Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa
File:                     dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa (raw, json)
Hash identifier:          H4kykDSL6B1vxhVIpPGnc5sJVWoQXv9CoGK73oZFdXw=
Subject key identifier:   23:E5:18:5C:A2:72:03:52:57:83:63:F9:34:07:25:7A:0A:48:66:CD
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F43285847A5D6A981EA913F72B8FEA800
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     395915
IP address blocks:        207.2.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a9:81:ea:91:3f:72:b8:fe:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=15ff6a0b-7ae8-44a1-99e9-018bd8d95c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:30:f2:4e:3f:b8:05:67:ad:3d:f6:9b:6a:
                    29:c0:33:2a:5c:e9:96:ba:2f:87:21:d0:c7:ea:6d:
                    fd:27:fa:6b:3e:b3:04:62:dd:c7:9e:9f:7e:3c:45:
                    23:bf:ca:08:9f:80:1c:3b:34:bf:f0:c3:14:db:39:
                    12:66:fa:54:4d:34:3c:c7:78:fa:7b:92:d9:a7:4a:
                    36:7c:74:46:03:04:5a:70:25:3f:58:f7:54:be:28:
                    71:09:31:8e:0a:e4:59:a3:0d:8e:3e:2f:5b:bf:bc:
                    2a:c2:2f:eb:79:67:ec:24:52:f0:61:53:22:e1:c3:
                    33:c2:cd:b1:9e:85:93:74:8b:7e:4b:5a:ce:e6:91:
                    c5:9b:72:07:39:1e:58:41:3a:08:e5:4f:1f:88:e5:
                    70:08:a7:65:32:ad:03:02:da:55:43:7b:cb:a5:f6:
                    7d:51:ce:6a:25:b2:5e:f2:93:0f:85:3a:f9:b4:16:
                    a5:3a:81:85:1d:5d:65:9f:aa:a6:fa:22:30:46:a4:
                    92:b3:42:e1:b2:19:d5:ca:86:b6:28:41:bc:9d:b3:
                    f7:69:b4:1f:bd:70:6a:e1:ba:18:17:b8:f7:26:a3:
                    1c:d5:9c:f8:d1:bd:25:4d:9c:83:6e:f7:51:6b:f9:
                    4a:fd:1d:42:a3:78:92:af:a4:2a:26:84:21:5a:3e:
                    71:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E5:18:5C:A2:72:03:52:57:83:63:F9:34:07:25:7A:0A:48:66:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/dc2300a8-0334-3adb-b7f1-3c2d180d485e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:54:54:6d:19:7b:f7:c4:61:ea:01:6b:c1:3b:cc:fb:28:f0:
         74:72:e8:75:85:f4:db:ec:5c:fd:38:22:46:a0:78:89:90:82:
         77:b3:19:1a:ee:37:16:9c:0a:58:d4:63:74:e0:b8:91:5b:06:
         2f:d8:6b:d6:ae:4c:d7:cf:f1:c3:9b:37:a4:ba:9a:4f:b7:90:
         f5:b2:00:c6:4d:78:45:12:14:a4:f7:d7:3d:14:dc:22:db:86:
         4f:67:b3:eb:5c:25:0d:c2:0f:92:09:17:d4:bb:1c:20:67:9c:
         ce:e0:43:97:02:58:3e:f6:de:62:64:48:bc:dc:f9:93:c4:88:
         a2:2c:45:93:0f:a8:0c:c1:99:17:48:3d:75:59:f3:a2:f8:8b:
         85:33:f9:c6:9c:07:df:64:0f:21:8e:49:85:23:04:29:4a:82:
         0a:cb:31:c8:28:d7:a2:41:f9:de:39:89:45:57:31:18:a6:fc:
         48:78:d8:12:63:42:10:fb:cb:ce:7e:5e:d9:ed:6d:26:55:ec:
         38:05:bc:a9:d3:ab:2d:2e:72:36:f0:46:29:af:53:cf:61:e4:
         ad:78:4c:5b:49:ed:a5:43:ca:a4:4e:03:41:dd:f6:e6:3e:fd:
         bb:e8:cb:96:44:03:6a:0f:d9:49:bb:37:58:7d:c8:fb:d1:19:
         05:db:58:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1qmB6pE/crj+qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx
MWRkMB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
MTVmZjZhMGItN2FlOC00NGExLTk5ZTktMDE4YmQ4ZDk1YzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDow8k4/uAVnrT32m2opwDMqXOmWui+HIdDH
6m39J/prPrMEYt3Hnp9+PEUjv8oIn4AcOzS/8MMU2zkSZvpUTTQ8x3j6e5LZp0o2
fHRGAwRacCU/WPdUvihxCTGOCuRZow2OPi9bv7wqwi/reWfsJFLwYVMi4cMzws2x
noWTdIt+S1rO5pHFm3IHOR5YQToI5U8fiOVwCKdlMq0DAtpVQ3vLpfZ9Uc5qJbJe
8pMPhTr5tBalOoGFHV1ln6qm+iIwRqSSs0LhshnVyoa2KEG8nbP3abQfvXBq4boY
F7j3JqMc1Zz40b0lTZyDbvdRa/lK/R1Co3iSr6QqJoQhWj5xPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPlGFyicgNSV4Nj+TQHJXoKSGbNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj
NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZGMyMzAwYTgtMDMzNC0z
YWRiLWI3ZjEtM2MyZDE4MGQ0ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk
ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj
MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh
YjYzYzExZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5UVG0Ze/fEYeoBa8E7zPso8HRy6HWF9NvsXP04IkageImQgnezGRru
NxacCljUY3TguJFbBi/Ya9auTNfP8cObN6S6mk+3kPWyAMZNeEUSFKT31z0U3CLb
hk9ns+tcJQ3CD5IJF9S7HCBnnM7gQ5cCWD723mJkSLzc+ZPEiKIsRZMPqAzBmRdI
PXVZ86L4i4Uz+cacB99kDyGOSYUjBClKggrLMcgo16JB+d45iUVXMRim/Eh42BJj
QhD7y85+XtntbSZV7DgFvKnTqy0ucjbwRimvU89h5K14TFtJ7aVDyqROA0Hd9uY+
/bvoy5ZEA2oP2Um7N1h9yPvRGQXbWPc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:13 2024 by rpki-client on console-fra.rpki-client.org