Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
File:                     8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa (raw, json)
Hash identifier:          7PV1KrcjF5y0r1L/PscYedZ3SI2rmwqBhpd1PL2RyPs=
Subject key identifier:   FE:66:94:5D:D5:EE:E0:A6:C6:12:B2:6C:4E:E5:37:D2:DF:83:28:41
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285845777DC89755E7CF2F7C4E8D00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     12491
IP address blocks:        207.226.42.0/24 maxlen: 24
                          207.226.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c8:97:55:e7:cf:2f:7c:4e:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=957b221b-2dbd-4765-8a36-254dd19b5fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:48:f1:4e:6d:9b:c6:36:4c:e7:54:7f:db:
                    61:41:c5:8a:bc:21:27:6d:9e:bb:59:be:84:84:1d:
                    b6:26:e1:d8:c5:93:1d:9c:0a:c4:4f:d0:08:d5:3a:
                    62:ee:57:05:b1:c8:cc:75:d1:b4:39:8e:19:a0:38:
                    59:7d:f0:99:65:de:1f:40:fa:28:1e:d5:52:23:94:
                    b4:4d:ff:56:a0:9f:46:b2:e8:f6:5a:b7:29:0e:ad:
                    a9:ae:f9:3d:2b:ce:8f:96:31:e7:4f:c6:7e:fd:19:
                    08:2e:ad:c9:c9:e5:4d:b2:0f:d3:fc:1c:56:f7:c8:
                    54:9c:a4:ee:39:4d:c8:1f:58:5b:6d:3e:2a:de:4d:
                    63:ed:bc:50:01:f2:29:6a:9f:82:19:45:35:61:0e:
                    3f:82:84:7e:74:bd:ae:28:47:d0:36:b8:e9:24:56:
                    22:e7:bf:d5:af:2b:21:76:86:8b:f8:3e:aa:bd:2c:
                    65:3f:e6:fe:d2:85:6b:5f:87:b6:fa:3b:8c:97:ae:
                    d3:c8:a4:27:b2:92:cb:0f:60:52:14:f7:5e:6b:f3:
                    62:1d:93:87:5b:78:c0:e4:8a:80:0b:58:16:57:b0:
                    1f:3a:b7:14:25:7d:f4:ee:8d:a2:24:a3:b3:d1:c7:
                    3c:e6:7a:3f:66:19:07:62:86:8c:0a:76:70:81:d9:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:66:94:5D:D5:EE:E0:A6:C6:12:B2:6C:4E:E5:37:D2:DF:83:28:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.226.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:66:0d:0a:54:10:20:a3:0b:fb:7a:d6:fb:35:47:77:de:
         15:12:cc:3b:83:ad:db:85:a0:54:57:6e:45:90:05:04:d7:61:
         60:3c:d7:df:6a:31:11:72:96:b9:f0:d5:a7:8b:3d:d0:fc:89:
         79:e2:85:48:d8:c6:e1:9e:2d:53:f1:47:34:a9:f1:de:69:8c:
         50:47:b5:b2:c8:30:a4:70:48:5e:2c:5f:f6:55:ab:70:68:3f:
         95:5f:a5:85:53:3d:b0:e8:fc:ed:7f:a8:8b:89:23:26:d7:e2:
         80:99:e7:42:37:12:03:39:51:ce:df:d8:7b:e2:d7:3a:42:fc:
         fa:e9:73:7e:00:19:66:93:da:31:2c:df:2f:3c:ad:a1:c9:cc:
         69:6b:88:7c:c2:1f:15:17:45:67:d6:3f:c2:18:50:f3:56:ba:
         f3:01:0f:4c:0e:aa:97:01:cd:2c:a4:20:11:5c:28:6f:55:14:
         b7:c7:2a:a6:5a:ee:fd:a8:42:26:39:13:e7:fc:6e:75:04:0e:
         7e:a1:f3:e4:02:b7:91:85:05:7a:e5:fb:cb:74:6c:db:7d:0b:
         fc:55:fc:6c:96:bc:b8:64:25:03:c2:de:3d:8c:c3:6a:e5:f2:
         fd:96:f0:38:ce:56:a0:6f:45:6a:9f:a3:0a:2a:da:65:e6:2f:
         90:f2:48:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fciXVefPL3xOjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
OTU3YjIyMWItMmRiZC00NzY1LThhMzYtMjU0ZGQxOWI1ZmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PpI8U5tm8Y2TOdUf9thQcWKvCEnbZ67Wb6E
hB22JuHYxZMdnArET9AI1Tpi7lcFscjMddG0OY4ZoDhZffCZZd4fQPooHtVSI5S0
Tf9WoJ9Gsuj2WrcpDq2prvk9K86PljHnT8Z+/RkILq3JyeVNsg/T/BxW98hUnKTu
OU3IH1hbbT4q3k1j7bxQAfIpap+CGUU1YQ4/goR+dL2uKEfQNrjpJFYi57/Vrysh
doaL+D6qvSxlP+b+0oVrX4e2+juMl67TyKQnspLLD2BSFPdea/NiHZOHW3jA5IqA
C1gWV7AfOrcUJX307o2iJKOz0cc85no/ZhkHYoaMCnZwgdmjtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5mlF3V7uCmxhKybE7lN9LfgyhBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvOGY5ODc3MTctMWMwZC0z
ZjI0LTk2ZjktOGVkMWU3ZjcwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz+IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYsZg0KVBAgowv7etb7NUd33hUSzDuDrduFoFRXbkWQBQTXYWA8199q
MRFylrnw1aeLPdD8iXnihUjYxuGeLVPxRzSp8d5pjFBHtbLIMKRwSF4sX/ZVq3Bo
P5VfpYVTPbDo/O1/qIuJIybX4oCZ50I3EgM5Uc7f2Hvi1zpC/Prpc34AGWaT2jEs
3y88raHJzGlriHzCHxUXRWfWP8IYUPNWuvMBD0wOqpcBzSykIBFcKG9VFLfHKqZa
7v2oQiY5E+f8bnUEDn6h8+QCt5GFBXrl+8t0bNt9C/xV/GyWvLhkJQPC3j2Mw2rl
8v2W8DjOVqBvRWqfowoq2mXmL5DySO8=
-----END CERTIFICATE-----
Generated at Wed May 8 17:58:28 2024 by rpki-client on console-ams.rpki-client.org