Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12491c28-27d4-3e1e-9628-9640b86154b4.roa
File:                     12491c28-27d4-3e1e-9628-9640b86154b4.roa (raw, json)
Hash identifier:          atcCR99LfHY7pU3iQu0NNitUvYTC6MRVEtXnYVL37wY=
Subject key identifier:   61:D0:CE:59:88:B5:34:AC:0B:32:AF:79:1F:65:C2:7D:A8:09:C1:E6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858499C59FBCA32EB9F318776B300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12491c28-27d4-3e1e-9628-9640b86154b4.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     397225
IP address blocks:        199.7.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:fb:ca:32:eb:9f:31:87:76:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=1322e56f-c249-463d-87e2-0d5ff804379b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3f:f8:bd:4a:f5:26:2b:89:22:16:ab:c7:8c:
                    8f:e9:26:f3:76:d0:ea:69:2f:19:e1:6b:e7:b9:6c:
                    65:9b:f0:93:e3:7e:ee:c2:05:33:1e:2b:60:9b:e5:
                    6f:b6:d8:c3:a0:e3:56:7b:4c:53:1a:22:b6:b0:74:
                    d5:f9:88:b6:2d:74:0d:cd:ce:44:aa:16:c1:00:46:
                    96:04:e9:fa:e6:a7:95:d9:0c:cf:4e:fd:6a:6c:60:
                    1d:ad:18:a6:9e:27:22:d3:d4:a9:8a:e1:5a:2d:5c:
                    55:23:ef:9d:fb:4c:bf:7c:20:3e:bb:4f:37:ee:37:
                    ae:20:6f:56:33:2c:6b:f3:ee:07:f7:c1:52:c6:ba:
                    e2:53:11:0d:41:2d:2f:d7:dc:56:8f:d0:08:a0:d9:
                    b1:cc:48:43:ca:28:a3:56:dd:bf:74:3a:7c:ab:7c:
                    07:4c:14:16:e9:55:4b:3c:d4:fd:28:88:c8:1d:58:
                    9e:98:08:1e:3b:8c:4e:26:ef:a7:65:3d:f7:3d:b2:
                    23:d1:3f:10:a5:8c:13:cf:e0:f9:18:6b:27:6e:d9:
                    40:e3:67:57:44:0a:4f:76:22:84:2a:45:e0:45:b1:
                    3f:5c:0f:a4:50:89:19:4e:2a:3c:7d:a3:41:db:2e:
                    f2:d7:90:63:42:d0:b1:4d:2c:56:c7:27:dc:fd:83:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:CE:59:88:B5:34:AC:0B:32:AF:79:1F:65:C2:7D:A8:09:C1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/12491c28-27d4-3e1e-9628-9640b86154b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7e:4e:96:94:3d:49:ba:53:53:b9:d7:fa:df:af:0d:84:68:
         33:5b:11:8e:d7:1b:eb:28:19:67:a4:4c:0a:3a:49:30:c6:66:
         50:c7:fb:3c:9c:29:18:51:81:7d:de:fc:3a:86:81:89:eb:36:
         5d:1f:61:24:65:18:3f:33:33:a7:ac:6e:fe:0e:e8:f6:d7:23:
         25:ba:7c:f6:65:1d:15:65:05:b8:b9:44:0c:1a:a4:6d:49:6f:
         5b:0d:a0:ab:aa:5c:d6:a4:89:84:da:60:35:6b:4c:57:59:9c:
         9a:40:ad:8a:29:2f:c5:fc:41:a5:69:dc:df:1f:01:08:2f:19:
         01:21:cd:2f:fc:17:c3:99:fb:23:b2:3f:28:9a:1a:e3:82:9c:
         a3:4c:30:61:76:6f:ba:34:fb:6e:e1:5e:a4:24:5c:30:43:45:
         d9:cc:a9:a7:55:86:c9:8e:8d:76:4b:66:af:df:a6:57:2e:0e:
         4c:d4:77:aa:07:b3:e3:39:b6:e3:fc:92:7d:e9:c4:8c:20:50:
         e8:75:8f:6a:8e:d1:4f:20:1b:8c:eb:5a:a0:0e:e9:65:aa:10:
         e1:dc:41:20:7f:29:f2:8a:aa:02:3a:44:f0:34:c1:b9:b7:c3:
         2a:de:00:27:1c:bd:69:ce:5a:22:0e:1c:92:23:5b:00:c0:97:
         87:59:25:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfvKMuufMYd2swAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk
MTMyMmU1NmYtYzI0OS00NjNkLTg3ZTItMGQ1ZmY4MDQzNzliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j/4vUr1JiuJIharx4yP6SbzdtDqaS8Z4Wvn
uWxlm/CT437uwgUzHitgm+VvttjDoONWe0xTGiK2sHTV+Yi2LXQNzc5EqhbBAEaW
BOn65qeV2QzPTv1qbGAdrRimnici09SpiuFaLVxVI++d+0y/fCA+u0837jeuIG9W
Myxr8+4H98FSxrriUxENQS0v19xWj9AIoNmxzEhDyiijVt2/dDp8q3wHTBQW6VVL
PNT9KIjIHViemAgeO4xOJu+nZT33PbIj0T8QpYwTz+D5GGsnbtlA42dXRApPdiKE
KkXgRbE/XA+kUIkZTio8faNB2y7y15BjQtCxTSxWxyfc/YPEmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHQzlmItTSsCzKveR9lwn2oCcHmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTI0OTFjMjgtMjdkNC0z
ZTFlLTk2MjgtOTY0MGI4NjE1NGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFV+TpaUPUm6U1O51/rfrw2EaDNbEY7XG+soGWekTAo6STDGZlDH+zyc
KRhRgX3e/DqGgYnrNl0fYSRlGD8zM6esbv4O6PbXIyW6fPZlHRVlBbi5RAwapG1J
b1sNoKuqXNakiYTaYDVrTFdZnJpArYopL8X8QaVp3N8fAQgvGQEhzS/8F8OZ+yOy
PyiaGuOCnKNMMGF2b7o0+27hXqQkXDBDRdnMqadVhsmOjXZLZq/fplcuDkzUd6oH
s+M5tuP8kn3pxIwgUOh1j2qO0U8gG4zrWqAO6WWqEOHcQSB/KfKKqgI6RPA0wbm3
wyreACccvWnOWiIOHJIjWwDAl4dZJTM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:17 2025 by rpki-client