Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa
File:                     b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa (raw, json)
Hash identifier:          y1y2Mn1q4J3il/n1FoSnVV/fV54PSpvQjhxZS4Wj8rA=
Subject key identifier:   84:46:22:34:D4:92:66:39:6B:EA:38:9D:10:5D:4A:42:46:D5:AE:C6
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F43285845963341E5B255B94C7CA9E680
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     32034
IP address blocks:        207.241.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:41:e5:b2:55:b9:4c:7c:a9:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=8bc32e28-f377-44d5-bd54-7c97b47a4ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:6c:83:59:33:9d:71:25:bf:0f:46:95:2e:
                    a4:0a:cc:06:88:0a:9b:79:8d:1b:11:7c:0b:94:ff:
                    58:bb:75:29:75:f0:1b:50:02:9d:c7:2d:7a:f5:c9:
                    84:45:af:ed:f8:2a:5f:c4:fe:0e:46:69:7d:7b:45:
                    ac:1e:6c:84:5f:27:02:fe:b7:1b:6d:fe:01:5d:fe:
                    05:0f:4c:7a:71:7e:17:78:03:62:c3:ef:76:dc:4e:
                    a1:a1:4a:2e:d4:90:b1:0a:01:d6:6e:c4:48:d2:6e:
                    9b:d7:bc:c8:01:32:97:28:11:66:d9:42:c4:cc:4a:
                    99:56:ed:0b:f7:9b:29:fe:c5:bb:31:8e:48:1d:13:
                    39:e7:26:91:88:ee:7d:af:30:f5:e0:f8:68:66:1c:
                    03:33:2b:fc:d1:a0:74:f7:2f:4a:cb:ea:d9:37:7d:
                    76:a1:56:4c:b5:5d:3f:aa:db:73:07:b1:98:9b:35:
                    fe:5b:98:48:46:74:f3:62:c7:0c:12:11:2e:1f:a8:
                    37:b3:17:83:07:6c:79:51:f2:51:dd:e5:a4:d5:e5:
                    74:31:38:65:ec:ac:f8:ec:65:3b:a0:77:1b:2d:31:
                    f6:f2:33:c8:54:0d:c8:b9:e5:8c:be:1b:12:6f:32:
                    13:85:b3:af:e8:a2:e4:cc:07:c9:f1:97:80:5a:ce:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:22:34:D4:92:66:39:6B:EA:38:9D:10:5D:4A:42:46:D5:AE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/b21276b3-6a6f-3e77-95c4-cd812a6b1ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:11:f7:c8:53:0a:06:a2:74:b2:16:35:8c:22:f7:81:e7:
         26:4b:3d:b1:c4:04:34:c1:aa:d1:b9:3e:cf:6c:90:1e:4d:fa:
         a9:e3:04:0b:39:06:ab:e5:a2:ac:09:c5:23:21:fc:92:78:df:
         78:e5:e8:da:47:5e:b5:64:ff:f3:8e:ee:f4:62:7e:c1:cc:1e:
         0e:5a:4e:19:1d:9e:5f:2e:74:d6:8b:08:10:dc:36:b4:45:47:
         31:6d:f6:00:a9:95:41:4d:b5:8a:75:1a:da:82:4c:fb:4d:0f:
         5b:66:4f:65:ac:8c:15:58:8e:e8:8a:88:11:f8:ab:f7:f6:0e:
         2f:ef:91:38:a5:1b:8d:7d:c1:6b:52:b7:af:24:67:8a:36:be:
         d9:17:21:ad:0d:0b:60:cc:25:ee:74:09:03:15:a9:4b:47:b3:
         8f:1c:89:75:e7:ed:21:0a:45:6f:52:a6:bd:d2:a6:37:b6:73:
         cf:4c:cf:c3:d4:2b:3c:a9:75:81:52:7e:27:8d:07:8c:1e:42:
         4e:b8:e2:90:d2:85:84:b6:23:9f:fa:9a:d4:a5:70:6a:d8:5d:
         48:41:07:e2:3d:c2:7b:b3:d7:b1:c5:a9:44:3f:51:38:67:12:
         0f:54:78:cb:d8:6c:9d:c8:6a:62:5c:18:7d:af:c5:b3:43:15:
         8f:54:72:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWM0HlslW5THyp5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx
OGUzMB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
OGJjMzJlMjgtZjM3Ny00NGQ1LWJkNTQtN2M5N2I0N2E0YWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VJsg1kznXElvw9GlS6kCswGiAqbeY0bEXwL
lP9Yu3UpdfAbUAKdxy169cmERa/t+CpfxP4ORml9e0WsHmyEXycC/rcbbf4BXf4F
D0x6cX4XeANiw+923E6hoUou1JCxCgHWbsRI0m6b17zIATKXKBFm2ULEzEqZVu0L
95sp/sW7MY5IHRM55yaRiO59rzD14PhoZhwDMyv80aB09y9Ky+rZN312oVZMtV0/
qttzB7GYmzX+W5hIRnTzYscMEhEuH6g3sxeDB2x5UfJR3eWk1eV0MThl7Kz47GU7
oHcbLTH28jPIVA3IueWMvhsSbzIThbOv6KLkzAfJ8ZeAWs6wOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRGIjTUkmY5a+o4nRBdSkJG1a7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx
MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvYjIxMjc2YjMtNmE2Zi0z
ZTc3LTk1YzQtY2Q4MTJhNmIxYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk
YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj
MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4
MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/G5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6uEffIUwoGonSyFjWMIveB5yZLPbHEBDTBqtG5Ps9skB5N+qnjBAs5
BqvloqwJxSMh/JJ433jl6NpHXrVk//OO7vRifsHMHg5aThkdnl8udNaLCBDcNrRF
RzFt9gCplUFNtYp1GtqCTPtND1tmT2WsjBVYjuiKiBH4q/f2Di/vkTilG419wWtS
t68kZ4o2vtkXIa0NC2DMJe50CQMVqUtHs48ciXXn7SEKRW9Spr3Spje2c89Mz8PU
KzypdYFSfieNB4weQk644pDShYS2I5/6mtSlcGrYXUhBB+I9wnuz17HFqUQ/UThn
Eg9UeMvYbJ3IamJcGH2vxbNDFY9UckU=
-----END CERTIFICATE-----
Generated at Fri Apr 19 15:20:40 2024 by rpki-client on console-fra.rpki-client.org