Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa
File:                     cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa (raw, json)
Hash identifier:          vzMOR7GY4s8kuSQqSKwV+G/D7jbAHauUlwg6Sj2CnYQ=
Subject key identifier:   80:DD:71:28:9B:42:A7:AE:BF:53:B0:51:81:60:54:F8:FB:53:D8:77
Certificate issuer:       /CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
Certificate serial:       010D0C9F432858495C2431F912A14FD2A2B58500
Authority key identifier: 91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        199.244.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:31:f9:12:a1:4f:d2:a2:b5:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=c04c9499-c7dc-4219-a06d-6366f7f1bf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:fc:02:5e:a3:a5:8c:b7:cb:d6:88:20:a0:
                    c1:06:92:92:d2:9c:01:b2:e9:f6:c5:c8:d1:96:bc:
                    e8:f8:10:fd:09:ae:c8:00:63:e8:26:1e:98:e5:f3:
                    dc:98:8f:19:59:bc:66:1b:c3:ca:57:0d:99:3b:cc:
                    41:07:63:07:b0:e6:a0:45:c8:d4:db:22:27:05:e7:
                    9a:a4:8f:62:95:9c:53:e2:bd:2e:ec:71:1c:6a:c5:
                    f8:b1:5a:6f:22:11:59:40:45:f9:31:07:fb:a0:77:
                    d1:b6:dd:95:ee:91:32:fb:3c:12:ef:7e:9a:92:c2:
                    22:1a:eb:2f:52:ad:fd:e6:4c:0a:84:c2:82:ab:1c:
                    58:c5:f9:c3:8a:b9:c7:d3:25:9d:95:06:09:cf:f7:
                    51:4d:9f:6b:27:29:3d:89:10:df:96:fb:fe:d4:6c:
                    45:b3:6c:a5:f4:b4:ea:d3:11:8b:6e:24:1a:86:a4:
                    8d:71:d4:e2:4c:bf:2f:3d:0a:97:cb:6a:98:6a:9b:
                    12:c5:c7:9e:1d:cf:b5:09:e1:5c:de:9d:b0:9a:f5:
                    45:66:1c:f4:71:a3:8a:d4:f8:1e:14:c0:55:36:e4:
                    8c:16:17:66:58:f8:d8:c0:73:e3:aa:ea:52:3d:cd:
                    9b:be:36:93:b6:62:d9:87:83:5a:10:c9:15:6d:5c:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DD:71:28:9B:42:A7:AE:BF:53:B0:51:81:60:54:F8:FB:53:D8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/cafc629d-bfcd-3f04-9ea0-55c37ea7a701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl

            X509v3 Authority Key Identifier:
                keyid:91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:c6:a4:6d:a0:08:23:c9:be:eb:d2:be:14:46:cc:c5:90:
         c2:27:38:12:23:e2:c3:a4:ca:57:84:39:61:4d:dc:5e:6b:79:
         47:7e:1a:37:ac:09:17:20:b0:56:5a:bb:e0:92:da:f4:b0:38:
         e4:31:78:d7:3b:87:75:a0:da:16:47:73:45:0f:a5:8c:ef:03:
         1d:96:db:94:dc:90:bf:1c:c9:8c:87:7a:05:89:76:c2:65:88:
         d2:79:a6:07:85:4d:bd:d1:5a:59:38:eb:95:bc:cc:88:a2:e4:
         7b:0f:99:0a:5b:a6:ed:62:c9:f7:1c:e2:93:c7:66:7a:95:dc:
         7a:2b:83:8b:67:c3:9a:3e:c1:0c:57:16:38:fc:2b:62:57:1a:
         66:e9:d2:35:c3:ce:61:d5:b7:2a:49:8c:66:1f:9f:7d:38:79:
         b2:0c:f3:32:ff:e6:81:fc:f7:76:6f:9f:02:85:35:bf:92:69:
         56:7c:47:93:86:e8:df:03:2c:71:ee:0b:e9:2c:c8:a9:4c:26:
         ae:48:ba:57:7f:32:b3:67:c7:89:84:14:46:7e:ef:6c:d0:fe:
         d8:9a:e3:07:dc:87:9a:68:bf:b9:3b:15:4c:c9:77:e2:67:37:
         dc:9b:c6:0d:ea:0c:1f:1d:ec:e1:1d:71:87:b5:41:cb:37:a1:
         f1:e6:40:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDH5EqFP0qK1hQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ4YWRiMmUtMmFjMS00ZDJjLTk0NDUtMjljMjdmNTI3
ZTg0MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
YzA0Yzk0OTktYzdkYy00MjE5LWEwNmQtNjM2NmY3ZjFiZjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO/8Al6jpYy3y9aIIKDBBpKS0pwBsun2xcjR
lrzo+BD9Ca7IAGPoJh6Y5fPcmI8ZWbxmG8PKVw2ZO8xBB2MHsOagRcjU2yInBeea
pI9ilZxT4r0u7HEcasX4sVpvIhFZQEX5MQf7oHfRtt2V7pEy+zwS736aksIiGusv
Uq395kwKhMKCqxxYxfnDirnH0yWdlQYJz/dRTZ9rJyk9iRDflvv+1GxFs2yl9LTq
0xGLbiQahqSNcdTiTL8vPQqXy2qYapsSxceeHc+1CeFc3p2wmvVFZhz0caOK1Pge
FMBVNuSMFhdmWPjYwHPjqupSPc2bvjaTtmLZh4NaEMkVbVw9RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIDdcSibQqeuv1OwUYFgVPj7U9h3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNDhh
ZGIyZS0yYWMxLTRkMmMtOTQ0NS0yOWMyN2Y1MjdlODQvY2FmYzYyOWQtYmZjZC0z
ZjA0LTllYTAtNTVjMzdlYTdhNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDQ4YWRiMmUtMmFjMS00ZDJjLTk0
NDUtMjljMjdmNTI3ZTg0L2Q0OGFkYjJlLTJhYzEtNGQyYy05NDQ1LTI5YzI3ZjUy
N2U4NC5jcmwwHwYDVR0jBBgwFoAUkQY2MccRkzRKy8V9wyrbx1N77RgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNDhhZGIyZS0yYWMxLTRkMmMtOTQ0NS0yOWMy
N2Y1MjdlODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/RiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI/VxqRtoAgjyb7r0r4URszFkMInOBIj4sOkyleEOWFN3F5reUd+Gjes
CRcgsFZau+CS2vSwOOQxeNc7h3Wg2hZHc0UPpYzvAx2W25TckL8cyYyHegWJdsJl
iNJ5pgeFTb3RWlk465W8zIii5HsPmQpbpu1iyfcc4pPHZnqV3Horg4tnw5o+wQxX
Fjj8K2JXGmbp0jXDzmHVtypJjGYfn304ebIM8zL/5oH893ZvnwKFNb+SaVZ8R5OG
6N8DLHHuC+ksyKlMJq5Iuld/MrNnx4mEFEZ+72zQ/tia4wfch5pov7k7FUzJd+Jn
N9ybxg3qDB8d7OEdcYe1Qcs3ofHmQK0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:07 2025 by rpki-client