Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/1d907cf4-226b-3925-9009-fa782b3edea3.roa
File:                     1d907cf4-226b-3925-9009-fa782b3edea3.roa (raw, json)
Hash identifier:          zsg1OxP2MYX7Op2oo+lx2iFraX7cnZnjbAK/lJgeyr8=
Subject key identifier:   F6:4F:BA:7D:D9:05:19:3D:27:D2:FA:2D:59:B2:E4:B0:F6:17:75:3A
Certificate issuer:       /CN=51dcdcba-3766-4509-a479-bbf02514719f
Certificate serial:       010D0C9F4328584765A0EF9C4CE38089A9AAA420
Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/1d907cf4-226b-3925-9009-fa782b3edea3.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     33387
IP address blocks:        207.90.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ef:9c:4c:e3:80:89:a9:aa:a4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=764f1241-14ca-48cc-a7a3-423fae2ad158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:2f:5b:22:52:d5:99:57:8c:c6:ad:4b:b4:
                    49:f2:93:df:ea:e1:7e:fb:81:b4:96:c1:a6:8b:01:
                    92:4f:40:f7:fc:58:cf:d0:b8:0f:b2:1d:4e:40:14:
                    78:a1:bb:4f:51:98:75:c6:9f:c4:4a:90:cc:4f:f9:
                    d5:c4:08:3f:a9:4e:3c:c8:ae:9c:b1:7e:b5:12:6b:
                    00:50:3d:a0:59:2e:a1:61:a6:47:45:77:9e:7c:6d:
                    25:f1:ac:ef:28:34:78:9b:59:b0:68:6b:85:bc:ba:
                    89:d8:01:4a:ab:31:04:e9:5b:6b:36:72:6c:1d:87:
                    56:b8:df:f9:8b:3a:49:27:f2:cb:ab:16:82:77:77:
                    68:b5:c2:a1:95:d2:99:3f:a5:92:1b:90:89:62:15:
                    79:b3:58:4a:14:31:b5:44:7a:62:e0:b2:0a:12:02:
                    a7:d9:68:04:cf:70:84:78:8c:8a:69:36:70:aa:f4:
                    40:ad:7a:24:12:07:4d:88:0b:4e:50:6b:30:24:60:
                    b9:8b:23:c9:75:ff:80:2b:a1:8a:ab:05:4c:36:94:
                    bb:41:96:38:e0:11:6e:96:a9:cf:df:d1:7e:10:15:
                    62:75:60:c5:53:e9:4c:49:23:df:5f:c6:f4:5f:1b:
                    68:43:66:5d:24:75:29:38:76:0b:10:e9:3a:cb:e0:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4F:BA:7D:D9:05:19:3D:27:D2:FA:2D:59:B2:E4:B0:F6:17:75:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/1d907cf4-226b-3925-9009-fa782b3edea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:cb:7e:30:bb:84:d4:d3:10:45:0a:dc:e6:b5:e5:1c:b4:
         42:db:a8:b1:f7:3d:4b:fa:1c:88:b4:ae:9a:3a:3f:b3:61:86:
         1f:c6:29:0e:bf:28:fc:e6:6e:19:ea:54:9c:c1:54:ec:10:48:
         bc:03:9c:6b:a2:c3:2a:4b:a4:78:57:b0:59:1f:70:8e:de:a2:
         b7:8b:e4:30:b8:cb:e1:5a:90:11:83:9b:ce:14:a6:54:57:e5:
         6a:44:cc:44:b2:c6:34:44:18:c8:23:8e:c4:3d:24:43:c5:bb:
         48:c7:98:c1:c0:2b:82:f4:03:3d:02:2e:a2:68:6f:ad:34:11:
         0d:2c:9f:a1:a4:a1:48:75:50:a8:63:c9:e9:c7:f2:78:03:bb:
         6b:c7:73:cd:8c:9c:85:e3:4d:0d:ab:ef:b3:4e:f7:70:12:27:
         42:4d:b6:71:44:ce:74:28:54:14:6d:23:f5:52:6d:fd:39:f4:
         dd:c1:57:22:08:5e:87:ff:fc:cb:75:ff:f9:19:48:0e:4d:ad:
         84:1c:d5:66:28:ca:f5:8b:70:35:5c:46:f1:c9:ca:37:8c:1c:
         db:63:d1:b5:11:58:7d:13:79:ad:31:97:e0:30:10:cb:db:0b:
         ba:af:00:e4:ac:a9:c1:bb:9f:3f:f1:b9:3f:05:fa:89:53:38:
         af:04:19:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloO+cTOOAiamqpCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3
MTlmMB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk
NzY0ZjEyNDEtMTRjYS00OGNjLWE3YTMtNDIzZmFlMmFkMTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgsvWyJS1ZlXjMatS7RJ8pPf6uF++4G0lsGm
iwGST0D3/FjP0LgPsh1OQBR4obtPUZh1xp/ESpDMT/nVxAg/qU48yK6csX61EmsA
UD2gWS6hYaZHRXeefG0l8azvKDR4m1mwaGuFvLqJ2AFKqzEE6VtrNnJsHYdWuN/5
izpJJ/LLqxaCd3dotcKhldKZP6WSG5CJYhV5s1hKFDG1RHpi4LIKEgKn2WgEz3CE
eIyKaTZwqvRArXokEgdNiAtOUGswJGC5iyPJdf+AK6GKqwVMNpS7QZY44BFulqnP
39F+EBVidWDFU+lMSSPfX8b0XxtoQ2ZdJHUpOHYLEOk6y+CKsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZPun3ZBRk9J9L6LVmy5LD2F3U6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWRj
ZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvMWQ5MDdjZjQtMjI2Yi0z
OTI1LTkwMDktZmE3ODJiM2VkZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkY2RjYmEtMzc2Ni00NTA5LWE0
NzktYmJmMDI1MTQ3MTlmLzUxZGNkY2JhLTM3NjYtNDUwOS1hNDc5LWJiZjAyNTE0
NzE5Zi5jcmwwHwYDVR0jBBgwFoAU7bns8xwSTWh6d3O68CF2ject8m8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYw
MjUxNDcxOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1rMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXly34wu4TU0xBFCtzmteUctELbqLH3PUv6HIi0rpo6P7Nhhh/GKQ6/
KPzmbhnqVJzBVOwQSLwDnGuiwypLpHhXsFkfcI7eoreL5DC4y+FakBGDm84UplRX
5WpEzESyxjREGMgjjsQ9JEPFu0jHmMHAK4L0Az0CLqJob600EQ0sn6GkoUh1UKhj
yenH8ngDu2vHc82MnIXjTQ2r77NO93ASJ0JNtnFEznQoVBRtI/VSbf059N3BVyII
Xof//Mt1//kZSA5NrYQc1WYoyvWLcDVcRvHJyjeMHNtj0bURWH0Tea0xl+AwEMvb
C7qvAOSsqcG7nz/xuT8F+olTOK8EGcg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:29 2024 by rpki-client on console-ams.rpki-client.org