Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa
File:                     0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa (raw, json)
Hash identifier:          KdYK9A1lE2ibxjmD4rh9wFVSPXKrBHiFq+EjFt0luVw=
Subject key identifier:   59:EF:15:77:35:97:7B:5B:4F:00:08:0F:F3:AB:14:9C:98:73:95:10
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF4397A176057682B2BBE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        207.219.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:43:97:a1:76:05:76:82:b2:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=da1be33b-b77a-483c-9a7c-998cb8a6b2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f4:ed:7c:50:ae:23:9d:21:37:cc:99:d4:cd:
                    63:e2:87:5c:f1:19:02:f1:82:1f:86:a3:38:de:e4:
                    1b:4a:11:69:1a:d7:7c:33:e5:85:07:75:ef:36:ae:
                    cf:66:ad:d2:ef:d0:02:cb:11:b1:41:a3:ff:dd:a1:
                    1a:50:81:2e:d3:ae:62:0c:29:86:52:bf:41:ca:5b:
                    50:4e:ba:b0:b1:5e:ed:67:31:a1:ab:7e:f0:6c:3f:
                    22:09:94:30:14:ac:c8:9f:24:c3:88:60:ab:ae:6a:
                    d1:c0:e3:be:61:0e:09:e9:32:4a:cf:a4:a9:36:9c:
                    b2:78:8f:48:11:85:72:79:e3:a8:4a:89:50:40:4f:
                    2c:98:38:db:9a:de:17:f3:91:d8:d6:60:52:d2:6d:
                    50:8f:cd:d7:e2:58:15:38:91:d1:d6:15:20:62:18:
                    0d:35:71:f4:09:94:dd:cf:26:da:f8:7d:0d:4f:6b:
                    00:8a:4f:ab:70:a1:b7:cb:16:c2:69:49:d1:2c:43:
                    d2:70:b8:44:71:dc:a6:7b:fb:c7:ff:c5:a3:5d:66:
                    8b:94:1a:4e:67:29:3b:37:33:38:42:f6:7c:04:61:
                    0e:8f:9f:47:41:58:08:81:9b:a0:b6:1d:7e:6e:db:
                    28:63:d4:61:19:89:b2:2e:a1:c6:ca:b1:e4:35:fe:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:15:77:35:97:7B:5B:4F:00:08:0F:F3:AB:14:9C:98:73:95:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:79:5a:41:45:7b:39:e8:a5:1e:5e:53:7e:7d:65:af:47:11:
         9c:bf:57:c6:85:22:aa:f2:89:cf:62:4d:ad:60:2f:79:d9:7c:
         cf:25:bb:74:1d:30:e4:ff:d6:5d:2e:30:c0:5c:03:fa:da:17:
         69:09:3a:b7:fd:34:d2:03:66:61:10:45:9e:ed:2d:7b:bc:3b:
         ef:8b:19:32:91:c3:22:32:b7:1d:4d:92:00:a2:fa:e3:2a:74:
         eb:a7:ec:5e:bf:0c:1d:da:4f:b2:b6:22:05:3a:b0:eb:91:b4:
         09:06:c2:d0:ed:c6:7a:f1:cd:96:05:f1:be:38:38:d8:e9:99:
         ae:a9:7b:64:9d:98:a3:23:44:a2:a3:e4:c8:16:0d:a1:df:b3:
         c8:93:e1:74:e6:7b:51:b6:b5:9d:67:7c:58:02:df:6f:b9:b1:
         c7:84:11:e4:67:a1:b6:9f:19:ca:4e:4b:9a:b0:10:23:4f:44:
         c6:12:53:f2:43:04:10:c8:34:4a:de:0d:ea:73:e1:96:09:5f:
         7c:f4:ae:ac:f7:9c:2e:85:a7:e1:d8:dd:10:69:82:45:b4:8f:
         29:04:ca:2a:51:59:7c:bf:6f:aa:13:c7:be:50:6f:2d:08:54:
         2f:02:06:83:2c:b5:6f:ca:0e:63:16:1e:02:a5:3d:36:66:79:
         59:17:f6:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0OXoXYFdoKyu+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk
ZGExYmUzM2ItYjc3YS00ODNjLTlhN2MtOTk4Y2I4YTZiMmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PTtfFCuI50hN8yZ1M1j4odc8RkC8YIfhqM4
3uQbShFpGtd8M+WFB3XvNq7PZq3S79ACyxGxQaP/3aEaUIEu065iDCmGUr9ByltQ
TrqwsV7tZzGhq37wbD8iCZQwFKzInyTDiGCrrmrRwOO+YQ4J6TJKz6SpNpyyeI9I
EYVyeeOoSolQQE8smDjbmt4X85HY1mBS0m1Qj83X4lgVOJHR1hUgYhgNNXH0CZTd
zyba+H0NT2sAik+rcKG3yxbCaUnRLEPScLhEcdyme/vH/8WjXWaLlBpOZyk7NzM4
QvZ8BGEOj59HQVgIgZugth1+btsoY9RhGYmyLqHGyrHkNf5tEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnvFXc1l3tbTwAID/OrFJyYc5UQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMGMyY2YzM2QtYjllNy0z
Y2M1LWJkMWEtMWRjOWU1NGFkZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9v3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMJ5WkFFeznopR5eU359Za9HEZy/V8aFIqryic9iTa1gL3nZfM8lu3Qd
MOT/1l0uMMBcA/raF2kJOrf9NNIDZmEQRZ7tLXu8O++LGTKRwyIytx1NkgCi+uMq
dOun7F6/DB3aT7K2IgU6sOuRtAkGwtDtxnrxzZYF8b44ONjpma6pe2SdmKMjRKKj
5MgWDaHfs8iT4XTme1G2tZ1nfFgC32+5sceEEeRnobafGcpOS5qwECNPRMYSU/JD
BBDINEreDepz4ZYJX3z0rqz3nC6Fp+HY3RBpgkW0jykEyipRWXy/b6oTx75Qby0I
VC8CBoMstW/KDmMWHgKlPTZmeVkX9qo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:54 2024 by rpki-client on console-fra.rpki-client.org