Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa
File:                     a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa (raw, json)
Hash identifier:          rYzWdrwQBIofMz7S/Kfgdva3qoScd8zyLWaq0shH2zY=
Subject key identifier:   9E:B9:86:4B:59:BE:AD:F3:D7:3C:4B:D8:74:7C:3D:1F:FD:DB:F6:0E
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845280AF2017C3FD8A271056400
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa
Signing time:             Sun 10 Mar 2024 02:00:25 +0000
ROA not before:           Sun 10 Mar 2024 02:00:25 +0000
ROA not after:            Sat 08 Jun 2024 01:00:25 +0000
asID:                     7743
IP address blocks:        209.211.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:0a:f2:01:7c:3f:d8:a2:71:05:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar 10 02:00:25 2024 GMT
            Not After : Jun  8 01:00:25 2024 GMT
        Subject: CN=f2494cba-ff10-42ee-a31e-d243d28e1f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:36:38:fa:01:e8:86:26:03:db:14:b8:88:0c:
                    8f:a7:b2:48:bb:4d:88:7e:39:a2:bd:bd:35:51:84:
                    56:04:4e:c1:d7:4e:47:b5:55:7d:f7:47:f5:a3:92:
                    5f:bc:80:17:6b:0f:aa:7b:e5:e3:b2:c9:86:4e:b4:
                    72:69:cb:51:47:f6:0d:cb:8e:a7:66:12:e0:fa:58:
                    b5:42:50:f3:07:ad:93:20:a8:b1:4a:b2:6e:f7:e6:
                    70:4e:ab:60:45:1e:c6:31:7f:a2:f8:3a:ae:be:17:
                    29:b9:eb:d0:b9:15:50:af:04:65:6d:44:4d:02:26:
                    cf:2a:54:30:e3:8e:b1:10:20:0c:ab:5b:8a:8a:9c:
                    77:f0:e3:c5:d4:30:57:d0:74:5c:53:f6:ce:e1:fd:
                    c2:a4:23:6a:98:f3:f6:3a:09:a2:54:23:4f:41:da:
                    fc:54:46:0e:11:35:e5:8b:a7:de:1b:eb:4d:9d:bd:
                    f7:a3:29:30:c4:0a:da:08:ad:77:bc:0d:78:f9:db:
                    d9:e2:b7:76:92:81:08:8d:94:37:47:6d:ea:7b:ab:
                    0b:24:02:29:53:7a:ba:51:7a:3a:7a:0b:cd:9f:80:
                    72:6f:45:a3:36:6d:11:0c:d2:a8:81:6e:53:81:bd:
                    36:37:57:ef:64:38:ae:42:ab:7d:b5:9b:5b:f3:b2:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B9:86:4B:59:BE:AD:F3:D7:3C:4B:D8:74:7C:3D:1F:FD:DB:F6:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.211.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:26:57:db:7e:ea:e6:aa:ad:b2:ba:eb:13:19:d0:84:97:44:
         92:18:5f:85:68:07:94:f1:a0:b0:d3:0e:70:b0:ed:06:28:f5:
         b7:7c:80:b4:d5:2a:5c:08:cd:e9:da:2e:15:71:f1:0e:6d:83:
         a3:dd:e4:6d:f0:00:fb:cb:f2:7a:6d:85:67:dd:81:e5:18:f6:
         40:13:c1:6f:73:a4:42:a1:f2:cf:e0:4f:27:49:ea:42:4c:01:
         3a:d4:1c:2f:ab:f6:16:5a:e6:cf:ba:b4:4b:f4:cb:e3:42:5e:
         7d:c8:c5:39:f0:36:3b:44:48:7a:7b:b2:b9:da:04:ea:55:a7:
         cf:d7:9a:ab:64:c5:d7:56:74:ec:8b:77:2e:fd:0d:b2:27:e1:
         de:2f:56:aa:ac:04:d6:8c:1d:a1:f5:45:92:e3:ce:62:e1:fc:
         15:2d:d2:66:b9:27:50:10:19:a9:92:9e:c4:5c:66:8a:a0:f1:
         47:ee:f8:65:a7:3d:cd:c7:09:bd:3d:4f:e5:34:85:e1:76:2b:
         e4:8c:72:2b:2e:ae:a2:89:3d:7b:d6:fc:da:5f:75:9d:17:9e:
         ed:46:c3:98:66:bf:84:96:bd:31:6d:28:3c:ff:6f:5b:b0:08:
         c4:28:27:c4:bb:ce:c5:c2:e2:8f:fa:da:e1:01:29:63:cc:cc:
         c8:4c:d6:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUoCvIBfD/YonEFZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI0MDMxMDAyMDAyNVoXDTI0MDYwODAxMDAyNVowLzEtMCsGA1UEAxMk
ZjI0OTRjYmEtZmYxMC00MmVlLWEzMWUtZDI0M2QyOGUxZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTY4+gHohiYD2xS4iAyPp7JIu02Ifjmivb01
UYRWBE7B105HtVV990f1o5JfvIAXaw+qe+XjssmGTrRyactRR/YNy46nZhLg+li1
QlDzB62TIKixSrJu9+ZwTqtgRR7GMX+i+DquvhcpuevQuRVQrwRlbURNAibPKlQw
446xECAMq1uKipx38OPF1DBX0HRcU/bO4f3CpCNqmPP2OgmiVCNPQdr8VEYOETXl
i6feG+tNnb33oykwxAraCK13vA14+dvZ4rd2koEIjZQ3R23qe6sLJAIpU3q6UXo6
egvNn4Byb0WjNm0RDNKogW5Tgb02N1fvZDiuQqt9tZtb87JRVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ65hktZvq3z1zxL2HR8PR/92/YOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYTI4ODcwMDItOGM4ZS0z
NDFlLWE5ZmItNjliMDMyZmZkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dPQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQmV9t+6uaqrbK66xMZ0ISXRJIYX4VoB5TxoLDTDnCw7QYo9bd8gLTV
KlwIzenaLhVx8Q5tg6Pd5G3wAPvL8npthWfdgeUY9kATwW9zpEKh8s/gTydJ6kJM
ATrUHC+r9hZa5s+6tEv0y+NCXn3IxTnwNjtESHp7srnaBOpVp8/XmqtkxddWdOyL
dy79DbIn4d4vVqqsBNaMHaH1RZLjzmLh/BUt0ma5J1AQGamSnsRcZoqg8Ufu+GWn
Pc3HCb09T+U0heF2K+SMcisurqKJPXvW/NpfdZ0Xnu1Gw5hmv4SWvTFtKDz/b1uw
CMQoJ8S7zsXC4o/62uEBKWPMzMhM1ng=
-----END CERTIFICATE-----
Generated at Mon May 13 09:48:07 2024 by rpki-client on console-ams.rpki-client.org