Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7ff8311e-5e1f-3af0-95e9-2748d3b3fe49.roa
File:                     7ff8311e-5e1f-3af0-95e9-2748d3b3fe49.roa (raw, json)
Hash identifier:          jVt1D/DLkuyA641zPHvmW2UNCTmwOY7XjUPunguoZu0=
Subject key identifier:   2B:DA:0C:99:1A:F7:8A:4B:74:00:F1:D1:0E:E2:61:97:F8:2B:FE:DD
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584971142C366CC0382D1D63F400
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7ff8311e-5e1f-3af0-95e9-2748d3b3fe49.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     395075
IP address blocks:        207.96.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:2c:36:6c:c0:38:2d:1d:63:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=36f7c984-34fe-44e5-88fe-fcf4c31b0816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:33:75:83:ea:82:44:a6:d3:1f:f9:f5:d9:1d:
                    c3:1f:56:23:4f:38:50:7a:9e:d9:74:e9:50:bd:38:
                    2d:57:8d:9d:f4:7c:6d:6f:7c:fc:19:c4:fa:f1:67:
                    42:d2:b8:34:71:6c:c8:96:ac:98:f1:e7:bd:ca:17:
                    8f:e8:a2:46:89:3c:c9:bf:5f:e1:9a:fa:92:eb:aa:
                    39:b5:9f:77:5b:eb:50:13:ef:ed:71:53:fd:15:f1:
                    0b:a8:60:70:20:e5:de:64:a4:ed:65:ff:be:59:9b:
                    48:64:89:fb:b2:eb:79:60:58:87:bf:84:77:fa:ae:
                    7b:22:b4:ee:7e:1c:97:3e:e2:39:95:15:f5:d7:67:
                    52:8d:8f:cc:0e:8d:39:62:83:59:46:a0:d0:ad:4c:
                    2f:09:24:b2:84:9c:d9:a6:2c:1a:f2:a4:10:f4:85:
                    9f:cd:69:89:85:9a:28:37:16:c7:6e:46:5b:26:50:
                    28:42:03:76:cb:af:3b:a1:38:54:e9:e3:1f:b6:1c:
                    28:3c:f7:f5:08:ee:6c:af:88:98:b1:c6:db:31:6c:
                    83:2e:46:ad:df:1a:1e:f9:cc:8b:c1:18:51:27:69:
                    01:84:94:69:8f:0b:28:1f:db:4b:27:ac:ea:c7:07:
                    30:9a:9f:2f:c0:a3:27:f0:ee:7c:86:d9:23:8e:f9:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:0C:99:1A:F7:8A:4B:74:00:F1:D1:0E:E2:61:97:F8:2B:FE:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7ff8311e-5e1f-3af0-95e9-2748d3b3fe49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:af:e5:de:9c:3d:9b:fb:21:c2:04:ab:8d:0d:23:5f:78:38:
         56:dc:05:81:21:ee:e3:6d:ec:72:dd:42:3c:24:8c:02:72:a9:
         7c:2d:9f:b7:a5:95:27:04:0a:90:b3:01:2b:83:34:c4:d1:10:
         08:ee:be:e2:27:67:54:cb:89:c7:6a:2c:a8:70:14:f9:93:ba:
         cb:cf:56:25:25:7c:4f:db:91:f8:f6:9b:f9:55:e3:40:c6:75:
         0a:dd:68:ba:fe:33:f4:66:e9:dc:f6:d6:22:4c:d3:2a:4c:f1:
         a2:29:e6:4e:ae:88:35:b1:38:56:e3:21:eb:bd:04:90:e1:fb:
         79:02:6f:e9:38:ed:72:ab:94:25:78:52:a1:56:cb:ad:1f:74:
         ad:af:d1:f5:41:f4:9a:a9:0a:6b:f3:cf:ea:21:40:b1:ba:8b:
         1d:88:0e:c5:55:d6:5d:4d:d1:3d:21:d1:1e:fe:7d:31:f1:d8:
         64:f2:76:31:2b:17:c3:c0:cf:11:98:39:8b:9a:01:a7:76:5b:
         9f:9c:81:6b:1f:04:d7:79:40:7a:cc:ae:d9:93:63:f0:d5:ea:
         02:d7:0e:fa:c0:da:35:4b:e6:aa:5e:58:0c:25:9e:f7:f4:80:
         da:43:80:bf:b5:8e:02:c5:96:5e:d2:60:e3:c6:50:fe:20:18:
         14:c4:c5:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFCw2bMA4LR1j9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
MzZmN2M5ODQtMzRmZS00NGU1LTg4ZmUtZmNmNGMzMWIwODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzN1g+qCRKbTH/n12R3DH1YjTzhQep7ZdOlQ
vTgtV42d9Hxtb3z8GcT68WdC0rg0cWzIlqyY8ee9yheP6KJGiTzJv1/hmvqS66o5
tZ93W+tQE+/tcVP9FfELqGBwIOXeZKTtZf++WZtIZIn7sut5YFiHv4R3+q57IrTu
fhyXPuI5lRX112dSjY/MDo05YoNZRqDQrUwvCSSyhJzZpiwa8qQQ9IWfzWmJhZoo
NxbHbkZbJlAoQgN2y687oThU6eMfthwoPPf1CO5sr4iYscbbMWyDLkat3xoe+cyL
wRhRJ2kBhJRpjwsoH9tLJ6zqxwcwmp8vwKMn8O58htkjjvkdYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvaDJka94pLdADx0Q7iYZf4K/7dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvN2ZmODMxMWUtNWUxZi0z
YWYwLTk1ZTktMjc0OGQzYjNmZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2DCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKv5d6cPZv7IcIEq40NI194OFbcBYEh7uNt7HLdQjwkjAJyqXwtn7el
lScECpCzASuDNMTREAjuvuInZ1TLicdqLKhwFPmTusvPViUlfE/bkfj2m/lV40DG
dQrdaLr+M/Rm6dz21iJM0ypM8aIp5k6uiDWxOFbjIeu9BJDh+3kCb+k47XKrlCV4
UqFWy60fdK2v0fVB9JqpCmvzz+ohQLG6ix2IDsVV1l1N0T0h0R7+fTHx2GTydjEr
F8PAzxGYOYuaAad2W5+cgWsfBNd5QHrMrtmTY/DV6gLXDvrA2jVL5qpeWAwlnvf0
gNpDgL+1jgLFll7SYOPGUP4gGBTExbs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:05:44 2025 by rpki-client