Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
File:                     ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa (raw, json)
Hash identifier:          U0/BiPfkMjOmDrWMBca/NciBAao6Ud4gbjS4z+zkRpI=
Subject key identifier:   8A:DF:D7:E8:AF:F9:32:41:8D:26:87:6E:C9:93:B8:4B:2A:F8:67:E7
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584574B31CC5888D87F4B4040E00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     3491
IP address blocks:        207.176.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:1c:c5:88:8d:87:f4:b4:04:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=0b9a197b-05dc-4aaa-bb7f-fd86f193046e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:aa:5e:5d:8a:ec:29:ec:55:93:d5:1b:2c:
                    1a:7c:f3:95:a3:ad:39:53:0b:fc:a6:68:57:c6:43:
                    c8:60:66:fb:96:1c:c8:31:ae:80:d5:72:8c:09:7b:
                    5a:cc:0f:8f:b5:a2:09:34:fe:d6:fd:81:64:e1:d6:
                    6d:74:57:cb:28:70:73:b0:f7:84:69:69:86:6d:4c:
                    af:5c:d8:99:a3:af:20:29:07:ee:f2:f9:02:65:94:
                    21:fa:5e:b5:23:13:60:84:35:8b:24:cf:a0:3f:2e:
                    a5:20:d1:b6:2a:3f:62:8f:74:a0:bb:99:1f:77:46:
                    a6:21:02:d3:55:d5:88:45:9e:86:01:26:b8:ff:bf:
                    29:74:6a:49:b8:21:32:4b:b5:fc:a6:f1:03:22:6d:
                    94:27:44:29:82:cd:73:59:e0:44:a4:88:04:30:97:
                    67:2a:00:a6:11:2f:54:2c:a8:58:63:3e:01:30:a1:
                    95:96:68:ba:36:7a:1f:9f:b8:e6:53:96:88:af:df:
                    c2:b3:25:72:db:f4:d7:08:d6:6c:2f:41:2d:8a:93:
                    e9:19:c3:0a:33:b4:d4:86:54:ea:f8:f2:44:35:55:
                    f7:24:8b:77:ac:36:d7:3b:36:5c:e1:6b:b1:7a:41:
                    83:2c:30:54:a1:a4:95:f0:71:1b:a2:1f:52:bb:12:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DF:D7:E8:AF:F9:32:41:8D:26:87:6E:C9:93:B8:4B:2A:F8:67:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:a1:a4:ec:f4:1e:b6:ef:78:4f:73:f5:06:1f:df:8d:e6:
         c3:b7:18:2a:b6:d2:f7:48:28:36:05:41:f1:ba:54:e1:93:f1:
         f2:db:73:c4:0a:b9:0d:50:44:54:02:01:45:6b:d9:19:09:45:
         82:53:5a:e2:fa:90:e3:a0:b6:ca:10:48:ca:a7:69:db:b1:d2:
         86:24:37:3f:b6:68:50:42:46:03:81:84:79:e6:e9:36:2c:b4:
         c6:8d:6d:18:28:b1:e6:f4:82:e5:0d:3d:b6:8d:c8:8f:cd:dc:
         2c:1d:7a:b3:f8:98:d5:da:5f:d3:39:32:28:89:59:41:94:fc:
         aa:e5:87:6b:9d:74:9d:46:c7:74:55:56:d5:e4:e8:2f:b2:2c:
         70:8d:9c:f6:72:30:10:13:7b:c2:57:d7:aa:34:8f:e0:02:90:
         af:e3:dc:f9:a4:77:46:cb:b3:5d:a1:63:3b:b9:c2:25:da:f2:
         7e:96:12:72:bf:72:c6:df:52:46:cc:85:d1:07:64:44:f4:57:
         a4:3a:97:32:e6:1c:52:e3:1c:79:86:ad:83:c4:26:e2:97:4a:
         59:f7:76:96:96:4c:84:30:13:e4:01:92:89:78:4e:78:ee:44:
         bb:db:2f:39:cd:2e:25:74:65:f9:98:e5:29:90:45:e1:05:c6:
         68:bd:40:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0sxzFiI2H9LQEDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk
MGI5YTE5N2ItMDVkYy00YWFhLWJiN2YtZmQ4NmYxOTMwNDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1GqXl2K7CnsVZPVGywafPOVo605Uwv8pmhX
xkPIYGb7lhzIMa6A1XKMCXtazA+PtaIJNP7W/YFk4dZtdFfLKHBzsPeEaWmGbUyv
XNiZo68gKQfu8vkCZZQh+l61IxNghDWLJM+gPy6lING2Kj9ij3Sgu5kfd0amIQLT
VdWIRZ6GASa4/78pdGpJuCEyS7X8pvEDIm2UJ0Qpgs1zWeBEpIgEMJdnKgCmES9U
LKhYYz4BMKGVlmi6Nnofn7jmU5aIr9/CsyVy2/TXCNZsL0EtipPpGcMKM7TUhlTq
+PJENVX3JIt3rDbXOzZc4WuxekGDLDBUoaSV8HEboh9SuxJ+BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrf1+iv+TJBjSaHbsmTuEsq+GfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZWYyYWMzNDUtY2UyZi0z
MDgxLWIxMGUtODI4OWMzYmY5OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz7AAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9goaTs9B6273hPc/UGH9+N5sO3GCq20vdIKDYFQfG6VOGT8fLbc8QK
uQ1QRFQCAUVr2RkJRYJTWuL6kOOgtsoQSMqnadux0oYkNz+2aFBCRgOBhHnm6TYs
tMaNbRgoseb0guUNPbaNyI/N3CwderP4mNXaX9M5MiiJWUGU/Krlh2uddJ1Gx3RV
VtXk6C+yLHCNnPZyMBATe8JX16o0j+ACkK/j3Pmkd0bLs12hYzu5wiXa8n6WEnK/
csbfUkbMhdEHZET0V6Q6lzLmHFLjHHmGrYPEJuKXSln3dpaWTIQwE+QBkol4Tnju
RLvbLznNLiV0ZfmY5SmQReEFxmi9QAk=
-----END CERTIFICATE-----
Generated at Tue May 7 21:45:30 2024 by rpki-client on console-fra.rpki-client.org