Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/1a822607-4eb6-348d-a583-ce8fe84932bb.roa
File:                     1a822607-4eb6-348d-a583-ce8fe84932bb.roa (raw, json)
Hash identifier:          xu/Gy7Xsw1wdo+givmOwBxyXQWRgvxZ30W2EdyuCO9A=
Subject key identifier:   23:D4:FB:B4:99:8F:59:77:28:28:BC:BD:A3:16:12:95:03:8C:EE:9D
Certificate issuer:       /CN=88390227-7474-42cc-ab77-86c936657096
Certificate serial:       010D0C9F432858473095E077FD6BBFD334F03440
Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/1a822607-4eb6-348d-a583-ce8fe84932bb.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     17157
IP address blocks:        207.230.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e0:77:fd:6b:bf:d3:34:f0:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88390227-7474-42cc-ab77-86c936657096
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=d46e7f56-dc46-4221-8b0a-aa5cadf06e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:36:58:fd:f4:ac:34:7f:ff:21:04:22:3f:
                    a1:f5:3f:b3:34:76:38:f4:50:26:60:a0:44:85:be:
                    06:62:7d:39:54:e6:aa:23:04:c4:d7:33:e7:b7:a2:
                    53:be:47:1e:7b:6f:9e:6f:16:7a:d4:bc:f4:9c:65:
                    28:ec:76:8e:2b:e7:91:f6:fc:1b:84:21:46:08:ce:
                    be:a6:a9:8b:fb:45:40:39:ee:47:80:98:53:66:2e:
                    d4:a9:26:27:e4:e2:6c:f4:c6:9f:5c:5b:6a:56:48:
                    d0:af:cc:ad:8c:59:ac:c9:76:b4:66:83:4f:81:7f:
                    d6:08:4e:ec:75:eb:6c:3d:07:8a:a8:21:aa:47:ad:
                    6e:4d:36:65:87:0a:cb:d7:d3:18:0c:0f:f4:df:f8:
                    16:1a:1e:72:35:d1:af:dd:21:56:6c:c5:45:7a:8d:
                    40:c0:62:67:57:09:e6:0e:f9:c8:8a:83:10:2b:6d:
                    7c:45:0d:47:58:f1:1d:2a:fb:ba:e3:aa:14:21:ba:
                    21:d9:e5:70:2e:e2:4a:43:9c:b4:f1:44:d4:46:d1:
                    85:be:05:76:1f:6b:20:e5:bc:aa:be:11:9c:30:82:
                    6b:7b:db:6b:3e:0f:9b:4f:aa:33:79:a2:72:97:1e:
                    eb:50:68:4d:0a:0a:45:1c:32:96:4a:a8:a4:cc:b0:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D4:FB:B4:99:8F:59:77:28:28:BC:BD:A3:16:12:95:03:8C:EE:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/1a822607-4eb6-348d-a583-ce8fe84932bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:37:49:67:c3:fd:cc:09:6a:98:fb:bc:8b:c8:b5:b9:50:94:
         a6:a5:5a:f5:ae:39:0d:29:16:78:d2:64:13:e1:3d:42:0b:5c:
         dd:b6:38:c0:a3:84:27:35:c3:86:eb:47:4a:f4:7a:ac:62:af:
         21:14:50:9b:b1:be:35:f8:a2:61:d5:8a:71:f5:f8:e2:5c:e4:
         b9:a4:ff:a7:a0:b1:4e:99:52:47:80:1d:75:35:73:a0:a3:0c:
         36:cb:06:ed:a4:60:df:38:0d:74:a1:e8:c2:93:59:65:f3:87:
         f8:bb:14:c8:fc:66:a6:39:e2:2d:f1:c6:6e:e2:e2:04:71:fe:
         3f:1c:d1:b4:c4:38:08:86:2c:ab:b4:bc:9c:01:d2:33:33:fd:
         66:cf:53:71:64:02:89:65:17:52:d5:4f:81:64:05:ef:cc:58:
         e8:c3:a2:03:fe:89:00:a7:63:84:5d:73:f5:b0:3a:fd:43:98:
         69:4a:6b:57:dd:2a:37:a7:f4:d7:6d:44:2b:0e:01:21:30:ed:
         0b:b0:17:3f:93:00:0c:19:64:ea:aa:7e:9f:35:a8:b9:ba:7b:
         77:9e:39:4e:60:d9:49:30:14:6c:44:bf:86:12:30:a9:9f:9e:
         fb:f9:66:5b:0f:fb:39:95:cb:da:1f:3f:40:fc:49:ae:b9:e7:
         70:c9:45:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwleB3/Wu/0zTwNEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODgzOTAyMjctNzQ3NC00MmNjLWFiNzctODZjOTM2NjU3
MDk2MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZDQ2ZTdmNTYtZGM0Ni00MjIxLThiMGEtYWE1Y2FkZjA2ZTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA42WP30rDR//yEEIj+h9T+zNHY49FAmYKBE
hb4GYn05VOaqIwTE1zPnt6JTvkcee2+ebxZ61Lz0nGUo7HaOK+eR9vwbhCFGCM6+
pqmL+0VAOe5HgJhTZi7UqSYn5OJs9MafXFtqVkjQr8ytjFmsyXa0ZoNPgX/WCE7s
detsPQeKqCGqR61uTTZlhwrL19MYDA/03/gWGh5yNdGv3SFWbMVFeo1AwGJnVwnm
DvnIioMQK218RQ1HWPEdKvu646oUIboh2eVwLuJKQ5y08UTURtGFvgV2H2sg5byq
vhGcMIJre9trPg+bT6ozeaJylx7rUGhNCgpFHDKWSqikzLCUAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPU+7SZj1l3KCi8vaMWEpUDjO6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ODM5
MDIyNy03NDc0LTQyY2MtYWI3Ny04NmM5MzY2NTcwOTYvMWE4MjI2MDctNGViNi0z
NDhkLWE1ODMtY2U4ZmU4NDkzMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODgzOTAyMjctNzQ3NC00MmNjLWFi
NzctODZjOTM2NjU3MDk2Lzg4MzkwMjI3LTc0NzQtNDJjYy1hYjc3LTg2YzkzNjY1
NzA5Ni5jcmwwHwYDVR0jBBgwFoAUKsRhTdPj1zdeSrRhR8T/VdhJ0zMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ODM5MDIyNy03NDc0LTQyY2MtYWI3Ny04NmM5
MzY2NTcwOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+aeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU3SWfD/cwJapj7vIvItblQlKalWvWuOQ0pFnjSZBPhPUILXN22OMCj
hCc1w4brR0r0eqxiryEUUJuxvjX4omHVinH1+OJc5Lmk/6egsU6ZUkeAHXU1c6Cj
DDbLBu2kYN84DXSh6MKTWWXzh/i7FMj8ZqY54i3xxm7i4gRx/j8c0bTEOAiGLKu0
vJwB0jMz/WbPU3FkAollF1LVT4FkBe/MWOjDogP+iQCnY4Rdc/WwOv1DmGlKa1fd
Kjen9NdtRCsOASEw7QuwFz+TAAwZZOqqfp81qLm6e3eeOU5g2UkwFGxEv4YSMKmf
nvv5ZlsP+zmVy9ofP0D8Sa6553DJRYk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:16 2024 by rpki-client on console-fra.rpki-client.org