Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
File:                     444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa (raw, json)
Hash identifier:          UrlxF5PzZhVqyqFekHm0fMcfdtfO1+M9zcrdU6rn/3g=
Subject key identifier:   5E:32:CF:95:66:DC:8A:68:F8:9F:03:F0:59:92:88:53:9C:36:19:9D
Certificate issuer:       /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
Certificate serial:       010D0C9F43285848EF616A0A124A1C501A207F80
Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     32402
IP address blocks:        199.7.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:6a:0a:12:4a:1c:50:1a:20:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=24590e31-60a6-4bbd-9d11-c7a48a6338c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:90:d4:19:d2:6d:13:fe:e1:b5:6f:d9:7f:
                    ba:34:82:af:ca:ce:ee:c8:4c:c5:98:8d:33:9c:1f:
                    4e:34:ba:fd:5d:38:fe:2a:e6:9b:d2:c4:94:fd:24:
                    b6:a6:7d:d9:6b:6c:07:d2:3c:0a:1f:94:73:05:36:
                    1b:b3:4a:6d:c0:c1:30:0d:e2:f0:2c:9a:ac:35:0b:
                    9b:b7:68:f4:73:80:51:4c:2d:bf:6f:93:52:ac:8d:
                    24:a3:fb:de:c5:7f:4e:f1:73:37:d5:14:e5:ef:25:
                    2c:8c:0f:13:87:ef:44:ad:2e:dd:9c:73:14:bb:c3:
                    d6:94:e0:6d:48:8a:b5:77:f9:fa:24:db:f6:71:f4:
                    90:30:65:09:9b:86:0a:73:8d:0e:1a:9a:04:db:f7:
                    40:a0:36:83:85:32:30:c7:89:8c:47:e0:7f:b4:08:
                    fc:9f:80:10:43:f4:85:a7:26:ec:38:38:66:8a:42:
                    62:01:b8:3b:35:f4:26:39:7b:c5:51:8e:de:10:8a:
                    c2:80:e0:bb:d2:d0:c4:e5:c9:9d:ba:6a:97:f9:ba:
                    4a:62:b7:72:78:d6:5b:c8:df:f8:d4:0f:2d:a2:1e:
                    85:27:37:d3:fe:f8:d2:cd:26:e4:ee:8e:80:13:6c:
                    21:fe:b1:7f:a2:15:fd:7d:7b:38:8c:4f:98:91:9f:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:32:CF:95:66:DC:8A:68:F8:9F:03:F0:59:92:88:53:9C:36:19:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/444c7ed5-5de6-3d29-9a31-1dee1d2edcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:69:2b:e0:09:0d:da:b4:8e:e3:32:b4:a1:22:a3:70:0f:4a:
         34:46:35:5c:ad:5c:a1:3c:6e:58:61:58:56:15:2c:91:48:a8:
         b1:38:dc:7c:74:e1:59:21:b4:53:2f:6d:e2:c6:cd:cc:c8:a6:
         6c:29:b6:29:43:e7:fe:bf:15:e3:db:0e:e3:dd:cc:2a:4d:b3:
         39:03:38:cb:34:f5:60:66:0c:46:0e:a2:3f:4d:92:71:40:31:
         54:65:f9:8f:80:06:22:41:4e:fa:e7:9c:8d:67:90:92:a2:cb:
         9b:4a:1b:51:0f:d7:58:f7:de:6e:7a:9b:1c:0f:ef:62:e4:06:
         98:ac:9f:5c:84:9f:9d:94:72:19:35:f1:5d:28:05:ed:5a:4e:
         9e:fc:0d:a8:d0:cc:4b:83:e6:3b:4b:58:22:6f:c6:72:41:f6:
         05:f7:f1:07:79:11:31:9a:e6:3f:49:e0:87:08:64:b9:24:92:
         f7:1d:99:a2:c8:c8:b9:2e:59:74:fb:49:de:be:66:82:33:d9:
         61:7f:91:86:07:17:91:36:1a:cd:e1:3a:5d:14:6d:55:f2:6c:
         94:6e:90:81:cf:c0:c2:70:26:68:8f:10:30:d9:3a:6f:01:f9:
         ae:86:65:9f:4e:fa:1d:12:d1:1f:a0:7e:11:8f:5d:65:4a:c5:
         36:1f:4c:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWoKEkocUBogf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNm
N2Y4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
MjQ1OTBlMzEtNjBhNi00YmJkLTlkMTEtYzdhNDhhNjMzOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0+Q1BnSbRP+4bVv2X+6NIKvys7uyEzFmI0z
nB9ONLr9XTj+Kuab0sSU/SS2pn3Za2wH0jwKH5RzBTYbs0ptwMEwDeLwLJqsNQub
t2j0c4BRTC2/b5NSrI0ko/vexX9O8XM31RTl7yUsjA8Th+9ErS7dnHMUu8PWlOBt
SIq1d/n6JNv2cfSQMGUJm4YKc40OGpoE2/dAoDaDhTIwx4mMR+B/tAj8n4AQQ/SF
pybsODhmikJiAbg7NfQmOXvFUY7eEIrCgOC70tDE5cmdumqX+bpKYrdyeNZbyN/4
1A8toh6FJzfT/vjSzSbk7o6AE2wh/rF/ohX9fXs4jE+YkZ+AxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4yz5Vm3Ipo+J8D8FmSiFOcNhmdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDhl
NGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvNDQ0YzdlZDUtNWRlNi0z
ZDI5LTlhMzEtMWRlZTFkMmVkY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1
MTUtOTAxNzA4YzNmN2Y4L2VkOGU0ZGZhLWU5MGUtNGUzZC1hNTE1LTkwMTcwOGMz
ZjdmOC5jcmwwHwYDVR0jBBgwFoAU2R0Zrz+TBG1NWTZN1xzphxtdhOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3
MDhjM2Y3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwe5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVpK+AJDdq0juMytKEio3APSjRGNVytXKE8blhhWFYVLJFIqLE43Hx0
4VkhtFMvbeLGzczIpmwptilD5/6/FePbDuPdzCpNszkDOMs09WBmDEYOoj9NknFA
MVRl+Y+ABiJBTvrnnI1nkJKiy5tKG1EP11j33m56mxwP72LkBpisn1yEn52Uchk1
8V0oBe1aTp78DajQzEuD5jtLWCJvxnJB9gX38Qd5ETGa5j9J4IcIZLkkkvcdmaLI
yLkuWXT7Sd6+ZoIz2WF/kYYHF5E2Gs3hOl0UbVXybJRukIHPwMJwJmiPEDDZOm8B
+a6GZZ9O+h0S0R+gfhGPXWVKxTYfTCw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:15 2025 by rpki-client