e:ce:ce:42:c4:d6:58:93:12:1f:4c:f3:0e:3b:71:63:
         61:83:6d:2b:13:4e:ac:58:cb:48:ed:6a:e6:73:0b:71:7e:35:
         76:f3:ef:75:2d:0d:62:93:48:3c:64:7d:50:55:13:9a:6d:fa:
         c5:b1:52:d5:b4:df:e5:8f:4c:89:da:8d:bd:e1:d9:f4:dd:47:
         89:63:53:7b:1f:56:ac:63:2e:cb:2f:65:a1:88:ad:fc:e5:32:
         aa:6d:db:79:53:04:50:7b:78:18:be:3e:64:fb:85:bd:08:fc:
         fe:f5:95:80:5c:d7:25:a7:18:dd:ac:7b:84:54:15:a5:1b:46:
         6d:ad:91:fc:ea:c3:0e:3b:28:69:d9:c1:c7:b2:1e:b2:9d:dc:
         38:ae:c5:f3:ee:87:1a:a3:30:45:52:ec:27:b5:15:79:ef:58:
         9c:65:2a:92:87:e2:9f:c7:50:4e:1f:df:24:b5:cb:19:8c:8f:
         45:79:a4:82:88:45:b0:47:b4:07:87:03:a5:fa:87:56:13:d1:
         82:93:0c:b2:bf:e0:43:d3:42:8f:d0:3e:29:66:7d:01:03:9d:
         75:38:42:35:ba:f0:5d:1c:ef:d8:96:35:6e:29:00:c3:c1:16:
         32:66:af:d7:3d:a6:f3:3c:ab:e7:4b:5e:0c:ff:0f:76:73:12:
         b6:7f:a4:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf8f59PymwCohOpHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0
ZmZkMB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk
ZGYwMGI1MDMtMDBmNS00YmNiLTkxNDctMzNiMGVhYWJhMzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1nUdk1hGasrpdxWBTPEN+/q2LPcGwlyso/R
Ydsf0c+f8nhUqYns/Hzyz9mALqZS7ACYMUPpcmKJu7NckV5JAyNazD4Jldipprxr
h3f77BeYPLZ5OxeP3o0/IkJPY0/pRdGU2MmTOCjYFPTzhqodhcCP+eDoxRdXj2DW
Q6y3R49Xm0WEU8D4k2WvE5iQ5srAx+vVa+ZL30gPz+EEqTg4EVM6/ssDfLGihS2y
u7+Uu7xS9izDY6DKyWMawUf2ZfEngAsZ/zsBWxmS7cz56UKqcpP8EQdMjsWPvGjb
WWxSLgmwbKVzDRyXswQ/dFl2uWBMmArQijssg3OyQOX112TeFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGt6f+Dg0g7IonOyXDwkfOuc5YDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj
OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvODI2NGRiNWItNWVlYi0z
MTJlLWExOGEtYjY4YTEwMTg1YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm
OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1
NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1
NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALjnbs7OQsTWWJMSH0zzDjtxY2GDbSsTTqxYy0jtauZzC3F+NXbz73Ut
DWKTSDxkfVBVE5pt+sWxUtW03+WPTInajb3h2fTdR4ljU3sfVqxjLssvZaGIrfzl
Mqpt23lTBFB7eBi+PmT7hb0I/P71lYBc1yWnGN2se4RUFaUbRm2tkfzqww47KGnZ
wceyHrKd3DiuxfPuhxqjMEVS7Ce1FXnvWJxlKpKH4p/HUE4f3yS1yxmMj0V5pIKI
RbBHtAeHA6X6h1YT0YKTDLK/4EPTQo/QPilmfQEDnXU4QjW68F0c79iWNW4pAMPB
FjJmr9c9pvM8q+dLXgz/D3ZzErZ/pHI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:43 2024 by rpki-client on console-fra.rpki-client.org