Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
File:                     7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa (raw, json)
Hash identifier:          lXWj3r/+En5S2tHV9nAVMEeb9+woPYHW1Mr5uaLZecY=
Subject key identifier:   AC:B2:97:C5:1C:C0:B3:B8:1E:8D:DA:BE:7D:F3:C1:53:8A:F2:F4:9E
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F432858455B92F0044FA132EEE9B2EE00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     14618
IP address blocks:        207.202.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:f0:04:4f:a1:32:ee:e9:b2:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=479b5962-ed60-40d4-b0b2-e758d7249e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:13:82:fa:77:e8:e1:dd:5f:a0:43:b7:e6:
                    93:4c:bb:b6:85:6d:85:4f:77:d8:58:7f:43:ad:13:
                    e8:f5:a4:a8:78:e2:72:fd:a4:af:12:e1:35:f9:70:
                    78:ec:27:47:dc:1d:fa:f2:20:67:89:4c:70:e0:9e:
                    9b:1f:a3:45:d4:59:7d:0a:a3:e0:96:da:58:eb:3f:
                    f5:ea:d0:c8:5f:f3:da:28:f9:e9:ef:13:a2:e4:7f:
                    b5:6b:8d:37:6a:3c:3b:0b:1a:14:51:2c:67:46:b4:
                    d6:24:f2:9d:c0:b6:5e:b2:1a:19:a1:b2:87:7e:7c:
                    f9:17:c8:b4:5f:1a:6e:fb:b5:f5:b0:6d:0c:4c:8f:
                    81:b4:73:0e:98:32:41:6a:5a:ec:1f:dc:80:2f:06:
                    4e:4d:33:d5:c0:11:3b:3d:7f:a6:47:fd:e1:da:7a:
                    f3:d2:88:c9:4a:90:21:0f:ff:eb:14:20:2a:bc:6e:
                    27:fb:fd:6e:7f:66:67:5d:2b:46:c4:73:7b:ae:bc:
                    e5:5b:fb:fb:fe:ed:d6:fc:d9:67:f4:01:c1:26:0b:
                    85:73:db:16:a4:6a:0c:f0:92:c8:b0:d8:57:d1:19:
                    03:b8:d3:0c:d9:5b:17:9a:5d:d9:d5:5b:0f:66:e8:
                    44:66:e3:7e:e2:a6:30:48:24:41:0e:19:88:73:22:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B2:97:C5:1C:C0:B3:B8:1E:8D:DA:BE:7D:F3:C1:53:8A:F2:F4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7ee7228b-bbfa-3084-82dc-bdb8695a3e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:15:8c:05:1c:f0:0e:a6:eb:e0:0d:55:f4:13:da:e3:26:9d:
         8f:96:b9:8c:c6:f2:5d:9b:85:6d:4b:07:90:50:d8:55:7a:57:
         e7:b2:d3:82:a8:29:32:7b:9d:87:42:13:a7:85:35:af:ff:68:
         b1:7c:eb:9b:55:c1:68:cc:33:49:59:bb:16:3f:a1:1a:1c:39:
         0b:06:ef:76:c2:2d:ea:c7:f5:91:8f:35:35:de:2a:46:c7:9e:
         c7:b0:71:1a:e0:00:b4:f6:ed:f7:e7:04:ba:3a:fc:cb:c7:bf:
         63:3f:85:41:ed:6b:3b:41:de:18:77:89:c4:93:69:e0:80:dd:
         66:ca:3d:78:51:51:e3:b5:40:d5:7a:c7:50:ea:2b:ef:6f:75:
         21:b8:fb:86:36:8d:2a:2d:95:c4:0d:26:d9:eb:08:ac:90:a2:
         b9:18:ef:08:12:17:50:81:dd:6f:7d:a6:0e:3f:dd:8d:13:35:
         a8:a2:8f:95:ae:76:cb:0c:a5:cf:be:80:7d:87:08:92:48:6e:
         8b:79:3a:17:12:07:c8:45:b1:66:ea:93:8a:4b:e6:58:e4:95:
         4a:9f:47:4b:68:d1:ea:00:8c:c6:51:16:71:53:b1:32:7c:7e:
         bf:46:cf:28:a7:b4:0d:0f:8c:c5:8b:13:f4:2d:ed:f5:f9:e8:
         cf:85:ee:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVbkvAET6Ey7umy7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk
NDc5YjU5NjItZWQ2MC00MGQ0LWIwYjItZTc1OGQ3MjQ5ZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF4Tgvp36OHdX6BDt+aTTLu2hW2FT3fYWH9D
rRPo9aSoeOJy/aSvEuE1+XB47CdH3B368iBniUxw4J6bH6NF1Fl9CqPgltpY6z/1
6tDIX/PaKPnp7xOi5H+1a403ajw7CxoUUSxnRrTWJPKdwLZeshoZobKHfnz5F8i0
Xxpu+7X1sG0MTI+BtHMOmDJBalrsH9yALwZOTTPVwBE7PX+mR/3h2nrz0ojJSpAh
D//rFCAqvG4n+/1uf2ZnXStGxHN7rrzlW/v7/u3W/Nln9AHBJguFc9sWpGoM8JLI
sNhX0RkDuNMM2VsXml3Z1VsPZuhEZuN+4qYwSCRBDhmIcyLfXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKyyl8UcwLO4Ho3avn3zwVOK8vSeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvN2VlNzIyOGItYmJmYS0z
MDg0LTgyZGMtYmRiODY5NWEzZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ohMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8VjAUc8A6m6+ANVfQT2uMmnY+WuYzG8l2bhW1LB5BQ2FV6V+ey04Ko
KTJ7nYdCE6eFNa//aLF865tVwWjMM0lZuxY/oRocOQsG73bCLerH9ZGPNTXeKkbH
nsewcRrgALT27ffnBLo6/MvHv2M/hUHtaztB3hh3icSTaeCA3WbKPXhRUeO1QNV6
x1DqK+9vdSG4+4Y2jSotlcQNJtnrCKyQorkY7wgSF1CB3W99pg4/3Y0TNaiij5Wu
dssMpc++gH2HCJJIbot5OhcSB8hFsWbqk4pL5ljklUqfR0to0eoAjMZRFnFTsTJ8
fr9GzyintA0PjMWLE/Qt7fX56M+F7pg=
-----END CERTIFICATE-----
Generated at Thu May 2 03:29:26 2024 by rpki-client on console-ams.rpki-client.org