Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa
File:                     63555432-fed5-3827-95ba-2c1139e7a9ac.roa (raw, json)
Hash identifier:          6IHdua7AcS2yju1ZV4TyHMetwusFzyNrQ1s/x72Ppps=
Subject key identifier:   09:72:D0:85:54:6D:D5:45:E1:2B:95:EF:22:5A:4D:9F:4A:A6:F6:63
Certificate issuer:       /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
Certificate serial:       010D0C9F43285845C873A5D568CE851F80BF3840
Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa
Signing time:             Mon 06 May 2024 13:00:34 +0000
ROA not before:           Mon 06 May 2024 13:00:34 +0000
ROA not after:            Sun 04 Aug 2024 13:00:34 +0000
asID:                     396462
IP address blocks:        207.44.1.0/24 maxlen: 32
                          207.44.67.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:73:a5:d5:68:ce:85:1f:80:bf:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
        Validity
            Not Before: May  6 13:00:34 2024 GMT
            Not After : Aug  4 13:00:34 2024 GMT
        Subject: CN=5c768e65-3874-421c-88e9-eb8703568aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:13:a3:d7:42:37:55:bf:dc:dc:aa:63:a0:
                    73:7b:7b:bd:18:e8:61:b1:43:44:bc:71:ac:cc:f2:
                    a5:81:c2:e3:a9:35:f8:ca:41:aa:91:4b:b3:9b:1f:
                    63:5f:2c:a6:0a:31:8c:8d:33:30:11:7c:6a:64:d0:
                    0d:1e:86:13:1c:81:6d:47:9d:80:b1:af:63:6c:cd:
                    32:40:ff:96:13:08:a3:de:fe:34:06:27:68:a5:2d:
                    9f:68:f0:97:5c:79:94:20:43:19:ff:1c:90:d2:c3:
                    ee:4f:d8:5c:8c:c7:9a:7c:9f:f6:94:02:e4:19:85:
                    67:ca:ca:73:37:48:65:b5:38:f5:06:92:13:7e:7b:
                    81:a1:e3:c3:10:1b:fe:64:03:2b:16:ef:d2:a7:a0:
                    05:bd:62:22:e1:90:63:00:e1:28:4d:51:02:53:39:
                    29:95:92:63:d0:08:f6:b7:ef:4a:2e:f4:99:18:30:
                    60:38:d0:f5:80:49:48:15:69:31:ca:70:b0:0f:37:
                    d7:f2:9c:2c:d5:5a:10:c4:cf:cc:0b:eb:aa:3d:0f:
                    a9:e8:30:8f:17:54:f2:32:33:eb:f6:49:0c:1d:ef:
                    9a:c0:bd:f5:fc:b3:81:db:ca:fd:1c:05:b2:81:3e:
                    9f:4e:33:67:9f:9c:52:81:82:4a:54:4d:c7:7c:43:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:72:D0:85:54:6D:D5:45:E1:2B:95:EF:22:5A:4D:9F:4A:A6:F6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.44.1.0/24
                  207.44.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:96:04:9c:e7:03:5b:f3:05:c6:51:5e:f2:bd:97:ae:47:
         63:10:a4:9e:2a:c2:1a:85:75:a6:bc:b6:0e:aa:be:6e:aa:0f:
         5c:3b:a6:3a:0e:3e:ff:f5:69:88:98:e5:cb:e5:b6:c8:2e:7e:
         b1:84:c8:ec:1d:9c:21:d2:ca:e6:33:6b:b2:da:66:46:a4:3a:
         df:69:7e:a5:4e:25:b6:d6:ef:33:fb:95:93:08:4e:58:0b:9b:
         b9:ce:4d:7b:f9:92:84:8f:a9:17:c3:87:58:09:37:dd:8e:52:
         69:16:26:5f:6c:e0:16:12:af:e3:9b:5e:d8:85:f4:d8:0d:a8:
         fd:96:0b:8f:90:d5:dc:d4:f6:2b:1f:1c:05:99:fe:fc:58:e0:
         59:93:94:8c:ea:e7:15:f4:1a:e7:24:de:39:28:c4:92:de:c4:
         d2:2e:bc:89:78:8d:62:e7:09:29:f1:28:9c:dd:48:18:88:0a:
         3c:94:3c:65:c5:b4:10:35:b7:91:0c:f2:ba:d2:94:dc:d6:1b:
         22:49:f0:80:3c:98:61:5e:ac:35:e2:a4:42:8b:33:f2:78:7f:
         f8:8e:b2:e3:94:97:2a:44:00:5b:31:6d:a8:2f:ce:e3:aa:e5:
         bf:9d:ab:7c:45:c2:ef:2b:fa:bd:86:17:c6:d2:ab:72:b0:ce:
         be:84:e2:69
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEXIc6XVaM6FH4C/OEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz
YjExMB4XDTI0MDUwNjEzMDAzNFoXDTI0MDgwNDEzMDAzNFowLzEtMCsGA1UEAxMk
NWM3NjhlNjUtMzg3NC00MjFjLTg4ZTktZWI4NzAzNTY4YWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/kTo9dCN1W/3NyqY6Bze3u9GOhhsUNEvHGs
zPKlgcLjqTX4ykGqkUuzmx9jXyymCjGMjTMwEXxqZNANHoYTHIFtR52Asa9jbM0y
QP+WEwij3v40BidopS2faPCXXHmUIEMZ/xyQ0sPuT9hcjMeafJ/2lALkGYVnyspz
N0hltTj1BpITfnuBoePDEBv+ZAMrFu/Sp6AFvWIi4ZBjAOEoTVECUzkplZJj0Aj2
t+9KLvSZGDBgOND1gElIFWkxynCwDzfX8pws1VoQxM/MC+uqPQ+p6DCPF1TyMjPr
9kkMHe+awL31/LOB28r9HAWygT6fTjNnn5xSgYJKVE3HfEO4IwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAly0IVUbdVF4SuV7yJaTZ9KpvZjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh
MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvNjM1NTU0MzItZmVkNS0z
ODI3LTk1YmEtMmMxMTM5ZTdhOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1
NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4
M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl
YjliODNiMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzywBAwQA
zyxDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJnvlgSc5wNb8wXGUV7yvZeuR2MQpJ4qwhqFdaa8tg6qvm6q
D1w7pjoOPv/1aYiY5cvltsgufrGEyOwdnCHSyuYza7LaZkakOt9pfqVOJbbW7zP7
lZMITlgLm7nOTXv5koSPqRfDh1gJN92OUmkWJl9s4BYSr+ObXtiF9NgNqP2WC4+Q
1dzU9isfHAWZ/vxY4FmTlIzq5xX0Guck3jkoxJLexNIuvIl4jWLnCSnxKJzdSBiI
CjyUPGXFtBA1t5EM8rrSlNzWGyJJ8IA8mGFerDXipEKLM/J4f/iOsuOUlypEAFsx
bagvzuOq5b+dq3xFwu8r+r2GF8bSq3Kwzr6E4mk=
-----END CERTIFICATE-----
Generated at Thu May 9 10:24:48 2024 by rpki-client on console-fra.rpki-client.org