Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa
File:                     7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa (raw, json)
Hash identifier:          RuicEaxrwQ1aiUMFbNaMBi8r1fZju2GMfQPPClY4KR8=
Subject key identifier:   91:94:D1:49:06:6B:A3:33:8A:B0:10:5A:6F:D5:C8:25:5B:6C:34:78
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F43285845CB3E43B0A0728A2A5820A480
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     1025
IP address blocks:        209.209.24.0/24 maxlen: 24
                          2602:fcb8::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:43:b0:a0:72:8a:2a:58:20:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=c297b192-0b05-4153-a130-f16c4f2f6402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:0c:aa:84:12:b2:ad:40:03:a6:4d:35:a0:
                    69:b1:f3:47:27:1f:ab:cc:c5:94:9d:bb:8d:db:35:
                    12:1d:b0:2b:4e:9f:dd:12:71:96:9b:ec:18:89:76:
                    78:c9:c3:3a:e4:0d:eb:e2:19:3f:ac:55:aa:42:b2:
                    c1:b2:df:9b:bc:91:46:8a:d9:de:cd:be:d4:46:b7:
                    7c:2a:a2:41:70:ef:8a:a3:a5:c7:65:63:cd:0b:08:
                    47:4f:b0:01:4f:f7:b5:0c:ef:6a:2c:e4:1d:20:fc:
                    80:b2:64:9d:ae:c7:8a:dc:c4:75:b2:ef:e4:04:9e:
                    84:48:39:7b:db:ce:d8:83:46:e1:1c:55:35:b9:2c:
                    29:a3:c0:d5:9c:f2:14:e8:1d:cb:74:c9:3b:a5:be:
                    e4:2c:08:fb:14:24:cc:20:49:a3:27:ec:5d:58:71:
                    c2:09:6b:cc:b3:50:94:55:48:1d:75:a5:c4:7a:0c:
                    af:df:93:f1:de:ae:af:57:08:17:35:d8:b1:55:39:
                    9e:ec:fd:a9:d8:de:42:46:75:c0:08:8e:0c:9f:fd:
                    01:86:4e:77:12:75:d4:95:9e:e1:51:6f:d7:56:c4:
                    1e:09:31:08:28:29:5b:4b:f2:3c:a9:1d:19:4e:e0:
                    38:3e:2e:a4:a4:e5:34:69:bd:42:17:a4:eb:f5:30:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:94:D1:49:06:6B:A3:33:8A:B0:10:5A:6F:D5:C8:25:5B:6C:34:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/7d8ce7e1-da5c-3963-9511-12ae3a5a8724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.24.0/24
                IPv6:
                  2602:fcb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:64:2b:c0:78:bc:38:63:df:2b:db:d4:ec:1e:cc:35:31:98:
         69:ac:a2:4b:36:9d:23:15:7c:d5:02:87:e9:c5:f3:4b:31:da:
         61:e9:d3:9a:bf:a7:1a:b1:68:9d:60:f3:cd:74:dd:c0:7d:01:
         ec:90:7a:04:a8:af:5b:69:34:36:a6:81:e0:16:0a:bc:30:3d:
         12:67:5c:3b:38:26:e9:59:54:7f:81:f8:7f:6b:1d:01:61:f4:
         84:8b:54:78:8e:a3:30:f4:8a:63:78:f0:8a:69:b2:e6:64:7e:
         3b:b9:db:ea:94:11:6a:8c:c4:d1:1d:71:3f:ce:72:e2:c8:03:
         21:d1:2e:c3:8b:df:b5:88:1b:4d:9a:3c:cd:4c:06:f5:30:61:
         c5:3d:4d:93:1f:7f:0c:dd:99:f4:98:0b:4c:d7:2e:0a:41:57:
         e9:fa:53:e6:7e:74:8b:d2:94:7f:34:c2:82:e2:c4:9c:0b:0b:
         7d:44:7d:48:37:6f:98:12:83:16:0c:e1:4a:7d:30:24:20:d6:
         bb:1a:b9:80:34:3b:71:03:9a:a1:02:c9:2f:ff:fb:25:ee:64:
         cc:be:4e:32:ed:27:10:a3:61:50:5f:59:e6:3e:0a:d7:34:cc:
         af:cd:63:4a:f3:fd:a4:e5:c6:aa:0f:e0:b7:4c:4d:9e:63:3f:
         c6:cb:aa:c2
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEXLPkOwoHKKKlggpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAwNjkwYTctMTk1Ny00NWUyLTg3NDQtZWU5NzM1YjA3
MzE5MB4XDTI0MDUwNzEzMDAzNVoXDTI0MDgwNTEzMDAzNVowLzEtMCsGA1UEAxMk
YzI5N2IxOTItMGIwNS00MTUzLWExMzAtZjE2YzRmMmY2NDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaEMqoQSsq1AA6ZNNaBpsfNHJx+rzMWUnbuN
2zUSHbArTp/dEnGWm+wYiXZ4ycM65A3r4hk/rFWqQrLBst+bvJFGitnezb7URrd8
KqJBcO+Ko6XHZWPNCwhHT7ABT/e1DO9qLOQdIPyAsmSdrseK3MR1su/kBJ6ESDl7
287Yg0bhHFU1uSwpo8DVnPIU6B3LdMk7pb7kLAj7FCTMIEmjJ+xdWHHCCWvMs1CU
VUgddaXEegyv35Px3q6vVwgXNdixVTme7P2p2N5CRnXACI4Mn/0Bhk53EnXUlZ7h
UW/XVsQeCTEIKClbS/I8qR0ZTuA4Pi6kpOU0ab1CF6Tr9TAvJwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFJGU0UkGa6MzirAQWm/VyCVbbDR4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2
OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3MzViMDczMTkvN2Q4Y2U3ZTEtZGE1Yy0z
OTYzLTk1MTEtMTJhZTNhNWE4NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwNjkwYTctMTk1Ny00NWUyLTg3
NDQtZWU5NzM1YjA3MzE5LzcwMDY5MGE3LTE5NTctNDVlMi04NzQ0LWVlOTczNWIw
NzMxOS5jcmwwHwYDVR0jBBgwFoAUIamavUUq0vNcIiwf8NmYuXDa2n0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MDA2OTBhNy0xOTU3LTQ1ZTItODc0NC1lZTk3
MzViMDczMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0dEYMA4E
AgACMAgDBgQmAvy4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFZCvAeLw4Y98r29TsHsw1MZhprKJLNp0j
FXzVAofpxfNLMdph6dOav6casWidYPPNdN3AfQHskHoEqK9baTQ2poHgFgq8MD0S
Z1w7OCbpWVR/gfh/ax0BYfSEi1R4jqMw9IpjePCKabLmZH47udvqlBFqjMTRHXE/
znLiyAMh0S7Di9+1iBtNmjzNTAb1MGHFPU2TH38M3Zn0mAtM1y4KQVfp+lPmfnSL
0pR/NMKC4sScCwt9RH1IN2+YEoMWDOFKfTAkINa7GrmANDtxA5qhAskv//sl7mTM
vk4y7ScQo2FQX1nmPgrXNMyvzWNK8/2k5caqD+C3TE2eYz/Gy6rC
-----END CERTIFICATE-----
Generated at Sat May 18 01:54:53 2024 by rpki-client on console-ams.rpki-client.org