Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa
File:                     ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa (raw, json)
Hash identifier:          rtZpIlZLp3ORLdr2GPukwZ3bAmWsdm9v2Qn+c6lQwPs=
Subject key identifier:   2A:DC:EF:D9:46:44:AC:8F:F1:04:EA:D0:9D:4F:4E:97:49:D0:88:54
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F43285845A428D25FF9780D7A07BDA600
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     11300
IP address blocks:        207.241.170.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:d2:5f:f9:78:0d:7a:07:bd:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=eff271ef-b4c4-4ce2-8cee-8616a7b2d602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:61:03:54:98:39:7a:fa:5a:2e:f7:32:85:
                    33:9b:55:d5:c5:14:0e:51:51:a1:a6:ae:01:08:01:
                    40:c3:46:3f:46:48:e0:7f:be:f1:31:65:f2:38:57:
                    20:4d:1b:e5:81:bb:b8:17:af:67:85:e1:c5:9c:48:
                    6d:15:d4:ab:15:09:62:27:56:fc:90:f3:93:de:53:
                    12:a7:90:cb:f1:f3:d8:12:e7:fa:c6:20:99:37:49:
                    2e:5a:31:e5:5a:86:69:fa:76:4a:94:e6:1c:1f:3c:
                    85:b9:ec:f0:ff:ef:49:8f:06:2a:ed:c8:36:0c:a6:
                    ea:5f:e3:9d:fe:3f:eb:31:d8:21:01:85:29:72:94:
                    7b:38:a5:2c:86:75:4e:6a:c1:75:d7:e8:0c:4f:e3:
                    15:1a:dc:cd:c2:9a:24:9a:e7:d5:8c:c1:e9:c5:b4:
                    3f:8c:e3:24:b7:d7:89:ce:18:df:32:04:a1:af:78:
                    2b:39:cc:db:e7:54:a1:1f:be:3e:1c:e8:c6:4b:c0:
                    c5:7f:ba:5d:a3:87:95:3a:6c:5b:5c:dc:83:82:c2:
                    18:48:5e:4b:a5:3f:f1:a6:22:61:ae:77:80:a6:68:
                    8d:a0:3b:be:68:42:26:53:64:ef:ff:8a:d6:a3:47:
                    9e:aa:d4:5f:07:41:36:f9:f8:fa:e1:df:03:f8:80:
                    be:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:EF:D9:46:44:AC:8F:F1:04:EA:D0:9D:4F:4E:97:49:D0:88:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:92:7c:db:34:7e:dc:d2:65:87:b4:2a:02:67:6c:95:e5:
         3b:b5:b6:fb:55:ff:62:2e:1c:20:1b:71:8b:4c:bb:77:3b:1d:
         e4:3a:f2:03:3c:b1:02:37:6f:9c:f0:19:d5:2b:98:3f:68:a6:
         b2:94:8e:16:61:21:2b:7d:66:27:85:d5:c9:f9:32:1c:02:da:
         9b:e7:f3:f8:28:4a:8f:75:b5:d5:73:e1:ed:dc:97:11:50:07:
         b7:92:22:5a:b1:e3:84:40:8c:db:00:29:b1:68:85:e8:8b:8c:
         e4:1d:bb:82:73:68:a9:bf:c1:7a:69:56:3f:7f:68:af:b4:33:
         b0:cf:65:4f:0e:1e:ff:52:73:50:b0:ee:4a:19:21:d5:37:d0:
         72:9e:ce:59:46:2b:ce:b3:1d:ba:34:e4:d6:39:5a:fb:0e:6d:
         35:f4:8b:c9:85:d8:4d:f0:22:81:c3:e7:f0:90:07:86:67:bb:
         79:76:20:d2:2f:c3:c3:67:6c:1e:c5:2c:c8:1a:e9:10:47:de:
         77:b7:7a:7b:97:bd:20:f4:de:00:0d:79:0a:26:0f:4b:fc:bb:
         c6:df:9e:e9:a6:37:1a:50:8b:f0:8f:4b:7f:72:26:fc:91:2d:
         e0:c3:c1:e2:51:b9:85:b6:55:35:28:84:68:77:e0:32:3d:06:
         7c:b8:b5:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWkKNJf+XgNege9pgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx
OGUzMB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk
ZWZmMjcxZWYtYjRjNC00Y2UyLThjZWUtODYxNmE3YjJkNjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRVhA1SYOXr6Wi73MoUzm1XVxRQOUVGhpq4B
CAFAw0Y/Rkjgf77xMWXyOFcgTRvlgbu4F69nheHFnEhtFdSrFQliJ1b8kPOT3lMS
p5DL8fPYEuf6xiCZN0kuWjHlWoZp+nZKlOYcHzyFuezw/+9JjwYq7cg2DKbqX+Od
/j/rMdghAYUpcpR7OKUshnVOasF11+gMT+MVGtzNwpokmufVjMHpxbQ/jOMkt9eJ
zhjfMgShr3grOczb51ShH74+HOjGS8DFf7pdo4eVOmxbXNyDgsIYSF5LpT/xpiJh
rneApmiNoDu+aEImU2Tv/4rWo0eeqtRfB0E2+fj64d8D+IC+gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrc79lGRKyP8QTq0J1PTpdJ0IhUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx
MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvY2EzNGFhMWMtZjE3ZS0z
MmYwLWI4NjctNzk4M2M1NGY4Y2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk
YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj
MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4
MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/GqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkdknzbNH7c0mWHtCoCZ2yV5Tu1tvtV/2IuHCAbcYtMu3c7HeQ68gM8
sQI3b5zwGdUrmD9oprKUjhZhISt9ZieF1cn5MhwC2pvn8/goSo91tdVz4e3clxFQ
B7eSIlqx44RAjNsAKbFoheiLjOQdu4JzaKm/wXppVj9/aK+0M7DPZU8OHv9Sc1Cw
7koZIdU30HKezllGK86zHbo05NY5WvsObTX0i8mF2E3wIoHD5/CQB4Znu3l2INIv
w8NnbB7FLMga6RBH3ne3enuXvSD03gANeQomD0v8u8bfnummNxpQi/CPS39yJvyR
LeDDweJRuYW2VTUohGh34DI9Bny4tS4=
-----END CERTIFICATE-----
Generated at Fri May 17 01:57:42 2024 by rpki-client on console-fra.rpki-client.org