Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa
File:                     d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa (raw, json)
Hash identifier:          ss15Ju/DpjvtYqWyRvJlr3i9oNgaNAOko4//5MOpBts=
Subject key identifier:   E7:0D:75:BB:6F:88:DE:B4:63:12:93:C5:20:BA:BE:8B:96:43:8D:6D
Certificate issuer:       /CN=2d723287-d624-4178-939e-a7d8be3facc5
Certificate serial:       010D0C9F43285848E16BDC3B57C78150AD3B0680
Authority key identifier: 60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     49544
IP address blocks:        199.27.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:dc:3b:57:c7:81:50:ad:3b:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d723287-d624-4178-939e-a7d8be3facc5
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=6d505200-e828-4c18-add8-f08aa5546319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:18:de:d0:40:14:70:b0:a3:6e:b6:b8:71:
                    6e:57:4a:95:a2:88:33:d2:f4:aa:c6:0e:58:ea:6e:
                    a3:7a:ce:68:ad:bd:4d:1d:3f:05:f0:f0:39:31:d5:
                    4e:f3:74:56:44:65:90:ce:06:78:7d:8a:f5:ed:19:
                    b9:5c:6d:5f:43:05:dc:5e:28:4c:d4:63:de:d5:ce:
                    1b:92:95:91:d0:69:2c:d1:2b:e1:ba:d9:12:4d:29:
                    08:b2:24:2a:d8:22:1c:64:c8:54:64:80:3f:57:08:
                    8f:80:e1:ae:7c:da:db:45:f1:43:09:1e:9b:63:c2:
                    7f:49:05:d0:02:94:43:2d:a8:f5:e0:a2:d2:6c:79:
                    21:c7:8f:c7:7a:4a:5e:18:ba:6e:04:1d:cb:fa:47:
                    0f:1c:47:ef:de:6c:6c:f3:40:75:28:51:c9:e7:f8:
                    eb:20:4d:33:ec:71:b6:7f:a4:95:ad:84:7f:b6:3b:
                    9b:fb:77:20:88:72:d8:e4:cd:d7:89:5a:4e:05:f0:
                    35:e5:d4:3f:ef:a1:2a:49:c1:07:dc:1f:32:a1:bb:
                    4f:bb:42:d6:74:49:51:dd:73:bf:75:8a:3e:b3:f2:
                    38:7a:e0:64:bf:a2:ab:d4:73:d8:7c:a4:64:bb:67:
                    6e:8c:31:ff:59:8e:7b:93:73:3f:aa:5f:6b:63:e5:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:75:BB:6F:88:DE:B4:63:12:93:C5:20:BA:BE:8B:96:43:8D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/d9891b26-1b1a-3db7-a5cd-5cb19be825bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.crl

            X509v3 Authority Key Identifier:
                keyid:60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:df:e1:b7:0d:07:3a:d5:ff:98:46:b8:6f:d4:02:e8:5e:
         23:31:64:2b:84:81:10:30:62:c8:d9:dd:66:ec:b7:8c:18:a6:
         22:a2:dc:3b:df:ea:ed:c3:62:08:df:a5:56:ac:83:71:d6:d1:
         b4:0e:8a:85:d3:e9:0c:d2:6c:23:bb:f8:95:9a:85:c1:f6:09:
         ea:b9:8c:e5:4f:d3:7a:5f:21:99:67:a7:11:dc:2d:56:f2:8b:
         32:04:20:74:5b:e0:36:18:7d:a8:f6:69:7d:a5:26:ea:99:02:
         90:03:56:ba:9c:0f:0c:3c:0b:24:16:ae:9c:66:2b:ac:42:ed:
         ff:36:b8:fd:f7:65:a6:a1:7c:f0:6e:88:c5:c0:f3:92:c6:08:
         81:9b:62:b5:26:f5:90:ce:6a:7d:61:23:8c:c2:54:e8:10:2a:
         1c:c6:10:32:80:45:1b:2e:f9:d4:bc:c5:9e:58:78:bb:1a:36:
         7b:cc:27:63:33:e1:de:9b:ee:ba:1b:86:37:11:ea:c4:a4:f5:
         ed:85:a7:62:a2:e2:f6:de:03:e0:cb:9b:6a:43:b7:de:10:72:
         46:ab:7c:68:05:74:02:5d:a4:38:86:f3:31:0e:d5:78:40:5c:
         0e:21:28:5b:ea:9f:15:6a:91:45:e0:28:3d:97:33:73:43:92:
         04:72:ae:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9w7V8eBUK07BoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ3MjMyODctZDYyNC00MTc4LTkzOWUtYTdkOGJlM2Zh
Y2M1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmQ1MDUyMDAtZTgyOC00YzE4LWFkZDgtZjA4YWE1NTQ2MzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02IY3tBAFHCwo262uHFuV0qVoogz0vSqxg5Y
6m6jes5orb1NHT8F8PA5MdVO83RWRGWQzgZ4fYr17Rm5XG1fQwXcXihM1GPe1c4b
kpWR0Gks0SvhutkSTSkIsiQq2CIcZMhUZIA/VwiPgOGufNrbRfFDCR6bY8J/SQXQ
ApRDLaj14KLSbHkhx4/HekpeGLpuBB3L+kcPHEfv3mxs80B1KFHJ5/jrIE0z7HG2
f6SVrYR/tjub+3cgiHLY5M3XiVpOBfA15dQ/76EqScEH3B8yobtPu0LWdElR3XO/
dYo+s/I4euBkv6Kr1HPYfKRku2dujDH/WY57k3M/ql9rY+WolQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcNdbtviN60YxKTxSC6vouWQ41tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDcy
MzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4YmUzZmFjYzUvZDk4OTFiMjYtMWIxYS0z
ZGI3LWE1Y2QtNWNiMTliZTgyNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmQ3MjMyODctZDYyNC00MTc4LTkz
OWUtYTdkOGJlM2ZhY2M1LzJkNzIzMjg3LWQ2MjQtNDE3OC05MzllLWE3ZDhiZTNm
YWNjNS5jcmwwHwYDVR0jBBgwFoAUYP5Vqphf36l3O/uBP1OeYAqlpdUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDcyMzI4Ny1kNjI0LTQxNzgtOTM5ZS1hN2Q4
YmUzZmFjYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxvUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABs03+G3DQc61f+YRrhv1ALoXiMxZCuEgRAwYsjZ3Wbst4wYpiKi3Dvf
6u3DYgjfpVasg3HW0bQOioXT6QzSbCO7+JWahcH2Ceq5jOVP03pfIZlnpxHcLVby
izIEIHRb4DYYfaj2aX2lJuqZApADVrqcDww8CyQWrpxmK6xC7f82uP33ZaahfPBu
iMXA85LGCIGbYrUm9ZDOan1hI4zCVOgQKhzGEDKARRsu+dS8xZ5YeLsaNnvMJ2Mz
4d6b7robhjcR6sSk9e2Fp2Ki4vbeA+DLm2pDt94QckarfGgFdAJdpDiG8zEO1XhA
XA4hKFvqnxVqkUXgKD2XM3NDkgRyruo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:27 2025 by rpki-client