Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e3b4a726-0e19-3af7-8092-aaceb7e35899.roa
File:                     e3b4a726-0e19-3af7-8092-aaceb7e35899.roa (raw, json)
Hash identifier:          O3QfQ1Psw9fz1oZPlaRpsfZB5q2sG1QJBap8ntz238c=
Subject key identifier:   4D:E1:CC:7E:00:7C:CA:38:9E:08:24:43:9B:DF:B5:A9:7A:7B:7C:9E
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285845453D6F1FBD23D8A303E85740
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e3b4a726-0e19-3af7-8092-aaceb7e35899.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     40413
IP address blocks:        207.250.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:6f:1f:bd:23:d8:a3:03:e8:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a53a60c0-f212-487c-830c-413ae898aee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:9b:14:a7:c2:2d:df:09:a6:cd:f4:2a:dc:
                    ed:a1:6f:d9:c1:ff:d4:10:8f:74:c1:34:6b:3d:82:
                    e8:4b:49:26:de:1b:65:3a:bb:42:06:0a:b0:84:4f:
                    f4:d0:53:32:8f:dd:a1:3f:96:7a:24:80:3a:68:4b:
                    a5:95:f9:f9:1f:30:fb:82:c6:7e:05:a0:8c:a1:81:
                    dd:2c:4d:85:8f:ac:07:d7:04:fa:b8:e2:3e:09:97:
                    1e:fc:91:76:ae:9a:79:e6:bb:59:cc:e9:31:9d:05:
                    1a:e7:80:73:e4:04:d2:44:d6:fc:13:a3:7c:2b:5d:
                    45:f1:d7:8d:cb:9a:78:45:2a:f2:42:be:f8:cd:0f:
                    b1:5c:20:b8:d6:11:d1:51:9a:c4:f2:b2:96:7c:c5:
                    36:79:10:12:e3:0e:80:a7:f2:2b:cf:d8:2a:84:4c:
                    38:a1:ff:8a:b8:77:80:a4:84:6c:3b:3c:a3:dc:45:
                    bd:d1:1a:b6:58:78:3f:b8:4a:b1:6c:2b:bd:f0:1d:
                    b2:86:99:3f:45:ed:94:0e:cb:24:90:4c:b4:3b:8a:
                    25:76:24:8c:5e:b4:48:cd:b8:a3:3c:a4:8a:53:30:
                    b7:a8:da:95:5d:50:52:2e:2b:d7:ce:61:ea:07:ba:
                    18:0e:6c:57:30:c0:f8:eb:8c:ea:70:cd:96:25:84:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:CC:7E:00:7C:CA:38:9E:08:24:43:9B:DF:B5:A9:7A:7B:7C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e3b4a726-0e19-3af7-8092-aaceb7e35899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.250.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:72:0a:44:10:7c:35:29:8e:7e:c2:00:a3:71:bd:80:ab:cc:
         77:08:d4:3b:73:98:49:7c:57:e2:e1:ac:e9:19:27:c6:ee:fa:
         e1:34:9d:ea:0b:d2:00:5e:a8:51:39:cb:33:95:1e:08:db:a0:
         64:00:b1:a9:18:00:bb:b9:81:eb:e0:0a:69:38:ef:77:1f:04:
         e1:2f:5c:a6:5d:6c:0a:57:64:10:bf:d8:ce:8f:76:ca:2a:0f:
         a3:43:d2:d3:00:81:28:b7:23:65:7d:43:29:d5:14:a2:43:76:
         94:b9:f6:8f:7d:2d:20:26:f6:ca:6f:7e:a2:bc:9f:6c:f1:87:
         fe:31:ba:bb:43:5a:37:12:64:af:8e:c2:04:54:7e:cb:6f:0e:
         76:34:88:05:5c:f1:09:7d:51:52:fb:3a:7d:e7:86:38:24:4a:
         95:67:34:40:06:ab:d7:c7:80:25:15:d6:94:01:88:c3:06:be:
         4c:19:1d:fa:5e:73:3d:a4:b7:2e:9d:bc:ce:cf:77:13:12:0e:
         aa:1e:3c:c2:bb:f2:3b:62:41:77:9e:af:c1:5e:60:85:52:f1:
         7f:3c:6b:5d:ff:ac:1b:bf:bc:25:9b:02:2a:0a:b2:5f:66:31:
         7c:b6:62:e6:7c:bd:18:f3:1a:ba:2e:4d:8e:4d:ae:92:d8:91:
         73:bc:05:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPW8fvSPYowPoV0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YTUzYTYwYzAtZjIxMi00ODdjLTgzMGMtNDEzYWU4OThhZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4GbFKfCLd8Jps30KtztoW/Zwf/UEI90wTRr
PYLoS0km3htlOrtCBgqwhE/00FMyj92hP5Z6JIA6aEullfn5HzD7gsZ+BaCMoYHd
LE2Fj6wH1wT6uOI+CZce/JF2rpp55rtZzOkxnQUa54Bz5ATSRNb8E6N8K11F8deN
y5p4RSryQr74zQ+xXCC41hHRUZrE8rKWfMU2eRAS4w6Ap/Irz9gqhEw4of+KuHeA
pIRsOzyj3EW90Rq2WHg/uEqxbCu98B2yhpk/Re2UDsskkEy0O4oldiSMXrRIzbij
PKSKUzC3qNqVXVBSLivXzmHqB7oYDmxXMMD464zqcM2WJYRLTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3hzH4AfMo4nggkQ5vftal6e3yeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZTNiNGE3MjYtMGUxOS0z
YWY3LTgwOTItYWFjZWI3ZTM1ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/rPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRyCkQQfDUpjn7CAKNxvYCrzHcI1DtzmEl8V+LhrOkZJ8bu+uE0neoL
0gBeqFE5yzOVHgjboGQAsakYALu5gevgCmk473cfBOEvXKZdbApXZBC/2M6Pdsoq
D6ND0tMAgSi3I2V9QynVFKJDdpS59o99LSAm9spvfqK8n2zxh/4xurtDWjcSZK+O
wgRUfstvDnY0iAVc8Ql9UVL7On3nhjgkSpVnNEAGq9fHgCUV1pQBiMMGvkwZHfpe
cz2kty6dvM7PdxMSDqoePMK78jtiQXeer8FeYIVS8X88a13/rBu/vCWbAioKsl9m
MXy2YuZ8vRjzGrouTY5NrpLYkXO8BVE=
-----END CERTIFICATE-----
Generated at Tue May 7 02:02:17 2024 by rpki-client on console-ams.rpki-client.org