Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa
File:                     28e01cf7-f5be-34ef-9dfc-3719434f963a.roa (raw, json)
Hash identifier:          sfX1Xar3HhWToXKVnMbz+Thd9B/1j3vze8y5SNDIy/w=
Subject key identifier:   05:91:22:78:65:24:FF:44:4D:3A:32:B9:6B:99:B1:AE:79:5A:24:59
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F432858477696D3E6FA115CB89391F790
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa
Signing time:             Mon 07 Oct 2024 14:49:14 +0000
ROA not before:           Mon 07 Oct 2024 14:49:14 +0000
ROA not after:            Sun 05 Jan 2025 15:49:14 +0000
asID:                     398210
IP address blocks:        207.211.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:96:d3:e6:fa:11:5c:b8:93:91:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Oct  7 14:49:14 2024 GMT
            Not After : Jan  5 15:49:14 2025 GMT
        Subject: CN=2b717774-ea01-4612-a6e5-0d3cea89a6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:c1:a3:c5:5b:b3:22:4f:51:a2:d3:35:30:
                    51:89:28:83:2d:03:6f:cb:93:67:28:ad:02:e1:8e:
                    0c:87:c8:ea:68:fb:d1:ef:f8:79:9d:13:3d:5f:ed:
                    92:1b:51:7d:09:19:32:60:72:b5:ed:94:66:97:0c:
                    df:97:86:fe:a7:22:1d:fb:c5:74:a7:67:e6:e0:ab:
                    c4:06:c0:57:17:96:64:4b:37:7b:d7:e0:dd:70:4e:
                    69:d4:4a:48:47:02:53:ec:54:07:1b:63:f2:3a:29:
                    1e:37:dc:99:17:4c:34:07:7d:31:91:4e:cb:d0:60:
                    c5:2e:63:b9:d8:c4:a0:3a:d4:0f:7a:fc:1c:45:81:
                    d8:a4:a2:25:fd:0d:a7:21:96:0f:5e:b9:35:79:0d:
                    b7:45:d0:1d:a3:3c:04:6a:f0:63:25:c7:af:14:24:
                    11:64:4a:0c:bc:d5:cb:65:43:d9:cc:88:da:91:fe:
                    5e:27:3a:05:a2:5b:b0:db:f1:1d:57:b7:66:fe:db:
                    f1:69:6a:8b:6e:b9:a2:6f:7e:e0:d8:e8:f6:04:95:
                    8c:07:bf:ff:e6:b6:d0:df:7c:64:22:97:ee:89:46:
                    ca:30:a5:dd:6e:03:f0:04:b5:7f:de:4b:90:46:b6:
                    68:d8:8e:e4:38:c4:b7:89:25:f1:b0:9d:26:da:5f:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:91:22:78:65:24:FF:44:4D:3A:32:B9:6B:99:B1:AE:79:5A:24:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/28e01cf7-f5be-34ef-9dfc-3719434f963a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:8d:4f:04:10:a2:f4:95:37:15:f2:e6:1b:ec:93:49:ee:
         4c:bd:62:9a:56:a4:8e:5a:24:54:8e:e8:eb:e2:93:05:5b:ec:
         47:a0:a1:ec:6b:ed:37:67:9d:08:b5:b7:f4:67:1f:53:c7:ef:
         cb:34:35:f3:36:35:b7:26:08:57:e1:60:d8:a4:8f:42:0a:55:
         44:5d:96:26:74:73:7b:d6:89:c4:01:1b:c9:b9:a3:72:9e:23:
         d0:79:89:88:bd:10:6a:dc:37:63:2b:cc:43:54:a9:3b:3c:c3:
         4d:d7:b8:ed:22:78:68:b9:d2:52:00:27:e3:d9:c9:77:35:65:
         b7:10:fa:d1:52:ff:64:5e:41:c1:f2:25:8d:8a:24:5f:0d:9a:
         27:47:ce:38:cc:1f:17:aa:41:c9:db:9f:38:f4:05:65:fb:c7:
         6f:46:6b:8e:5a:4c:c8:c7:38:c3:3b:ae:f2:36:4c:00:f3:ab:
         c7:35:9c:d8:79:b0:4d:aa:ac:70:d3:67:77:17:bf:29:f8:26:
         83:2b:8d:e4:c5:1c:17:ef:e7:ac:b8:31:ee:fe:cd:61:3f:e1:
         aa:bd:da:15:42:e7:a6:61:d9:2b:9b:b1:20:71:f4:c2:3e:70:
         07:54:d8:4a:b4:23:ab:a0:e1:da:5d:58:ed:99:c8:24:d7:ee:
         c4:df:2f:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2ltPm+hFcuJOR95AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw
ZmFhMB4XDTI0MTAwNzE0NDkxNFoXDTI1MDEwNTE1NDkxNFowLzEtMCsGA1UEAxMk
MmI3MTc3NzQtZWEwMS00NjEyLWE2ZTUtMGQzY2VhODlhNmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqTBo8VbsyJPUaLTNTBRiSiDLQNvy5NnKK0C
4Y4Mh8jqaPvR7/h5nRM9X+2SG1F9CRkyYHK17ZRmlwzfl4b+pyId+8V0p2fm4KvE
BsBXF5ZkSzd71+DdcE5p1EpIRwJT7FQHG2PyOikeN9yZF0w0B30xkU7L0GDFLmO5
2MSgOtQPevwcRYHYpKIl/Q2nIZYPXrk1eQ23RdAdozwEavBjJcevFCQRZEoMvNXL
ZUPZzIjakf5eJzoFoluw2/EdV7dm/tvxaWqLbrmib37g2Oj2BJWMB7//5rbQ33xk
IpfuiUbKMKXdbgPwBLV/3kuQRrZo2I7kOMS3iSXxsJ0m2l+BzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWRInhlJP9ETToyuWuZsa55WiRZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4
YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMjhlMDFjZjctZjViZS0z
NGVmLTlkZmMtMzcxOTQzNGY5NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj
ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw
MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2
YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2kjU8EEKL0lTcV8uYb7JNJ7ky9YppWpI5aJFSO6OvikwVb7Eegoexr
7TdnnQi1t/RnH1PH78s0NfM2NbcmCFfhYNikj0IKVURdliZ0c3vWicQBG8m5o3Ke
I9B5iYi9EGrcN2MrzENUqTs8w03XuO0ieGi50lIAJ+PZyXc1ZbcQ+tFS/2ReQcHy
JY2KJF8NmidHzjjMHxeqQcnbnzj0BWX7x29Ga45aTMjHOMM7rvI2TADzq8c1nNh5
sE2qrHDTZ3cXvyn4JoMrjeTFHBfv56y4Me7+zWE/4aq92hVC56Zh2SubsSBx9MI+
cAdU2Eq0I6ug4dpdWO2ZyCTX7sTfL0U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:28 2024 by rpki-client on console-fra.rpki-client.org