Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/490085e2-0b2e-37b4-b315-f98a0fd78285.roa
File:                     490085e2-0b2e-37b4-b315-f98a0fd78285.roa (raw, json)
Hash identifier:          yqxDHC+33EwiXwdGbN3bM7SrV82+nR6uTaU/QaZa1r0=
Subject key identifier:   14:4A:CB:B7:1B:CE:4F:0B:D4:03:D7:AB:A2:AB:70:AF:55:59:32:D8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475910CCB75707B26E6DACB960
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/490085e2-0b2e-37b4-b315-f98a0fd78285.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     18973
IP address blocks:        207.111.76.0/22 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:cc:b7:57:07:b2:6e:6d:ac:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=5d768632-6fe0-4b69-8cb8-9e07374908a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e7:09:90:a4:14:0c:38:75:38:a3:27:46:eb:
                    c4:63:01:9a:3f:45:ca:a1:43:f6:85:66:4c:a5:2c:
                    e8:e0:21:41:2e:e5:bb:4d:e9:e9:0d:b5:72:e2:46:
                    d8:a0:c1:ab:76:47:80:6d:e8:16:d9:5a:39:2d:39:
                    bf:73:d4:d9:0c:57:07:66:17:f9:3b:2e:46:6c:59:
                    5f:8e:e0:d0:16:c3:1f:3b:2b:69:01:e8:7c:cb:db:
                    cb:57:ed:a4:fb:7b:2d:ad:db:03:2a:ac:09:06:72:
                    01:49:cb:c5:ab:1d:aa:76:0e:eb:6b:96:a9:11:20:
                    5c:69:a6:e8:39:bf:ba:85:4a:1b:b6:2b:57:13:15:
                    09:78:57:7e:dd:11:7b:f0:ac:c4:ee:9f:60:9a:de:
                    d1:3e:97:0b:55:10:f8:8a:27:3e:40:2e:72:f0:c9:
                    5b:99:1c:36:de:fc:e6:bb:af:85:43:00:91:bc:8c:
                    bd:b7:75:53:f7:f2:4f:2c:2a:7f:33:ab:ea:09:a2:
                    84:77:9c:1c:8c:c4:18:b6:1e:50:25:4d:93:2e:8a:
                    57:95:24:92:8a:5a:43:ea:9f:ac:b1:6e:a2:32:d0:
                    ec:7c:eb:32:43:4d:05:91:62:8a:f1:59:61:fb:34:
                    38:62:03:83:fa:ac:96:b4:f9:22:e0:8a:3e:ff:01:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4A:CB:B7:1B:CE:4F:0B:D4:03:D7:AB:A2:AB:70:AF:55:59:32:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/490085e2-0b2e-37b4-b315-f98a0fd78285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.111.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:10:bc:44:b4:52:7a:13:e6:7a:25:ee:fc:b8:01:31:cb:
         9e:4c:9c:9a:d7:70:eb:da:94:69:85:04:f7:d4:45:3b:18:01:
         9d:cd:3f:08:0e:8e:76:9f:08:b6:f7:14:43:59:6e:c9:b7:db:
         0c:f2:c8:99:97:c2:c8:85:0d:15:4f:da:a2:45:97:08:5f:c2:
         41:dd:cd:d8:fe:ff:30:e9:88:91:2c:f6:cc:0f:ab:3a:c2:1e:
         44:41:02:90:a9:cd:b3:dc:54:00:00:0e:ec:ac:b5:97:8a:34:
         59:8d:d6:2e:3b:3a:52:af:7a:b5:67:1a:f7:a8:40:2a:e2:4f:
         14:a8:30:39:39:c2:37:89:d4:db:e8:5b:38:b0:7d:cb:15:9e:
         66:7a:8e:23:40:4c:77:ed:79:e7:33:58:ab:7e:b2:53:ad:d8:
         4e:33:9f:41:50:d5:b5:48:f6:d5:b2:cb:56:73:ca:c4:07:14:
         96:b7:ab:56:72:78:7d:fe:09:52:85:7e:a8:6d:4a:00:2b:64:
         11:6c:61:32:ae:cd:cb:2a:45:88:3d:b4:89:42:38:d3:cd:61:
         f7:a6:7e:ad:81:1a:38:ae:fb:1e:28:55:cd:f2:e7:f7:d3:63:
         40:ee:6d:a3:54:57:2f:a1:92:4f:30:e6:31:9e:5d:cc:b5:e8:
         5c:60:e0:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZEMy3Vweybm2suWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk
NWQ3Njg2MzItNmZlMC00YjY5LThjYjgtOWUwNzM3NDkwOGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ecJkKQUDDh1OKMnRuvEYwGaP0XKoUP2hWZM
pSzo4CFBLuW7TenpDbVy4kbYoMGrdkeAbegW2Vo5LTm/c9TZDFcHZhf5Oy5GbFlf
juDQFsMfOytpAeh8y9vLV+2k+3strdsDKqwJBnIBScvFqx2qdg7ra5apESBcaabo
Ob+6hUobtitXExUJeFd+3RF78KzE7p9gmt7RPpcLVRD4iic+QC5y8MlbmRw23vzm
u6+FQwCRvIy9t3VT9/JPLCp/M6vqCaKEd5wcjMQYth5QJU2TLopXlSSSilpD6p+s
sW6iMtDsfOsyQ00FkWKK8Vlh+zQ4YgOD+qyWtPki4Io+/wGQaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBRKy7cbzk8L1APXq6KrcK9VWTLYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDkwMDg1ZTItMGIyZS0z
N2I0LWIzMTUtZjk4YTBmZDc4Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz29MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJPUELxEtFJ6E+Z6Je78uAExy55MnJrXcOvalGmFBPfURTsYAZ3NPwgO
jnafCLb3FENZbsm32wzyyJmXwsiFDRVP2qJFlwhfwkHdzdj+/zDpiJEs9swPqzrC
HkRBApCpzbPcVAAADuystZeKNFmN1i47OlKverVnGveoQCriTxSoMDk5wjeJ1Nvo
WziwfcsVnmZ6jiNATHfteeczWKt+slOt2E4zn0FQ1bVI9tWyy1ZzysQHFJa3q1Zy
eH3+CVKFfqhtSgArZBFsYTKuzcsqRYg9tIlCONPNYfemfq2BGjiu+x4oVc3y5/fT
Y0DubaNUVy+hkk8w5jGeXcy16Fxg4E0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:01 2024 by rpki-client on console-fra.rpki-client.org