Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/42244823-1279-3ab8-84e0-e62916534ec8.roa
File:                     42244823-1279-3ab8-84e0-e62916534ec8.roa (raw, json)
Hash identifier:          5u3PEA70UFnwiXzZY807LzYQZ7mw+CNiX3gx3rFxnTw=
Subject key identifier:   09:BA:73:49:C9:78:E8:E1:E9:55:FD:1B:E6:16:F4:25:01:B2:64:CC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858456CE44E28941BE615AF874B40
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/42244823-1279-3ab8-84e0-e62916534ec8.roa
Signing time:             Wed 03 Apr 2024 17:53:23 +0000
ROA not before:           Wed 03 Apr 2024 17:53:23 +0000
ROA not after:            Tue 02 Jul 2024 17:53:23 +0000
asID:                     7018
IP address blocks:        207.254.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:e4:4e:28:94:1b:e6:15:af:87:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr  3 17:53:23 2024 GMT
            Not After : Jul  2 17:53:23 2024 GMT
        Subject: CN=1bbeb33f-3dc6-4248-b63b-552fc9b22bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:9b:ef:46:a9:29:f0:02:50:bf:5f:c3:66:
                    b8:10:75:71:74:c2:00:76:f8:56:f7:c8:30:61:80:
                    67:5d:eb:49:70:18:9f:fe:e7:71:c6:9c:d8:fe:21:
                    c0:f4:d0:29:6b:c0:4c:e8:66:2a:de:0c:72:74:76:
                    aa:fa:f1:01:90:f2:75:1a:d7:17:99:fc:89:0b:26:
                    f9:dd:9d:75:28:f5:1e:99:e9:85:59:79:0d:db:4d:
                    ee:64:63:75:b2:88:1e:fd:c3:64:34:8c:6e:6b:ae:
                    e4:6f:49:c0:f7:2b:a6:32:62:77:af:f2:a3:78:30:
                    44:17:d9:29:10:1a:e1:44:0e:f3:4e:f3:c3:5f:66:
                    e8:54:27:49:d1:c4:1e:b6:48:dc:8c:4c:e1:37:5c:
                    eb:ca:5a:bc:ea:36:33:5c:27:20:85:21:c0:f6:b0:
                    72:9d:59:55:ea:8e:d5:fc:a8:91:72:43:7f:3d:40:
                    5a:34:3f:37:86:87:e2:50:39:ec:58:4b:dd:6b:64:
                    b0:fa:ee:f3:75:8c:60:c3:f4:c4:99:db:04:1d:45:
                    d9:e9:38:84:43:d1:fb:21:e4:ba:d0:62:76:6e:d9:
                    b6:4b:36:c0:9f:52:f1:3f:c2:a1:ae:8f:ed:36:ef:
                    cc:ce:08:1f:51:68:35:c1:6f:d8:27:24:57:c3:f6:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:73:49:C9:78:E8:E1:E9:55:FD:1B:E6:16:F4:25:01:B2:64:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/42244823-1279-3ab8-84e0-e62916534ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:45:a9:a8:4a:39:c7:41:87:d0:35:0b:c4:1e:aa:0b:c4:
         ce:a6:bc:be:16:d0:57:fb:cd:ea:ec:db:db:6a:75:bd:a2:41:
         26:86:68:59:62:df:13:8d:38:97:28:b2:a3:f9:98:41:25:f6:
         5e:32:4b:df:57:15:f3:ce:18:50:49:03:46:82:db:48:66:ff:
         37:0f:2c:70:97:08:bc:00:3e:cb:af:ba:f3:b8:4d:c8:35:f0:
         92:73:5e:56:3d:eb:9d:82:e6:83:f2:25:b7:78:70:a2:6a:1b:
         9e:7c:5b:f1:72:58:f5:b3:05:22:82:24:0c:8a:30:07:10:eb:
         37:37:32:d8:7d:a1:29:bb:af:7b:ad:bf:ef:3b:0c:0d:0d:2c:
         f5:d1:42:94:9f:fc:fb:0a:f8:24:50:eb:2c:5e:f8:1e:3e:2c:
         7b:61:e3:a6:22:f2:11:13:03:5e:8a:d1:d1:b7:e4:2f:9c:31:
         6e:5c:2e:d2:12:c7:84:23:d9:5a:b0:01:51:11:c8:44:e2:5d:
         6b:72:a7:c8:67:a9:cb:93:c0:0b:03:eb:5c:9a:b0:15:92:ca:
         71:b4:7b:33:1f:0a:c2:3b:5c:f0:fa:3f:10:50:40:fe:14:19:
         02:b5:d6:72:d9:b9:19:86:5a:94:d5:ab:13:14:37:64:74:37:
         1a:f5:bb:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVs5E4olBvmFa+HS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MDQwMzE3NTMyM1oXDTI0MDcwMjE3NTMyM1owLzEtMCsGA1UEAxMk
MWJiZWIzM2YtM2RjNi00MjQ4LWI2M2ItNTUyZmM5YjIyYmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZGb70apKfACUL9fw2a4EHVxdMIAdvhW98gw
YYBnXetJcBif/udxxpzY/iHA9NApa8BM6GYq3gxydHaq+vEBkPJ1GtcXmfyJCyb5
3Z11KPUememFWXkN203uZGN1soge/cNkNIxua67kb0nA9yumMmJ3r/KjeDBEF9kp
EBrhRA7zTvPDX2boVCdJ0cQetkjcjEzhN1zrylq86jYzXCcghSHA9rBynVlV6o7V
/KiRckN/PUBaND83hofiUDnsWEvda2Sw+u7zdYxgw/TEmdsEHUXZ6TiEQ9H7IeS6
0GJ2btm2SzbAn1LxP8Khro/tNu/MzggfUWg1wW/YJyRXw/beXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAm6c0nJeOjh6VX9G+YW9CUBsmTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDIyNDQ4MjMtMTI3OS0z
YWI4LTg0ZTAtZTYyOTE2NTM0ZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/5ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6sRamoSjnHQYfQNQvEHqoLxM6mvL4W0Ff7zers29tqdb2iQSaGaFli
3xONOJcosqP5mEEl9l4yS99XFfPOGFBJA0aC20hm/zcPLHCXCLwAPsuvuvO4Tcg1
8JJzXlY9652C5oPyJbd4cKJqG558W/FyWPWzBSKCJAyKMAcQ6zc3Mth9oSm7r3ut
v+87DA0NLPXRQpSf/PsK+CRQ6yxe+B4+LHth46Yi8hETA16K0dG35C+cMW5cLtIS
x4Qj2VqwAVERyETiXWtyp8hnqcuTwAsD61yasBWSynG0ezMfCsI7XPD6PxBQQP4U
GQK11nLZuRmGWpTVqxMUN2R0Nxr1ux8=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:37 2024 by rpki-client on console-ams.rpki-client.org