Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
File:                     f4f0a900-b310-382d-b883-64f958388735.roa (raw, json)
Hash identifier:          diG65jpglzum6gJpqpLWtLTBKQNe2MFu4aFBXzU4QG4=
Subject key identifier:   E7:51:20:74:B0:4B:3F:5F:DA:B3:C4:C1:8D:21:23:AC:D4:F2:26:01
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F43285848424AE39E6637B99D934A0040
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        199.166.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:e3:9e:66:37:b9:9d:93:4a:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=6bddf973-e1be-4d33-86a7-3e10c1304981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:da:76:01:93:a3:bd:fb:19:c9:3a:5a:49:
                    f4:dd:d6:48:21:cf:3c:3a:cb:9d:2c:22:16:f4:30:
                    8b:95:80:f2:b7:91:ad:9d:b1:a6:06:0b:ef:d0:e4:
                    69:37:94:b0:e3:a4:5f:b7:ba:8a:0b:76:64:61:cd:
                    68:1b:13:a3:66:8a:0f:8b:63:7c:65:11:7e:80:a0:
                    1a:e5:6f:ed:64:24:7a:17:cf:63:00:91:7e:62:6b:
                    69:94:82:79:2d:81:60:2a:98:d6:a5:4f:ca:aa:a5:
                    cd:0f:08:48:21:ea:40:1c:98:3e:02:e9:b2:71:02:
                    8c:d2:2e:df:12:b1:96:46:57:8e:66:d7:fc:09:cd:
                    bc:fc:82:a3:a9:2a:b4:c0:30:6a:6c:c7:e8:d8:6e:
                    12:69:54:2c:9c:1e:7e:1a:9a:f1:c8:d4:97:01:3c:
                    b2:9c:9b:e2:de:3a:10:e7:75:17:50:0f:c7:e1:6c:
                    fd:f7:34:1b:d3:f4:51:97:97:f6:b0:d4:ac:80:e9:
                    36:27:a0:52:dc:54:cd:7a:96:4f:3e:61:ee:f5:b7:
                    a4:05:ce:b5:16:34:cc:ce:98:cc:4f:e7:24:a7:be:
                    1d:22:c1:6b:9a:45:df:f7:68:9d:f0:db:f3:9a:bc:
                    51:48:e3:d2:b7:dc:2f:04:ac:00:a7:21:e3:de:aa:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:20:74:B0:4B:3F:5F:DA:B3:C4:C1:8D:21:23:AC:D4:F2:26:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:0c:f1:d1:4d:8a:b7:66:bb:2f:66:76:f7:4a:eb:0b:09:
         ff:1c:33:86:8c:81:ff:84:2e:bd:89:65:8a:70:02:5d:0b:ca:
         74:2f:a2:5e:7e:93:07:70:2d:2e:32:34:b2:92:90:bf:bf:ae:
         05:c7:f0:67:98:43:15:61:46:6d:82:b4:9f:65:6e:f3:bb:a1:
         3b:09:23:bf:27:99:ba:4b:24:51:95:79:2a:79:19:74:ac:4c:
         a7:ed:3c:f3:f7:88:f3:42:f1:77:44:da:11:68:4f:38:2c:ae:
         8e:1b:73:73:21:c8:1d:7a:d1:b4:c2:23:6b:9c:bf:d8:b4:fa:
         67:83:7b:16:86:a5:2c:2b:83:ef:ad:ba:03:11:29:20:80:8d:
         31:99:0e:f6:34:b3:c8:03:ce:dd:f5:c9:98:91:ec:ab:b0:89:
         8d:98:9e:ed:47:42:eb:f9:4a:9f:04:7e:64:f0:63:2e:ea:c7:
         dd:dd:2c:16:5d:dd:15:66:aa:52:93:47:b9:a0:6a:34:e3:ed:
         5c:fd:36:49:0b:f3:d3:32:d6:a5:55:0b:5c:0f:c3:39:bf:57:
         73:af:15:c0:3c:22:91:6e:ac:9c:24:5b:24:87:99:78:a7:c5:
         55:74:f9:e2:a8:39:f3:26:89:88:a0:04:21:d9:19:93:56:45:
         37:f6:16:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSuOeZje5nZNKAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NmJkZGY5NzMtZTFiZS00ZDMzLTg2YTctM2UxMGMxMzA0OTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM3adgGTo737Gck6Wkn03dZIIc88OsudLCIW
9DCLlYDyt5GtnbGmBgvv0ORpN5Sw46Rft7qKC3ZkYc1oGxOjZooPi2N8ZRF+gKAa
5W/tZCR6F89jAJF+YmtplIJ5LYFgKpjWpU/KqqXNDwhIIepAHJg+AumycQKM0i7f
ErGWRleOZtf8Cc28/IKjqSq0wDBqbMfo2G4SaVQsnB5+GprxyNSXATyynJvi3joQ
53UXUA/H4Wz99zQb0/RRl5f2sNSsgOk2J6BS3FTNepZPPmHu9bekBc61FjTMzpjM
T+ckp74dIsFrmkXf92id8NvzmrxRSOPSt9wvBKwApyHj3qouywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdRIHSwSz9f2rPEwY0hI6zU8iYBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZjRmMGE5MDAtYjMxMC0z
ODJkLWI4ODMtNjRmOTU4Mzg4NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx6b6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2xDPHRTYq3ZrsvZnb3SusLCf8cM4aMgf+ELr2JZYpwAl0LynQvol5+
kwdwLS4yNLKSkL+/rgXH8GeYQxVhRm2CtJ9lbvO7oTsJI78nmbpLJFGVeSp5GXSs
TKftPPP3iPNC8XdE2hFoTzgsro4bc3MhyB160bTCI2ucv9i0+meDexaGpSwrg++t
ugMRKSCAjTGZDvY0s8gDzt31yZiR7KuwiY2Ynu1HQuv5Sp8EfmTwYy7qx93dLBZd
3RVmqlKTR7mgajTj7Vz9NkkL89My1qVVC1wPwzm/V3OvFcA8IpFurJwkWySHmXin
xVV0+eKoOfMmiYigBCHZGZNWRTf2Fkc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:44 2025 by rpki-client