Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa
File:                     7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa (raw, json)
Hash identifier:          0VqopY/at67cts4ph5ThqdRF1XjNt0CT1l+vuYxaGzg=
Subject key identifier:   A7:73:D5:71:21:BE:7D:B5:0B:B4:76:CE:E2:3E:CB:4B:6E:40:1D:77
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F43285848EF61364E8BEFE568D9194F80
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14907
IP address blocks:        198.35.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:36:4e:8b:ef:e5:68:d9:19:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=a709263a-487e-4ac0-9318-d89da24f493f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:a0:21:0d:67:70:52:eb:c2:eb:37:fd:85:
                    14:23:64:b1:f8:64:33:23:00:14:ff:76:54:d0:78:
                    d9:31:78:df:c5:08:71:b4:8f:db:e0:42:a5:67:db:
                    4b:0f:26:08:4c:0b:eb:f8:82:fb:17:96:f5:ed:53:
                    0b:bd:34:ab:79:43:3d:ad:6a:2c:df:cd:f6:4f:70:
                    f3:2b:d2:98:4c:24:ba:f7:ac:1f:45:01:95:10:70:
                    3e:46:e3:cf:2c:f8:00:d2:5b:61:a9:20:e4:97:37:
                    dd:4c:09:a5:b5:0d:4b:d6:87:50:66:cd:3c:1c:30:
                    f2:8f:53:e7:4a:1a:70:58:26:fb:4d:77:13:09:a6:
                    18:17:b4:9f:35:86:64:97:38:ab:3b:75:dd:4d:c8:
                    8a:06:19:8b:b6:ac:3c:65:40:fc:9a:ed:cd:48:c4:
                    63:2e:81:17:a7:45:60:34:c6:8e:d8:09:76:26:f3:
                    e1:c8:6d:45:41:93:79:3b:83:c6:07:ac:d0:36:e1:
                    6e:a9:d7:25:87:31:60:8f:fa:37:4e:76:77:83:5c:
                    44:4a:11:5b:cd:9f:33:35:ae:c4:75:18:10:20:8a:
                    9a:13:9f:1e:e0:36:0c:66:c5:e7:18:f5:43:84:06:
                    2c:87:66:a6:b5:d5:dc:b8:f2:41:de:e0:16:ae:1c:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:73:D5:71:21:BE:7D:B5:0B:B4:76:CE:E2:3E:CB:4B:6E:40:1D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/7ea8a57b-27e0-34cf-9c83-eafcaf7be573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:39:84:40:c1:69:b3:fb:ea:55:00:75:11:37:75:0f:05:
         ec:69:f4:b6:16:c5:6d:0a:24:19:c8:96:ef:54:32:28:73:91:
         dd:cb:56:a7:06:97:2e:b3:79:5a:13:94:c3:90:17:75:9e:24:
         19:47:d9:09:4a:fd:29:d3:17:d5:34:6b:3d:62:15:5e:8d:a3:
         f8:61:f6:70:a2:1c:6b:b7:1c:ba:c0:78:16:a4:95:39:67:70:
         16:49:31:40:90:f6:7c:13:75:2e:71:71:ba:21:de:df:c9:00:
         bf:e0:90:15:4b:2d:79:d4:77:57:99:32:6e:c9:d1:1c:9b:5b:
         24:f5:07:8b:9e:29:9f:05:0e:d4:19:4e:b4:4e:8b:a0:3d:e8:
         95:6c:8d:ba:3e:cb:65:f3:f7:19:db:c3:0b:d0:ea:c9:7d:f7:
         e6:f6:ea:f4:23:57:c8:bd:92:6a:c9:1f:02:d2:8c:51:2e:e9:
         ec:b6:ff:72:c1:b6:a7:db:54:20:99:17:b0:47:18:8b:3b:ac:
         ce:e1:86:72:e0:38:be:c1:cb:28:d6:80:0f:30:f5:f2:11:5f:
         62:a9:d4:8b:a8:92:d6:51:5f:7c:e1:ae:1a:a4:67:8b:d7:6e:
         93:f3:6d:d6:c3:a0:0d:b6:a9:cf:cb:7c:f9:e3:b5:46:70:88:
         03:8f:a8:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTZOi+/laNkZT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzBhZTFjZmYtMzA5Yy00MGQxLTk3NjAtM2E4OWE0ODFl
OTk4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
YTcwOTI2M2EtNDg3ZS00YWMwLTkzMTgtZDg5ZGEyNGY0OTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva6gIQ1ncFLrwus3/YUUI2Sx+GQzIwAU/3ZU
0HjZMXjfxQhxtI/b4EKlZ9tLDyYITAvr+IL7F5b17VMLvTSreUM9rWos3832T3Dz
K9KYTCS696wfRQGVEHA+RuPPLPgA0lthqSDklzfdTAmltQ1L1odQZs08HDDyj1Pn
ShpwWCb7TXcTCaYYF7SfNYZklzirO3XdTciKBhmLtqw8ZUD8mu3NSMRjLoEXp0Vg
NMaO2Al2JvPhyG1FQZN5O4PGB6zQNuFuqdclhzFgj/o3TnZ3g1xEShFbzZ8zNa7E
dRgQIIqaE58e4DYMZsXnGPVDhAYsh2amtdXcuPJB3uAWrhxtywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdz1XEhvn21C7R2zuI+y0tuQB13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFl
MWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5YTQ4MWU5OTgvN2VhOGE1N2ItMjdlMC0z
NGNmLTljODMtZWFmY2FmN2JlNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzBhZTFjZmYtMzA5Yy00MGQxLTk3
NjAtM2E4OWE0ODFlOTk4L2MwYWUxY2ZmLTMwOWMtNDBkMS05NzYwLTNhODlhNDgx
ZTk5OC5jcmwwHwYDVR0jBBgwFoAUPVzJ0t/g8RJOCVm/vnWnyTm7EwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFlMWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5
YTQ4MWU5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiMaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7BOYRAwWmz++pVAHURN3UPBexp9LYWxW0KJBnIlu9UMihzkd3LVqcG
ly6zeVoTlMOQF3WeJBlH2QlK/SnTF9U0az1iFV6No/hh9nCiHGu3HLrAeBaklTln
cBZJMUCQ9nwTdS5xcboh3t/JAL/gkBVLLXnUd1eZMm7J0RybWyT1B4ueKZ8FDtQZ
TrROi6A96JVsjbo+y2Xz9xnbwwvQ6sl99+b26vQjV8i9kmrJHwLSjFEu6ey2/3LB
tqfbVCCZF7BHGIs7rM7hhnLgOL7ByyjWgA8w9fIRX2Kp1IuoktZRX3zhrhqkZ4vX
bpPzbdbDoA22qc/LfPnjtUZwiAOPqAA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:41 2025 by rpki-client