Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa
File:                     e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa (raw, json)
Hash identifier:          2Sz7CFH/BCIiEp1Ud4GIkmP9j496bpBqYWtOL3FmHp8=
Subject key identifier:   C3:CE:2B:AC:16:2F:5A:41:4D:98:20:90:E1:57:D8:6F:5A:67:DC:A3
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858490E16C7076F17A4413F9BBC20
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     271
IP address blocks:        207.23.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c7:07:6f:17:a4:41:3f:9b:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=cb83967c-8459-499a-9c0f-c60326112b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:61:5e:88:ed:e7:ab:3d:b5:ca:84:a4:da:
                    49:40:2b:28:10:51:28:81:d6:78:04:11:3d:d4:6c:
                    82:b5:5a:85:2d:6c:28:d5:f4:39:77:6c:e1:5f:96:
                    6c:9b:82:22:d8:df:f0:fa:bb:e6:a2:0a:69:88:1b:
                    8b:e6:2c:8e:f1:4e:ad:63:c7:43:70:ea:98:a8:c2:
                    36:2b:dc:d7:5e:91:20:80:de:ab:b0:5f:66:ea:41:
                    4a:f2:6b:b3:96:8d:81:ca:4a:dc:70:30:dd:03:c0:
                    07:02:74:c9:d8:b4:87:f7:07:44:63:80:1d:12:2c:
                    df:8c:b0:b0:ac:44:91:53:1f:6f:0a:fb:fa:c4:28:
                    73:80:e6:61:b5:f9:4e:b1:28:65:d0:56:13:e7:f9:
                    25:83:ad:b3:d8:05:de:d7:cc:cc:ae:bc:91:c0:56:
                    85:13:f3:bd:7f:b1:44:03:63:24:a7:28:6a:ca:6e:
                    1f:bd:c4:ba:0b:4f:ad:88:00:29:e2:10:74:96:65:
                    45:67:1a:01:02:06:83:78:b9:dc:9c:cd:52:0a:4a:
                    79:85:7d:b7:b5:73:0b:a3:b6:9e:c4:bd:2c:03:ae:
                    90:5b:f0:10:0e:b6:27:0d:c7:d7:48:4b:ee:b5:47:
                    fb:25:d0:8d:f4:3e:f5:a2:f6:fa:68:ec:95:e3:c2:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CE:2B:AC:16:2F:5A:41:4D:98:20:90:E1:57:D8:6F:5A:67:DC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5e26dd5-767a-3832-ab6b-f5c46dbf00a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:38:20:06:05:44:0f:e8:c7:a3:46:ce:0d:81:44:58:6b:26:
         5a:4f:62:6e:40:13:f9:8e:af:34:0a:17:5a:9d:fe:99:9f:31:
         f4:d8:a2:10:0b:b7:28:fa:b0:86:65:dc:3c:8e:88:0d:fc:bc:
         e0:7c:fc:2a:c7:cf:0b:17:08:33:8b:ff:4b:b6:c7:37:e4:6a:
         6f:dd:2d:f6:f4:27:63:a5:8e:4c:98:22:11:03:c5:a9:66:fc:
         3c:bd:b8:f8:fa:36:8a:fa:78:08:cd:06:33:6a:6a:c2:63:39:
         28:95:26:0f:12:15:a0:3b:9d:79:0a:b4:2a:6c:56:c1:73:92:
         3b:e8:5d:7c:fb:a1:ae:a3:d6:8e:ad:09:ed:0c:94:6c:21:7d:
         91:4f:e1:3d:7f:d4:70:cf:e7:5c:ee:21:cf:c9:af:5d:52:a7:
         05:ad:df:75:66:12:e2:5b:95:7c:c8:bd:1d:5a:37:b0:4e:3f:
         2b:88:e1:8d:83:09:64:73:be:15:fa:0f:86:0f:67:89:3d:4f:
         63:3a:58:0b:1b:70:a6:f3:f9:13:7c:23:bd:fb:5d:a9:2c:e1:
         61:6a:59:5a:43:90:eb:7a:63:78:55:76:98:27:7c:a7:ba:6f:
         65:e4:8c:c9:99:3b:70:af:00:66:8f:66:71:e5:da:a0:10:e5:
         b8:9d:e1:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFscHbxekQT+bvCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2I4Mzk2N2MtODQ1OS00OTlhLTljMGYtYzYwMzI2MTEyYjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwJhXojt56s9tcqEpNpJQCsoEFEogdZ4BBE9
1GyCtVqFLWwo1fQ5d2zhX5Zsm4Ii2N/w+rvmogppiBuL5iyO8U6tY8dDcOqYqMI2
K9zXXpEggN6rsF9m6kFK8muzlo2BykrccDDdA8AHAnTJ2LSH9wdEY4AdEizfjLCw
rESRUx9vCvv6xChzgOZhtflOsShl0FYT5/klg62z2AXe18zMrryRwFaFE/O9f7FE
A2Mkpyhqym4fvcS6C0+tiAAp4hB0lmVFZxoBAgaDeLncnM1SCkp5hX23tXMLo7ae
xL0sA66QW/AQDrYnDcfXSEvutUf7JdCN9D71ovb6aOyV48LYLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPOK6wWL1pBTZggkOFX2G9aZ9yjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZTVlMjZkZDUtNzY3YS0z
ODMyLWFiNmItZjVjNDZkYmYwMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQ4IAYFRA/ox6NGzg2BRFhrJlpPYm5AE/mOrzQKF1qd/pmfMfTYohAL
tyj6sIZl3DyOiA38vOB8/CrHzwsXCDOL/0u2xzfkam/dLfb0J2OljkyYIhEDxalm
/Dy9uPj6Nor6eAjNBjNqasJjOSiVJg8SFaA7nXkKtCpsVsFzkjvoXXz7oa6j1o6t
Ce0MlGwhfZFP4T1/1HDP51zuIc/Jr11SpwWt33VmEuJblXzIvR1aN7BOPyuI4Y2D
CWRzvhX6D4YPZ4k9T2M6WAsbcKbz+RN8I737Xaks4WFqWVpDkOt6Y3hVdpgnfKe6
b2XkjMmZO3CvAGaPZnHl2qAQ5bid4cI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:51:41 2025 by rpki-client