Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/accec111-0826-3dfb-b70c-0a420b90c007.roa
File:                     accec111-0826-3dfb-b70c-0a420b90c007.roa (raw, json)
Hash identifier:          h5s5ozIhH6K1Z356AcorjT8jasvRd17UWG8mUoB0zQk=
Subject key identifier:   47:59:DB:00:EF:6F:D1:27:EA:9E:86:59:F4:EA:DE:16:4F:83:5D:D7
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285848ECF3B26A82FB6ECD702E4C80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/accec111-0826-3dfb-b70c-0a420b90c007.roa
Signing time:             Tue 18 Feb 2025 17:08:41 +0000
ROA not before:           Tue 18 Feb 2025 17:08:41 +0000
ROA not after:            Mon 19 May 2025 16:08:41 +0000
asID:                     36273
IP address blocks:        199.7.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:f3:b2:6a:82:fb:6e:cd:70:2e:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Feb 18 17:08:41 2025 GMT
            Not After : May 19 16:08:41 2025 GMT
        Subject: CN=29701f8c-4853-4232-a5e5-4ef719b4be5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:66:3d:60:d8:37:86:43:72:38:4e:e5:06:
                    17:a1:aa:95:25:f4:23:10:9b:e6:c6:ac:aa:26:41:
                    83:6e:ef:7e:99:06:e8:b1:72:bd:73:18:6c:29:c2:
                    d6:f3:ca:7e:aa:a8:e1:23:a1:8f:1f:b0:1b:d5:c6:
                    78:cb:a0:dd:92:8e:42:e5:44:00:84:78:6c:af:e8:
                    a1:08:81:0e:5a:c6:b4:ca:e8:3b:f2:bb:ea:6d:91:
                    75:cf:d6:77:70:40:5c:76:8f:39:54:87:fe:ec:2e:
                    8e:19:50:bb:43:fe:e1:45:e3:06:7b:8a:00:68:b8:
                    0e:e4:9f:7e:b3:4d:8a:c8:ad:ba:4f:3e:be:8e:8d:
                    14:c3:51:f4:de:02:5b:ed:04:07:ab:49:dd:35:56:
                    e8:b2:f6:b5:e8:65:85:77:ce:b5:e4:2f:64:2b:19:
                    eb:30:84:b3:62:d3:8e:2b:b9:1b:5c:e8:e9:2f:c3:
                    97:88:79:33:e0:c6:c9:ee:32:24:d3:c2:6f:9c:12:
                    bd:ba:4e:83:c2:68:7b:5e:59:e4:24:f7:6f:b9:b9:
                    e3:ed:5b:f2:9d:99:27:b6:6d:21:00:1c:a5:2a:b5:
                    6a:43:6c:91:d7:b6:92:82:4a:e9:4e:8e:6e:4f:4a:
                    67:e4:44:77:5e:fb:7d:05:a7:c1:f1:dd:c8:13:58:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:59:DB:00:EF:6F:D1:27:EA:9E:86:59:F4:EA:DE:16:4F:83:5D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/accec111-0826-3dfb-b70c-0a420b90c007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:f3:92:de:9d:28:d3:8b:2c:fc:84:4a:e3:c5:a8:20:c5:
         37:a4:ca:2e:c8:82:00:3d:66:64:a8:e6:39:0c:67:61:65:78:
         91:ff:25:dd:91:24:63:19:a9:9d:ad:fd:91:0a:75:6e:6f:cb:
         fe:5b:49:38:13:95:0a:bf:e1:cc:59:ae:5c:d3:6c:86:11:6b:
         e4:b7:4f:aa:91:86:07:03:9f:63:41:e2:e3:5e:33:3c:37:26:
         2c:99:57:5a:6f:36:96:26:fb:16:e9:2e:bc:6b:37:ae:85:68:
         76:04:f1:9e:1d:e5:d9:5c:05:ca:89:4d:6c:1b:a2:fc:6b:37:
         47:cf:11:ef:bd:93:25:96:dc:4c:8d:e9:95:d8:44:77:3e:bb:
         5b:07:7a:f8:90:06:af:f2:49:c2:8b:41:b6:da:d8:bd:d0:8b:
         55:12:56:e5:7a:e4:73:b4:f5:99:f8:b3:5a:f6:47:e4:04:d0:
         70:85:ad:b4:78:e4:08:f7:84:60:10:7b:74:56:d8:ea:d9:14:
         4f:9b:e0:19:9b:e8:e2:eb:5e:eb:a1:37:87:10:ac:0b:d0:6c:
         19:9c:ee:ed:6e:fa:54:8d:5a:44:0f:4f:17:57:09:d3:29:f0:
         12:0b:d2:bb:f0:a5:c3:4a:c4:a7:a9:8e:38:3f:39:47:51:d9:
         75:0a:c1:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjs87JqgvtuzXAuTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI1MDIxODE3MDg0MVoXDTI1MDUxOTE2MDg0MVowLzEtMCsGA1UEAxMk
Mjk3MDFmOGMtNDg1My00MjMyLWE1ZTUtNGVmNzE5YjRiZTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN5mPWDYN4ZDcjhO5QYXoaqVJfQjEJvmxqyq
JkGDbu9+mQbosXK9cxhsKcLW88p+qqjhI6GPH7Ab1cZ4y6Ddko5C5UQAhHhsr+ih
CIEOWsa0yug78rvqbZF1z9Z3cEBcdo85VIf+7C6OGVC7Q/7hReMGe4oAaLgO5J9+
s02KyK26Tz6+jo0Uw1H03gJb7QQHq0ndNVbosva16GWFd8615C9kKxnrMISzYtOO
K7kbXOjpL8OXiHkz4MbJ7jIk08JvnBK9uk6Dwmh7XlnkJPdvubnj7VvynZkntm0h
ABylKrVqQ2yR17aSgkrpTo5uT0pn5ER3Xvt9BafB8d3IE1iRZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdZ2wDvb9En6p6GWfTq3hZPg13XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYWNjZWMxMTEtMDgyNi0z
ZGZiLWI3MGMtMGE0MjBiOTBjMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwecMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtM85LenSjTiyz8hErjxaggxTekyi7IggA9ZmSo5jkMZ2FleJH/Jd2R
JGMZqZ2t/ZEKdW5vy/5bSTgTlQq/4cxZrlzTbIYRa+S3T6qRhgcDn2NB4uNeMzw3
JiyZV1pvNpYm+xbpLrxrN66FaHYE8Z4d5dlcBcqJTWwbovxrN0fPEe+9kyWW3EyN
6ZXYRHc+u1sHeviQBq/yScKLQbba2L3Qi1USVuV65HO09Zn4s1r2R+QE0HCFrbR4
5Aj3hGAQe3RW2OrZFE+b4Bmb6OLrXuuhN4cQrAvQbBmc7u1u+lSNWkQPTxdXCdMp
8BIL0rvwpcNKxKepjjg/OUdR2XUKwV8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:30 2025 by rpki-client