Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f072f26-f8ff-33ea-b3f4-329ac33b7af2.roa
File:                     5f072f26-f8ff-33ea-b3f4-329ac33b7af2.roa (raw, json)
Hash identifier:          1yPRVOUSfl5DCRH/JeYigdqpLTHyTbBdXrmrl0YbHXA=
Subject key identifier:   B2:D0:CD:8E:0D:2B:84:CF:15:B5:D8:F4:10:A9:ED:56:63:AF:30:BC
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D2111BEF310E04092EC84B30
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f072f26-f8ff-33ea-b3f4-329ac33b7af2.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        67.62.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:1b:ef:31:0e:04:09:2e:c8:4b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=f0d2f49a-c53e-4f54-8696-9b3aa7df1a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:b4:e8:6e:4c:7d:f4:dc:d8:b0:28:7f:79:
                    22:b0:25:f3:20:01:c4:77:f9:84:41:d0:fe:bf:25:
                    82:12:0e:4a:0f:61:7b:1a:0f:7e:66:11:e2:96:4a:
                    59:59:9d:53:5f:c8:b5:f0:28:4c:cd:73:b0:55:15:
                    0c:41:c9:24:e7:13:b8:30:97:3c:59:82:07:74:1c:
                    de:e4:a5:50:00:48:4e:ac:bd:1b:41:86:52:c5:ff:
                    a9:d8:25:e1:35:be:6b:04:2e:e1:2c:b5:e2:49:7f:
                    d2:6d:23:86:28:7f:26:a4:8f:7d:6e:0b:50:49:4b:
                    03:fa:bd:7e:e0:01:4c:4f:c6:e6:2f:5e:56:c2:75:
                    52:29:f8:dd:3c:3b:a3:60:b2:b4:b5:9e:07:31:9c:
                    9c:c9:2c:d8:5e:40:7c:74:bb:e0:44:15:92:a9:8c:
                    96:5d:90:7f:89:b5:9b:61:30:a7:f6:50:4f:13:bc:
                    74:0f:f8:8f:37:a8:1b:3e:29:25:6d:d7:39:af:cf:
                    7e:0b:60:83:52:7d:b1:20:a2:b6:81:e9:df:56:7b:
                    8e:c1:c5:69:2a:f2:cb:4c:c0:c1:72:ae:4b:ad:9e:
                    4b:40:36:04:5b:c6:50:92:96:8b:53:8b:8f:05:be:
                    fd:1e:70:68:2e:94:25:dd:08:f2:2d:e0:63:a2:0f:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:CD:8E:0D:2B:84:CF:15:B5:D8:F4:10:A9:ED:56:63:AF:30:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f072f26-f8ff-33ea-b3f4-329ac33b7af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:33:c0:89:d5:45:4a:28:79:ac:36:fd:04:40:14:1d:cb:
         3d:1a:88:c0:71:b5:2b:c2:d5:bc:15:6e:73:77:57:39:1a:5a:
         30:ef:95:04:8f:a2:40:93:a2:19:46:eb:6e:47:1f:1a:fc:9c:
         a1:bb:dd:2c:27:e0:f7:64:58:05:f9:ca:64:0d:e7:61:0d:0b:
         0e:87:59:ed:48:75:39:aa:e3:28:e4:de:1c:ae:1c:58:87:97:
         5c:19:c9:37:83:35:7b:0c:5d:ca:9e:a9:7d:ec:27:f8:5f:2c:
         98:0d:6d:4a:ac:e8:e1:e4:42:bc:ab:78:8e:4a:5d:72:b1:72:
         e3:fb:dc:46:2d:de:77:06:c6:42:b9:8b:51:f8:1a:d1:b9:2c:
         c8:24:4d:72:45:58:46:10:8b:3b:91:20:38:59:ac:bc:2a:c4:
         74:f0:18:67:d4:28:d3:ac:5e:fa:f1:b0:85:33:80:f3:f2:04:
         dd:0a:8e:86:26:e7:ab:08:4a:9c:d8:ee:4d:1a:d6:22:8d:c7:
         65:af:24:5a:70:d1:2a:e9:de:17:8a:dc:99:18:19:a0:60:bd:
         e9:31:5b:97:96:de:a0:74:96:3a:df:93:e1:cc:3b:55:26:44:
         ad:34:23:c9:8a:4c:55:00:93:c4:bb:f4:bc:b3:13:91:ad:47:
         07:07:a7:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSERvvMQ4ECS7ISzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjBkMmY0OWEtYzUzZS00ZjU0LTg2OTYtOWIzYWE3ZGYxYTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK+06G5MffTc2LAof3kisCXzIAHEd/mEQdD+
vyWCEg5KD2F7Gg9+ZhHilkpZWZ1TX8i18ChMzXOwVRUMQckk5xO4MJc8WYIHdBze
5KVQAEhOrL0bQYZSxf+p2CXhNb5rBC7hLLXiSX/SbSOGKH8mpI99bgtQSUsD+r1+
4AFMT8bmL15WwnVSKfjdPDujYLK0tZ4HMZycySzYXkB8dLvgRBWSqYyWXZB/ibWb
YTCn9lBPE7x0D/iPN6gbPiklbdc5r89+C2CDUn2xIKK2genfVnuOwcVpKvLLTMDB
cq5LrZ5LQDYEW8ZQkpaLU4uPBb79HnBoLpQl3QjyLeBjog98gwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLLQzY4NK4TPFbXY9BCp7VZjrzC8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWYwNzJmMjYtZjhmZi0z
M2VhLWIzZjQtMzI5YWMzM2I3YWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQz4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAL+ozwInVRUooeaw2/QRAFB3LPRqIwHG1K8LVvBVuc3dXORpaMO+VBI+i
QJOiGUbrbkcfGvycobvdLCfg92RYBfnKZA3nYQ0LDodZ7Uh1OarjKOTeHK4cWIeX
XBnJN4M1ewxdyp6pfewn+F8smA1tSqzo4eRCvKt4jkpdcrFy4/vcRi3edwbGQrmL
Ufga0bksyCRNckVYRhCLO5EgOFmsvCrEdPAYZ9Qo06xe+vGwhTOA8/IE3QqOhibn
qwhKnNjuTRrWIo3HZa8kWnDRKuneF4rcmRgZoGC96TFbl5beoHSWOt+T4cw7VSZE
rTQjyYpMVQCTxLv0vLMTka1HBwenFw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:43 2025 by rpki-client