Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa
File:                     dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa (raw, json)
Hash identifier:          3jlH2lQTOS8C0uENHetpqy0SttC84XAP5z6Sj8dq0ds=
Subject key identifier:   73:3B:71:43:35:03:6C:4E:61:61:83:D9:45:81:67:6F:87:67:89:76
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F43285844DCAA7DB7317B8CE25E3ED440
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa
Signing time:             Mon 12 Feb 2024 02:00:25 +0000
ROA not before:           Mon 12 Feb 2024 02:00:25 +0000
ROA not after:            Sun 12 May 2024 01:00:25 +0000
asID:                     400214
IP address blocks:        207.2.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:aa:7d:b7:31:7b:8c:e2:5e:3e:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Feb 12 02:00:25 2024 GMT
            Not After : May 12 01:00:25 2024 GMT
        Subject: CN=7175854b-eaaa-4b30-8456-2d49178c3778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:71:a9:9a:13:2b:db:11:00:a7:ca:e4:6f:
                    60:f4:78:6a:aa:9a:15:0d:b2:90:86:e7:5b:87:41:
                    89:f2:00:c0:ad:c7:97:8b:63:84:3d:3d:66:4a:84:
                    0a:1c:f5:40:c1:e8:74:1e:25:71:ca:92:44:8a:55:
                    0e:00:aa:a1:82:0b:47:29:f0:32:6b:07:7e:a7:cb:
                    4f:e1:a7:c4:ba:78:84:fa:a3:55:d6:9c:e1:7e:1a:
                    27:ba:41:1d:f7:40:1b:aa:ee:a9:0e:9a:71:9a:03:
                    f1:e2:4b:0e:85:80:d2:72:38:63:7b:d3:3a:7a:4c:
                    29:ac:4d:80:49:77:72:49:bb:93:9e:49:fa:1b:58:
                    0e:24:d2:c7:07:9b:67:cf:74:17:5d:d7:51:d9:61:
                    aa:27:0b:3a:c9:82:7e:5a:99:4b:01:df:2a:0c:3b:
                    09:1a:34:98:cf:16:7e:92:fe:3a:b6:4c:5d:67:a1:
                    35:e9:06:d9:c8:23:c4:ad:e9:10:3a:ea:fd:a3:1c:
                    ae:65:9d:93:9c:aa:53:2b:b3:68:04:1b:26:00:80:
                    8c:25:d2:8f:08:54:b0:47:73:0e:70:54:9b:ad:00:
                    16:bd:7e:d2:07:87:26:26:c9:a8:05:78:e1:34:6b:
                    c4:79:e1:0a:09:16:7b:b3:84:58:2c:6a:0e:34:d0:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:71:43:35:03:6C:4E:61:61:83:D9:45:81:67:6F:87:67:89:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dc2306ab-7ea2-3fe8-9373-de59a92bfcab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:27:b3:19:e2:94:96:da:29:bd:46:69:16:0b:0f:ae:a0:
         ec:49:2e:c0:91:86:68:cd:df:c7:6d:fb:c0:a7:f4:b8:5e:6a:
         87:d6:42:26:53:7a:7b:e5:6d:24:a4:ba:ff:07:8f:af:77:fd:
         1b:d9:d1:07:4f:4a:c2:32:c1:94:74:50:a1:c8:2e:70:b4:67:
         2f:aa:82:75:d2:16:82:f7:e1:47:f1:84:c7:e0:49:2d:c9:44:
         99:63:56:da:27:ec:44:08:48:ae:e3:d2:5b:2e:80:e8:6e:03:
         d1:ff:8d:70:80:15:2a:7e:91:9f:0f:aa:d1:05:d9:54:2d:6a:
         39:8a:27:fa:d0:49:a8:6e:56:52:45:83:7d:bc:83:c9:3e:b5:
         04:b0:c2:c4:8b:2d:42:fc:5e:23:bd:8c:36:f1:58:f0:da:b4:
         6d:a3:1e:00:bd:25:84:c8:be:2a:56:ee:81:4c:04:0f:84:5d:
         e6:d6:b5:54:7c:90:56:ca:5e:b9:1d:9d:91:8a:1b:20:47:2f:
         f2:4e:18:de:2b:9c:7e:8e:d6:3e:3e:be:ed:06:f4:0d:98:65:
         16:96:1c:e1:fd:bc:52:e9:9a:30:54:2d:a1:ac:55:cb:83:79:
         60:7e:0d:52:57:df:9d:3e:df:04:d6:d0:ae:50:55:d1:49:1b:
         6f:17:80:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETcqn23MXuM4l4+1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTI4NmZkMjgtMDkzOS00OGI5LTg2YmEtY2JlNzkxNDk3
ZDE1MB4XDTI0MDIxMjAyMDAyNVoXDTI0MDUxMjAxMDAyNVowLzEtMCsGA1UEAxMk
NzE3NTg1NGItZWFhYS00YjMwLTg0NTYtMmQ0OTE3OGMzNzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRZxqZoTK9sRAKfK5G9g9HhqqpoVDbKQhudb
h0GJ8gDArceXi2OEPT1mSoQKHPVAweh0HiVxypJEilUOAKqhggtHKfAyawd+p8tP
4afEuniE+qNV1pzhfhonukEd90Abqu6pDppxmgPx4ksOhYDScjhje9M6ekwprE2A
SXdySbuTnkn6G1gOJNLHB5tnz3QXXddR2WGqJws6yYJ+WplLAd8qDDsJGjSYzxZ+
kv46tkxdZ6E16QbZyCPErekQOur9oxyuZZ2TnKpTK7NoBBsmAICMJdKPCFSwR3MO
cFSbrQAWvX7SB4cmJsmoBXjhNGvEeeEKCRZ7s4RYLGoONNCf2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHM7cUM1A2xOYWGD2UWBZ2+HZ4l2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2
ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0OTdkMTUvZGMyMzA2YWItN2VhMi0z
ZmU4LTkzNzMtZGU1OWE5MmJmY2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTI4NmZkMjgtMDkzOS00OGI5LTg2
YmEtY2JlNzkxNDk3ZDE1L2UyODZmZDI4LTA5MzktNDhiOS04NmJhLWNiZTc5MTQ5
N2QxNS5jcmwwHwYDVR0jBBgwFoAUGqScGIN6ivabySjfM0Qw8t1xDpwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3
OTE0OTdkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGppJ7MZ4pSW2im9RmkWCw+uoOxJLsCRhmjN38dt+8Cn9LheaofWQiZT
envlbSSkuv8Hj693/RvZ0QdPSsIywZR0UKHILnC0Zy+qgnXSFoL34UfxhMfgSS3J
RJljVton7EQISK7j0lsugOhuA9H/jXCAFSp+kZ8PqtEF2VQtajmKJ/rQSahuVlJF
g328g8k+tQSwwsSLLUL8XiO9jDbxWPDatG2jHgC9JYTIvipW7oFMBA+EXebWtVR8
kFbKXrkdnZGKGyBHL/JOGN4rnH6O1j4+vu0G9A2YZRaWHOH9vFLpmjBULaGsVcuD
eWB+DVJX350+3wTW0K5QVdFJG28XgCw=
-----END CERTIFICATE-----
Generated at Thu Mar 28 13:36:44 2024 by rpki-client on console-ams.rpki-client.org