Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/070e180b-eea6-3cd2-8735-0bc106d28546.roa
File:                     070e180b-eea6-3cd2-8735-0bc106d28546.roa (raw, json)
Hash identifier:          X/eQMWPsMko4+3D09ueqBteHoGasFSDj0190BfsDw6U=
Subject key identifier:   F8:8F:86:F0:64:B0:4B:EA:8F:6C:6F:F5:66:C5:62:BC:70:BD:72:8E
Certificate issuer:       /CN=7a399323-7b1b-4575-b54c-0fca76ac3dfa
Certificate serial:       010D0C9F43285848C580EE156A07ED9A11DC23C0
Authority key identifier: CE:AB:69:B8:E4:70:3B:19:7D:E7:C2:E9:8A:3E:57:6E:3D:7C:1E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/070e180b-eea6-3cd2-8735-0bc106d28546.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     62744
IP address blocks:        199.249.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/7a399323-7b1b-4575-b54c-0fca76ac3dfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/7a399323-7b1b-4575-b54c-0fca76ac3dfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:ee:15:6a:07:ed:9a:11:dc:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a399323-7b1b-4575-b54c-0fca76ac3dfa
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=115d550f-cb0c-47dc-9e02-2fc551a121f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:39:ee:37:bd:48:c2:13:b2:5b:6e:ce:95:
                    e8:3a:b6:50:6d:d1:79:40:34:76:00:29:27:bf:df:
                    8a:ac:5b:48:f0:c4:78:9e:1d:d6:d5:ff:3d:d3:e8:
                    8d:c0:27:76:6c:01:be:72:72:c1:62:53:41:cc:b4:
                    11:40:8d:39:11:49:f3:2a:b6:d0:f6:e9:cd:a7:5f:
                    f5:cd:a9:66:2a:6b:68:67:5b:e4:0f:15:85:b3:3a:
                    5f:88:3a:5b:2c:3d:82:f6:85:59:71:62:6d:fe:ce:
                    29:a7:bd:2d:de:e3:bf:dc:2e:56:f0:9f:85:a7:92:
                    ae:eb:c8:7b:7b:c4:e5:a2:21:1c:e2:fa:3b:e0:cb:
                    60:49:45:5c:4e:8c:e5:03:7d:54:9b:29:e5:e7:e7:
                    a9:fc:d2:ff:6d:1c:3d:6d:ef:2e:74:3f:08:cb:f5:
                    06:99:d7:98:55:45:57:10:ee:b4:cc:ff:46:3c:5f:
                    21:c1:a2:19:2a:8d:db:08:6f:1a:f3:cd:ce:3e:ae:
                    75:ca:09:58:62:ac:f2:96:34:bf:37:b6:4f:78:25:
                    77:c2:a1:40:d2:82:c5:97:99:02:a7:85:c5:27:73:
                    98:cc:af:ad:9d:a5:83:52:fc:d3:c5:3f:32:86:d5:
                    8c:5b:e7:c8:35:34:be:07:c6:89:f3:16:c2:03:21:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:86:F0:64:B0:4B:EA:8F:6C:6F:F5:66:C5:62:BC:70:BD:72:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/070e180b-eea6-3cd2-8735-0bc106d28546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa/7a399323-7b1b-4575-b54c-0fca76ac3dfa.crl

            X509v3 Authority Key Identifier:
