Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/635159e7-0bc1-352a-b9d7-f6fb3b029064.roa
File:                     635159e7-0bc1-352a-b9d7-f6fb3b029064.roa (raw, json)
Hash identifier:          a+xG+HTYaRcUxsd3UG4//Hck8qsmpa2FFu59xfSslVg=
Subject key identifier:   36:F3:B9:15:F5:8E:1D:98:43:78:B8:8C:F5:75:18:8A:43:7D:B5:8A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858496FAF19FD80A8A566D058E180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/635159e7-0bc1-352a-b9d7-f6fb3b029064.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397223
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:19:fd:80:a8:a5:66:d0:58:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=890d0aae-b372-4fe0-90f3-6b421a38d869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:ea:52:eb:6a:50:c2:3c:fa:95:1a:48:ed:
                    d2:52:f3:f5:b0:ab:1e:c7:92:44:cb:f2:1a:5c:08:
                    fe:20:7f:6b:01:20:17:60:d4:94:63:c5:7c:7f:98:
                    2c:97:0a:47:f6:89:a2:ff:2b:8a:cb:67:cd:78:f4:
                    ab:0c:39:87:ea:cc:fb:cd:1a:07:4c:c9:c6:85:e7:
                    5f:af:29:2a:a1:8a:19:d3:ff:d3:4c:ca:87:74:fa:
                    4b:da:62:bd:17:7b:12:9e:b4:be:94:c0:eb:d5:2a:
                    ff:04:a3:4c:fd:2e:a9:41:0b:5f:87:79:72:c9:e5:
                    9c:d1:5c:ab:94:ce:47:6a:7e:81:43:ab:d7:91:69:
                    93:2f:5f:4d:ac:72:c8:cd:b5:20:c7:08:73:21:1a:
                    e6:82:44:86:c4:46:75:5f:c0:63:a7:20:56:3b:0c:
                    4a:ab:b8:e2:f6:4a:02:6b:ab:48:b0:0d:6b:a7:60:
                    51:92:f6:88:06:74:34:8a:22:e8:ef:e0:3d:d4:99:
                    af:d5:79:e9:03:ea:3c:47:9c:fe:cf:bd:b3:c0:e7:
                    49:be:a1:9e:c4:18:5b:ee:2f:8d:48:a5:5c:22:c7:
                    52:7e:62:7c:19:60:28:2b:bc:f3:31:48:a1:14:5e:
                    0f:06:f6:e3:26:a9:1c:ab:db:42:2f:af:94:19:68:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:B9:15:F5:8E:1D:98:43:78:B8:8C:F5:75:18:8A:43:7D:B5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/635159e7-0bc1-352a-b9d7-f6fb3b029064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9f:3e:9b:53:77:41:53:86:56:66:a9:5c:0e:8e:49:1b:a6:
         bd:b9:8b:cc:61:96:9c:61:96:92:ad:fc:d7:5c:0e:d1:09:3f:
         90:bd:fe:f1:cd:c9:50:75:e2:21:a0:b6:54:71:25:4f:98:6b:
         dd:e5:fd:ea:29:6c:22:df:d0:a9:e1:c4:ff:37:9a:35:da:72:
         5c:ce:af:ce:fd:74:76:a2:aa:65:7a:93:b4:d5:d1:ca:a6:d2:
         86:e5:7c:67:9a:2b:ee:d1:12:05:db:2a:8c:e3:d2:f2:37:d7:
         9d:47:a8:8b:a6:ae:17:0c:28:04:c5:bf:4c:92:b7:fd:44:7d:
         f9:67:b0:3e:ed:0b:75:82:82:0f:f6:d2:aa:e8:19:2f:0c:e9:
         8b:6f:16:1f:61:2f:7a:4b:8f:d3:c0:4c:8c:4f:5c:c7:86:8d:
         5c:1a:75:ed:d0:31:ce:18:69:d4:6d:c7:ec:2c:9e:41:84:20:
         9c:64:e7:ca:0e:66:35:ff:08:6a:4c:00:1a:57:1d:a5:de:98:
         d2:8f:c4:61:53:f6:5f:6e:73:19:63:4f:e8:48:db:89:a2:5b:
         46:1d:fa:13:98:89:8c:68:e1:c7:a5:60:9e:33:34:5c:d4:d1:
         12:c6:85:af:80:66:f9:0a:49:7e:08:80:c6:5d:d1:7b:ca:5d:
         0d:2e:62:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxn9gKilZtBY4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
ODkwZDBhYWUtYjM3Mi00ZmUwLTkwZjMtNmI0MjFhMzhkODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlizqUutqUMI8+pUaSO3SUvP1sKsex5JEy/Ia
XAj+IH9rASAXYNSUY8V8f5gslwpH9omi/yuKy2fNePSrDDmH6sz7zRoHTMnGhedf
rykqoYoZ0//TTMqHdPpL2mK9F3sSnrS+lMDr1Sr/BKNM/S6pQQtfh3lyyeWc0Vyr
lM5Han6BQ6vXkWmTL19NrHLIzbUgxwhzIRrmgkSGxEZ1X8BjpyBWOwxKq7ji9koC
a6tIsA1rp2BRkvaIBnQ0iiLo7+A91Jmv1XnpA+o8R5z+z72zwOdJvqGexBhb7i+N
SKVcIsdSfmJ8GWAoK7zzMUihFF4PBvbjJqkcq9tCL6+UGWivoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbzuRX1jh2YQ3i4jPV1GIpDfbWKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjM1MTU5ZTctMGJjMS0z
NTJhLWI5ZDctZjZmYjNiMDI5MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKfPptTd0FThlZmqVwOjkkbpr25i8xhlpxhlpKt/NdcDtEJP5C9/vHN
yVB14iGgtlRxJU+Ya93l/eopbCLf0KnhxP83mjXaclzOr879dHaiqmV6k7TV0cqm
0oblfGeaK+7REgXbKozj0vI3151HqIumrhcMKATFv0ySt/1EfflnsD7tC3WCgg/2
0qroGS8M6YtvFh9hL3pLj9PATIxPXMeGjVwade3QMc4YadRtx+wsnkGEIJxk58oO
ZjX/CGpMABpXHaXemNKPxGFT9l9ucxljT+hI24miW0Yd+hOYiYxo4celYJ4zNFzU
0RLGha+AZvkKSX4IgMZd0XvKXQ0uYsc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:13:17 2025 by rpki-client