Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa
File:                     3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa (raw, json)
Hash identifier:          6ZHfT3ZZF53Zbd+qu0NalrD5vd1Gw20uCQZMA/TmJDc=
Subject key identifier:   E8:C0:73:F6:A9:A6:40:80:D7:92:50:E6:E2:0F:55:46:D4:76:83:32
Certificate issuer:       /CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
Certificate serial:       010D0C9F43285849C20A130DD10E04DA7FB78F88
Authority key identifier: 7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     395224
IP address blocks:        67.199.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:13:0d:d1:0e:04:da:7f:b7:8f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=16ab6e99-ddc9-41f6-b3e5-dee7cb7572e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:ce:be:7c:13:ca:05:de:28:bb:0e:9b:e9:
                    9c:3a:ed:bd:6b:01:23:8c:ea:71:0a:34:cb:fb:ef:
                    00:b1:3b:a6:83:df:a8:19:16:19:1f:47:eb:b4:6c:
                    79:6b:5d:46:7c:af:3b:d0:29:9e:79:9c:3e:fd:1e:
                    9b:95:8e:97:61:72:5b:81:01:7b:9c:32:38:3b:b7:
                    b6:0c:e3:2b:dc:23:05:de:cc:ee:9d:38:0b:81:8e:
                    d6:b4:a5:40:4a:25:94:07:7a:d5:15:2b:5e:c7:19:
                    00:df:51:fc:e3:6c:97:bf:ab:f5:96:9b:83:cd:f5:
                    0b:32:e2:cd:ec:3d:54:74:86:31:c7:97:ee:e4:30:
                    61:e6:b6:b7:2b:7c:e0:c0:ae:67:38:37:14:2d:e3:
                    bc:42:61:a1:95:39:b9:5d:87:9b:f7:e0:a9:e8:a6:
                    0b:2a:c8:bf:d1:ee:28:d0:e9:0e:a2:4e:f8:b6:d4:
                    db:e6:84:71:f0:0c:58:53:a8:40:ce:0d:4c:4d:2d:
                    88:ed:e7:3c:fe:b3:57:e6:d8:a6:0b:fe:56:2e:7c:
                    07:67:14:2c:5b:bd:ee:2e:97:1d:c0:a2:44:39:64:
                    b7:2e:38:0b:2e:c0:e3:74:64:4f:7d:bb:a0:6f:48:
                    57:f3:ee:fa:1b:a3:2d:e0:38:ea:03:5a:69:51:3e:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C0:73:F6:A9:A6:40:80:D7:92:50:E6:E2:0F:55:46:D4:76:83:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/3c5bec82-2ad3-3d58-b0a8-72139bfcd6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.crl

            X509v3 Authority Key Identifier:
                keyid:7C:EF:22:A8:02:45:1A:70:15:CE:99:1E:76:7D:3A:53:61:36:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfcf1606-c11c-48e9-b8ee-c5e7ab9e53bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:b3:2b:05:d9:a4:aa:a7:ef:0c:83:b4:1a:b9:69:30:20:
         c9:34:e7:d9:70:d3:06:16:16:34:46:98:0b:d9:5f:98:94:78:
         8c:e7:29:6b:9e:7b:5a:b7:eb:e6:50:34:2a:1e:4b:69:15:c3:
         05:c9:89:47:fc:18:77:37:f5:a1:3c:79:45:df:59:3c:b1:0c:
         f0:14:36:77:a9:93:27:0b:70:4c:7c:9b:de:29:d6:2a:8b:ed:
         85:a7:ca:98:ae:f4:26:64:e0:fe:c3:14:5f:e8:4e:15:18:f9:
         f9:76:04:21:77:bb:b1:9f:cd:19:19:81:f6:85:16:dd:fc:ff:
         c0:13:44:9f:ab:df:9a:4c:3c:ee:6c:38:83:c7:ab:2c:35:db:
         55:08:80:c5:ad:c1:7e:de:2e:1e:12:e9:cf:09:4b:ac:fd:45:
         8c:dd:f0:b3:20:ae:36:12:0a:62:c2:b3:d5:9b:a3:e9:cf:d4:
         bf:95:95:55:cd:5e:27:64:0d:a4:50:2a:dd:61:8d:a1:58:9d:
         66:f8:15:ca:41:9c:d0:2e:b9:55:5c:82:67:3c:ca:e2:f0:49:
         c3:ea:43:dc:44:07:72:0b:48:b4:61:af:29:0f:dd:73:e3:7f:
         e9:c1:8e:db:56:6b:bd:f1:e1:77:9e:ff:a6:91:e4:4b:d0:f5:
         95:ab:fc:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChMN0Q4E2n+3j4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2ZjZjE2MDYtYzExYy00OGU5LWI4ZWUtYzVlN2FiOWU1
M2JkMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MTZhYjZlOTktZGRjOS00MWY2LWIzZTUtZGVlN2NiNzU3MmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKbOvnwTygXeKLsOm+mcOu29awEjjOpxCjTL
++8AsTumg9+oGRYZH0frtGx5a11GfK870CmeeZw+/R6blY6XYXJbgQF7nDI4O7e2
DOMr3CMF3szunTgLgY7WtKVASiWUB3rVFStexxkA31H842yXv6v1lpuDzfULMuLN
7D1UdIYxx5fu5DBh5ra3K3zgwK5nODcULeO8QmGhlTm5XYeb9+Cp6KYLKsi/0e4o
0OkOok74ttTb5oRx8AxYU6hAzg1MTS2I7ec8/rNX5timC/5WLnwHZxQsW73uLpcd
wKJEOWS3LjgLLsDjdGRPfbugb0hX8+76G6Mt4DjqA1ppUT7fBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjAc/appkCA15JQ5uIPVUbUdoMyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNm
MTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3YWI5ZTUzYmQvM2M1YmVjODItMmFkMy0z
ZDU4LWIwYTgtNzIxMzliZmNkNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZjZjE2MDYtYzExYy00OGU5LWI4
ZWUtYzVlN2FiOWU1M2JkL2NmY2YxNjA2LWMxMWMtNDhlOS1iOGVlLWM1ZTdhYjll
NTNiZC5jcmwwHwYDVR0jBBgwFoAUfO8iqAJFGnAVzpkedn06U2E2SmgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmNmMTYwNi1jMTFjLTQ4ZTktYjhlZS1jNWU3
YWI5ZTUzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8f4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlesysF2aSqp+8Mg7QauWkwIMk059lw0wYWFjRGmAvZX5iUeIznKWue
e1q36+ZQNCoeS2kVwwXJiUf8GHc39aE8eUXfWTyxDPAUNnepkycLcEx8m94p1iqL
7YWnypiu9CZk4P7DFF/oThUY+fl2BCF3u7GfzRkZgfaFFt38/8ATRJ+r35pMPO5s
OIPHqyw121UIgMWtwX7eLh4S6c8JS6z9RYzd8LMgrjYSCmLCs9Wbo+nP1L+VlVXN
XidkDaRQKt1hjaFYnWb4FcpBnNAuuVVcgmc8yuLwScPqQ9xEB3ILSLRhrykP3XPj
f+nBjttWa73x4Xee/6aR5EvQ9ZWr/JU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:10 2025 by rpki-client