Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/95484f04-e937-3a18-b165-2021eed0b4b6.roa
File:                     95484f04-e937-3a18-b165-2021eed0b4b6.roa (raw, json)
Hash identifier:          zYE4syDLEnsn9jss+owmtHerHyUZ6hEHOQVgWg0nxsY=
Subject key identifier:   2B:85:70:BF:4C:07:5F:07:62:A1:9A:DE:1B:01:52:50:92:CC:9F:84
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858455FC2FD2455C7F5F4F4BC7E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/95484f04-e937-3a18-b165-2021eed0b4b6.roa
Signing time:             Sat 30 Mar 2024 01:00:26 +0000
ROA not before:           Sat 30 Mar 2024 01:00:26 +0000
ROA not after:            Fri 28 Jun 2024 01:00:26 +0000
asID:                     17359
IP address blocks:        208.92.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5f:c2:fd:24:55:c7:f5:f4:f4:bc:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 30 01:00:26 2024 GMT
            Not After : Jun 28 01:00:26 2024 GMT
        Subject: CN=464c7047-ef03-4cae-926c-7f9e43d7d30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:e5:cc:94:4d:12:5a:7a:9d:4b:f5:5c:9b:
                    9e:c2:87:fc:be:d5:2b:74:19:a4:03:ad:a8:ea:16:
                    f8:ad:f8:c9:71:f9:2c:ae:ae:07:14:86:48:05:76:
                    19:d0:59:84:9b:12:11:ac:a5:7b:28:41:30:79:5f:
                    7e:5a:51:e1:84:ef:1a:39:21:06:0c:0a:ea:71:d6:
                    57:b0:4b:35:a6:32:81:c1:d0:e8:ef:a7:3c:0f:f3:
                    64:d1:1e:03:d4:49:df:c3:60:66:09:05:c6:18:95:
                    f6:cd:82:3a:eb:f5:d8:46:ff:dc:89:72:28:05:35:
                    94:db:8a:15:98:34:3f:78:57:27:97:9c:e8:7d:8b:
                    84:cb:30:66:af:c2:0d:5c:57:22:f1:61:9a:ba:54:
                    0b:75:fb:2a:3a:82:4e:69:f0:7f:46:66:c0:89:02:
                    60:f1:b8:08:dc:57:5b:df:aa:5e:8e:31:a1:58:9a:
                    cc:83:de:3a:a9:67:5b:09:78:f7:9f:45:2a:cd:7e:
                    63:f8:6c:48:83:a7:0b:e7:ae:1f:d5:c9:e1:c2:72:
                    8d:e4:22:58:2d:bc:55:a1:95:fb:43:df:e4:8f:da:
                    75:4f:57:d1:ed:26:a8:60:bf:bc:40:2c:01:58:74:
                    32:04:56:cf:8e:5a:2a:92:fb:64:27:61:0d:d4:7e:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:85:70:BF:4C:07:5F:07:62:A1:9A:DE:1B:01:52:50:92:CC:9F:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/95484f04-e937-3a18-b165-2021eed0b4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:cb:c0:01:46:36:fa:5a:d4:05:9f:8d:bd:5c:05:2b:7b:b3:
         c8:3d:db:90:66:d4:d3:6a:18:ea:d5:b9:94:e5:00:33:20:7e:
         08:0e:27:ea:3d:bb:f1:ad:5e:e7:bc:1e:b3:63:5e:94:02:aa:
         ca:65:22:4c:14:2d:07:7f:b8:57:ae:88:95:cb:c3:b3:c6:fe:
         14:63:d7:3f:34:f8:e2:2a:e4:46:d6:8b:ec:a0:0d:08:90:e1:
         ab:b8:15:1a:c7:67:20:5f:99:6c:4b:14:3a:3d:01:11:7b:38:
         24:3a:dc:06:7f:0d:96:1a:d1:7b:f2:28:fb:80:bc:c4:9e:cd:
         18:6b:c5:63:89:47:de:9d:21:24:3c:7b:24:92:29:4a:0a:87:
         33:cf:9b:b9:35:ed:a5:15:f4:6c:0d:01:49:1d:c6:30:fd:01:
         fe:81:ac:73:ae:cd:48:f0:ae:4b:81:9f:cd:cc:8b:55:88:21:
         fa:6e:91:05:ae:3c:2c:9b:85:2b:8d:75:04:fd:38:9b:4d:b0:
         f2:2c:ad:e5:66:51:0b:7a:00:c8:46:ac:06:06:60:57:0d:df:
         35:64:1c:0f:20:db:91:22:16:68:35:47:b6:f9:5b:59:36:29:
         86:56:e5:9f:44:3f:1c:d9:e3:38:0a:62:00:48:27:0c:3d:0e:
         a4:4d:5f:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVfwv0kVcf19PS8foAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MDMzMDAxMDAyNloXDTI0MDYyODAxMDAyNlowLzEtMCsGA1UEAxMk
NDY0YzcwNDctZWYwMy00Y2FlLTkyNmMtN2Y5ZTQzZDdkMzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgzlzJRNElp6nUv1XJuewof8vtUrdBmkA62o
6hb4rfjJcfksrq4HFIZIBXYZ0FmEmxIRrKV7KEEweV9+WlHhhO8aOSEGDArqcdZX
sEs1pjKBwdDo76c8D/Nk0R4D1Enfw2BmCQXGGJX2zYI66/XYRv/ciXIoBTWU24oV
mDQ/eFcnl5zofYuEyzBmr8INXFci8WGaulQLdfsqOoJOafB/RmbAiQJg8bgI3Fdb
36pejjGhWJrMg946qWdbCXj3n0UqzX5j+GxIg6cL564f1cnhwnKN5CJYLbxVoZX7
Q9/kj9p1T1fR7SaoYL+8QCwBWHQyBFbPjloqkvtkJ2EN1H5+zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCuFcL9MB18HYqGa3hsBUlCSzJ+EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOTU0ODRmMDQtZTkzNy0z
YTE4LWIxNjUtMjAyMWVlZDBiNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FzPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIzLwAFGNvpa1AWfjb1cBSt7s8g925Bm1NNqGOrVuZTlADMgfggOJ+o9
u/GtXue8HrNjXpQCqsplIkwULQd/uFeuiJXLw7PG/hRj1z80+OIq5EbWi+ygDQiQ
4au4FRrHZyBfmWxLFDo9ARF7OCQ63AZ/DZYa0XvyKPuAvMSezRhrxWOJR96dISQ8
eySSKUoKhzPPm7k17aUV9GwNAUkdxjD9Af6BrHOuzUjwrkuBn83Mi1WIIfpukQWu
PCybhSuNdQT9OJtNsPIsreVmUQt6AMhGrAYGYFcN3zVkHA8g25EiFmg1R7b5W1k2
KYZW5Z9EPxzZ4zgKYgBIJww9DqRNX7U=
-----END CERTIFICATE-----
Generated at Fri May 10 17:25:08 2024 by rpki-client on console-fra.rpki-client.org