Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa
File:                     f559045e-4405-39ab-8824-3e21d81e1ce2.roa (raw, json)
Hash identifier:          UoHWwXa2ejWaVRLZAdZ6ouze1hM6yrvet4brUtDctQM=
Subject key identifier:   17:D0:E3:A6:DA:A9:41:05:8D:3C:B6:0A:93:A2:F2:A6:73:67:0A:3F
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584718089AC0C48656B376A41780
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa
Signing time:             Tue 03 Sep 2024 17:56:41 +0000
ROA not before:           Tue 03 Sep 2024 17:56:41 +0000
ROA not after:            Mon 02 Dec 2024 18:56:41 +0000
asID:                     14618
IP address blocks:        207.202.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:18:08:9a:c0:c4:86:56:b3:76:a4:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Sep  3 17:56:41 2024 GMT
            Not After : Dec  2 18:56:41 2024 GMT
        Subject: CN=6a0f10d0-cb70-48cd-afb2-4c8e5ac329ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:43:b2:59:0c:55:76:19:be:1c:cf:c2:da:
                    f3:36:f1:9c:4a:7f:a8:54:e7:ab:1f:bb:0d:57:70:
                    5b:71:39:c3:2c:ed:d1:8e:e9:94:10:5b:c8:f2:28:
                    f4:d0:ba:82:1e:45:cb:9e:f0:82:cf:4a:78:1a:77:
                    e7:f9:5f:ee:6e:49:69:2d:2e:1f:52:ba:f9:4d:8f:
                    76:f4:82:f2:75:bf:fc:7d:44:67:94:54:07:ad:b2:
                    2d:03:e0:b2:1c:ae:38:37:47:d9:33:85:0e:ee:5a:
                    6d:19:1a:b6:f6:92:8f:98:e2:06:3a:0d:97:13:14:
                    d3:65:1d:ef:ed:dd:5a:ec:51:9e:01:60:5f:bb:cb:
                    ff:81:ff:ad:05:31:22:a4:fb:2b:e3:f8:0f:c4:8e:
                    87:ef:0c:bc:53:a1:0c:fa:ea:bf:28:89:65:69:af:
                    67:3a:a0:42:19:aa:49:3f:13:2b:26:0e:01:3d:61:
                    26:e8:9e:73:a8:49:4c:bb:d1:ec:9c:e1:14:3e:62:
                    a2:c7:e6:9c:3d:5d:76:c4:2e:e6:d4:bf:a9:0b:88:
                    1a:a0:4a:a9:a8:02:56:b8:7d:d4:95:4a:3b:14:17:
                    de:12:0a:5e:02:97:08:3c:1b:2d:16:c6:0e:4f:d2:
                    ab:44:14:86:22:4c:3e:b9:e0:50:04:43:76:4a:65:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D0:E3:A6:DA:A9:41:05:8D:3C:B6:0A:93:A2:F2:A6:73:67:0A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:1d:e6:7f:04:e1:7c:17:8c:14:f3:6d:47:0f:e0:e5:b8:
         fc:ae:de:38:92:8e:45:a1:3f:59:7b:fd:39:e6:73:b5:fb:82:
         94:77:58:5a:a5:0a:c4:4a:4d:16:cf:0e:27:15:4c:62:ec:25:
         ed:7a:fe:3d:84:f1:00:b6:93:27:cb:0b:83:1a:cb:78:3e:a7:
         05:95:df:4d:e2:8a:07:e5:d9:68:13:d0:74:40:9e:0b:ba:9e:
         5f:b4:19:aa:4e:e3:c4:3c:52:48:c1:df:c4:46:ce:98:b7:6b:
         3e:65:56:bf:4c:72:17:ed:13:c2:35:46:45:61:cb:13:dd:59:
         ba:4d:17:14:6b:40:f2:02:ce:ee:89:7c:c1:59:f3:cf:8d:fb:
         62:73:1f:6d:67:15:75:a3:0f:34:1f:da:d6:68:01:e9:42:94:
         0c:65:7f:ac:1a:87:10:be:40:0b:86:fc:73:69:0a:93:35:2b:
         10:53:90:42:91:66:e2:44:cc:aa:f1:b6:bb:c5:ad:a5:68:4c:
         39:48:e7:17:70:4d:48:59:02:af:48:ee:50:26:b7:bf:dd:a2:
         63:7f:40:47:31:de:3d:da:07:4e:22:d2:d6:85:5e:fe:bd:f0:
         59:d4:68:d8:b4:bf:d5:9a:d0:16:d5:38:60:fa:72:a5:5f:0d:
         8a:eb:bc:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcYCJrAxIZWs3akF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI0MDkwMzE3NTY0MVoXDTI0MTIwMjE4NTY0MVowLzEtMCsGA1UEAxMk
NmEwZjEwZDAtY2I3MC00OGNkLWFmYjItNGM4ZTVhYzMyOWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeJDslkMVXYZvhzPwtrzNvGcSn+oVOerH7sN
V3BbcTnDLO3RjumUEFvI8ij00LqCHkXLnvCCz0p4Gnfn+V/ubklpLS4fUrr5TY92
9ILydb/8fURnlFQHrbItA+CyHK44N0fZM4UO7lptGRq29pKPmOIGOg2XExTTZR3v
7d1a7FGeAWBfu8v/gf+tBTEipPsr4/gPxI6H7wy8U6EM+uq/KIllaa9nOqBCGapJ
PxMrJg4BPWEm6J5zqElMu9HsnOEUPmKix+acPV12xC7m1L+pC4gaoEqpqAJWuH3U
lUo7FBfeEgpeApcIPBstFsYOT9KrRBSGIkw+ueBQBEN2SmVhBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfQ46baqUEFjTy2CpOi8qZzZwo/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZjU1OTA0NWUtNDQwNS0z
OWFiLTg4MjQtM2UyMWQ4MWUxY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKpeHeZ/BOF8F4wU821HD+DluPyu3jiSjkWhP1l7/Tnmc7X7gpR3WFql
CsRKTRbPDicVTGLsJe16/j2E8QC2kyfLC4May3g+pwWV303iigfl2WgT0HRAngu6
nl+0GapO48Q8UkjB38RGzpi3az5lVr9MchftE8I1RkVhyxPdWbpNFxRrQPICzu6J
fMFZ88+N+2JzH21nFXWjDzQf2tZoAelClAxlf6wahxC+QAuG/HNpCpM1KxBTkEKR
ZuJEzKrxtrvFraVoTDlI5xdwTUhZAq9I7lAmt7/domN/QEcx3j3aB04i0taFXv69
8FnUaNi0v9Wa0BbVOGD6cqVfDYrrvCM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:49 2024 by rpki-client on console-ams.rpki-client.org