Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa
File:                     78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa (raw, json)
Hash identifier:          EC4iC8hOPoCyvDPkRLE9Xx/2WrB8ciGYDgeFhwlt6l0=
Subject key identifier:   87:CA:1C:B7:E4:4C:32:D6:CF:62:A7:2B:B8:7A:D1:5D:00:68:B4:93
Certificate issuer:       /CN=22a89d78-807f-48bb-8913-4e15f4878bfb
Certificate serial:       010D0C9F43285845AC88BF817960D75E273D8B00
Authority key identifier: 41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     13786
IP address blocks:        207.135.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:bf:81:79:60:d7:5e:27:3d:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a89d78-807f-48bb-8913-4e15f4878bfb
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=3fc2190c-af70-40c4-802e-1e1a87525474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ed:9b:20:18:00:01:44:c7:46:3d:d9:83:61:
                    c3:1d:22:2b:38:4e:01:9c:a2:55:b7:84:ac:61:03:
                    6b:37:c5:84:c7:e7:9c:03:5b:fa:55:8d:1f:77:7c:
                    1a:f8:9d:e7:23:70:96:b6:cf:95:fb:97:cb:aa:cc:
                    39:1a:e5:00:67:02:ef:23:a7:50:28:a1:ae:bf:1b:
                    63:91:0f:c1:da:65:ca:30:3c:3f:24:1e:bf:9a:69:
                    53:1f:93:72:7a:63:4a:57:12:95:02:e4:97:06:cf:
                    1d:f0:b1:34:56:de:08:5f:09:57:c2:f8:45:73:44:
                    52:47:08:80:ab:6a:21:84:40:17:3e:49:90:99:24:
                    f8:ac:af:16:6a:99:6a:66:4d:2a:01:c3:cc:f5:6c:
                    bf:c4:3b:11:f2:81:28:36:18:17:aa:81:c5:ee:66:
                    cd:09:fa:3e:c8:f0:3d:2f:88:f2:ea:99:f2:da:99:
                    12:90:47:7f:4e:7c:72:6c:c1:3e:c3:8d:d5:82:41:
                    06:1b:55:1f:70:47:f2:98:46:e6:b5:63:20:1b:f0:
                    f7:71:bf:af:ec:39:b7:1e:81:ed:b7:f4:cc:9a:b4:
                    85:67:aa:f3:58:ad:60:e5:6a:14:85:fb:ab:42:57:
                    e6:ef:e5:9c:c0:75:71:71:e7:df:39:3e:57:db:9a:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CA:1C:B7:E4:4C:32:D6:CF:62:A7:2B:B8:7A:D1:5D:00:68:B4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl

            X509v3 Authority Key Identifier:
                keyid:41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:44:6a:74:1a:05:47:9f:e9:ec:e7:a6:2d:4c:6e:00:9a:
         6b:2b:85:54:59:66:1f:62:e2:25:34:f6:71:87:19:d5:7a:06:
         65:39:b2:d5:b4:d0:24:92:0f:75:be:cd:8e:80:68:9d:e4:b9:
         20:b0:e3:d5:5b:30:9c:50:78:bb:6f:c9:40:ce:2f:11:ff:47:
         45:e3:2f:d5:63:e8:9f:6f:d2:84:a9:b7:d4:77:a4:c2:94:fd:
         73:1d:72:24:66:c3:fb:d8:1a:93:f4:82:0a:ef:77:c1:4d:2e:
         78:dd:dc:4c:01:d1:ae:c0:d5:4a:c6:ac:06:93:fa:66:03:66:
         14:13:dc:10:14:c3:cd:68:c0:0e:e5:2a:0b:9f:96:fa:2a:1b:
         ac:0e:94:b6:61:8e:ef:57:3a:35:43:34:5b:b2:1f:de:a3:6f:
         80:c3:db:09:92:8c:3e:b8:01:43:09:fe:a3:6d:8e:1a:1d:d9:
         61:b3:dd:a2:a4:8b:20:94:ec:57:1a:ed:8d:b5:49:b7:ce:12:
         18:63:ec:a5:41:39:20:91:8a:43:04:6e:bc:bc:31:9e:30:f4:
         65:3f:8b:57:ee:10:b1:fd:a0:0e:d7:7d:d0:c8:bb:23:5e:12:
         02:82:d9:bf:d0:de:90:a7:9f:07:2c:ce:7b:cc:cf:2d:8c:27:
         5b:5c:cc:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiL+BeWDXXic9iwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJhODlkNzgtODA3Zi00OGJiLTg5MTMtNGUxNWY0ODc4
YmZiMB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
M2ZjMjE5MGMtYWY3MC00MGM0LTgwMmUtMWUxYTg3NTI1NDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O2bIBgAAUTHRj3Zg2HDHSIrOE4BnKJVt4Ss
YQNrN8WEx+ecA1v6VY0fd3wa+J3nI3CWts+V+5fLqsw5GuUAZwLvI6dQKKGuvxtj
kQ/B2mXKMDw/JB6/mmlTH5NyemNKVxKVAuSXBs8d8LE0Vt4IXwlXwvhFc0RSRwiA
q2ohhEAXPkmQmST4rK8WaplqZk0qAcPM9Wy/xDsR8oEoNhgXqoHF7mbNCfo+yPA9
L4jy6pny2pkSkEd/TnxybME+w43VgkEGG1UfcEfymEbmtWMgG/D3cb+v7Dm3HoHt
t/TMmrSFZ6rzWK1g5WoUhfurQlfm7+WcwHVxceffOT5X25ptQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfKHLfkTDLWz2KnK7h60V0AaLSTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmE4
OWQ3OC04MDdmLTQ4YmItODkxMy00ZTE1ZjQ4NzhiZmIvNzhmMWFkOGMtMzBkNC0z
OTg3LWE4OGMtMGIyZTMzMTJiOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJhODlkNzgtODA3Zi00OGJiLTg5
MTMtNGUxNWY0ODc4YmZiLzIyYTg5ZDc4LTgwN2YtNDhiYi04OTEzLTRlMTVmNDg3
OGJmYi5jcmwwHwYDVR0jBBgwFoAUQSZhTrZ9uYEFwZC33V/5DTLkICMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmE4OWQ3OC04MDdmLTQ4YmItODkxMy00ZTE1
ZjQ4NzhiZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz4fQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3vRGp0GgVHn+ns56YtTG4AmmsrhVRZZh9i4iU09nGHGdV6BmU5stW0
0CSSD3W+zY6AaJ3kuSCw49VbMJxQeLtvyUDOLxH/R0XjL9Vj6J9v0oSpt9R3pMKU
/XMdciRmw/vYGpP0ggrvd8FNLnjd3EwB0a7A1UrGrAaT+mYDZhQT3BAUw81owA7l
KguflvoqG6wOlLZhju9XOjVDNFuyH96jb4DD2wmSjD64AUMJ/qNtjhod2WGz3aKk
iyCU7Fca7Y21SbfOEhhj7KVBOSCRikMEbry8MZ4w9GU/i1fuELH9oA7XfdDIuyNe
EgKC2b/Q3pCnnwcsznvMzy2MJ1tczD8=
-----END CERTIFICATE-----
Generated at Tue Jun 25 22:29:12 2024 by rpki-client on console-ams.rpki-client.org