                keyid:CE:AB:69:B8:E4:70:3B:19:7D:E7:C2:E9:8A:3E:57:6E:3D:7C:1E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a399323-7b1b-4575-b54c-0fca76ac3dfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:5b:81:44:15:89:7a:8c:41:44:82:98:e8:b3:12:4f:ec:
         15:7a:22:ac:e7:cb:58:12:02:17:38:03:cf:9f:c3:ac:c4:25:
         bc:3d:69:6a:48:2f:ad:61:0e:ed:ca:c7:75:f0:05:52:e9:2f:
         6a:88:0a:be:ae:b4:70:83:f6:ac:44:86:76:b6:ba:26:68:0d:
         d0:31:eb:f4:2f:3d:d6:6b:a2:8a:ec:c2:ce:78:d8:e5:c3:c1:
         f5:e8:f7:fa:56:b4:ae:dc:e6:af:af:ea:16:13:61:37:fd:27:
         99:0d:51:08:99:78:d6:93:85:f2:74:7e:2a:a4:4c:d4:a5:a9:
         02:f6:63:7a:8d:44:2a:b1:b1:ca:1e:5b:e6:17:82:ab:56:fb:
         9c:6b:b3:e7:3e:75:b0:3b:3d:d7:4b:d6:90:4d:3d:d8:80:a5:
         15:f0:56:fa:e5:76:3b:6a:22:c1:ea:ff:38:ae:d0:d8:78:54:
         fc:2a:ba:55:87:b0:c3:d7:86:9e:f6:51:08:68:ca:6e:c3:09:
         a0:20:b5:5c:0d:c3:84:4c:7b:80:50:ae:a1:6e:85:24:1e:a8:
         5c:72:b3:e9:94:95:fc:af:12:42:4a:7f:9f:40:1b:3e:4c:08:
         1d:45:79:7a:39:d6:75:26:fc:28:ab:a6:af:56:32:8d:99:3e:
         0a:40:07:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgO4VagftmhHcI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EzOTkzMjMtN2IxYi00NTc1LWI1NGMtMGZjYTc2YWMz
ZGZhMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTE1ZDU1MGYtY2IwYy00N2RjLTllMDItMmZjNTUxYTEyMWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYQ57je9SMITsltuzpXoOrZQbdF5QDR2ACkn
v9+KrFtI8MR4nh3W1f890+iNwCd2bAG+cnLBYlNBzLQRQI05EUnzKrbQ9unNp1/1
zalmKmtoZ1vkDxWFszpfiDpbLD2C9oVZcWJt/s4pp70t3uO/3C5W8J+Fp5Ku68h7
e8TloiEc4vo74MtgSUVcTozlA31Umynl5+ep/NL/bRw9be8udD8Iy/UGmdeYVUVX
EO60zP9GPF8hwaIZKo3bCG8a883OPq51yglYYqzyljS/N7ZPeCV3wqFA0oLFl5kC
p4XFJ3OYzK+tnaWDUvzTxT8yhtWMW+fINTS+B8aJ8xbCAyHwzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPiPhvBksEvqj2xv9WbFYrxwvXKOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTM5
OTMyMy03YjFiLTQ1NzUtYjU0Yy0wZmNhNzZhYzNkZmEvMDcwZTE4MGItZWVhNi0z
Y2QyLTg3MzUtMGJjMTA2ZDI4NTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2EzOTkzMjMtN2IxYi00NTc1LWI1
NGMtMGZjYTc2YWMzZGZhLzdhMzk5MzIzLTdiMWItNDU3NS1iNTRjLTBmY2E3NmFj
M2RmYS5jcmwwHwYDVR0jBBgwFoAUzqtpuORwOxl958Lpij5Xbj18HoMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTM5OTMyMy03YjFiLTQ1NzUtYjU0Yy0wZmNh
NzZhYzNkZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/ngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnlW4FEFYl6jEFEgpjosxJP7BV6Iqzny1gSAhc4A8+fw6zEJbw9aWpI
L61hDu3Kx3XwBVLpL2qICr6utHCD9qxEhna2uiZoDdAx6/QvPdZroorsws542OXD
wfXo9/pWtK7c5q+v6hYTYTf9J5kNUQiZeNaThfJ0fiqkTNSlqQL2Y3qNRCqxscoe
W+YXgqtW+5xrs+c+dbA7PddL1pBNPdiApRXwVvrldjtqIsHq/ziu0Nh4VPwqulWH
sMPXhp72UQhoym7DCaAgtVwNw4RMe4BQrqFuhSQeqFxys+mUlfyvEkJKf59AGz5M
CB1FeXo51nUm/Cirpq9WMo2ZPgpAB1s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:05 2025 by rpki-client