Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/2dc240da-14a4-39d5-9e46-98cac6c05f7d.roa
File:                     2dc240da-14a4-39d5-9e46-98cac6c05f7d.roa (raw, json)
Hash identifier:          EQET5CxAAScC6NNti2spiKVnzbSdx7jFOdQZzitnE/k=
Subject key identifier:   71:DE:02:55:79:22:DE:08:8F:33:8E:63:55:27:F0:0D:06:9F:CE:22
Certificate issuer:       /CN=01e76461-567a-47c1-a387-9b9f7415be5f
Certificate serial:       010D0C9F432858495F51B08A66B39765F34F5000
Authority key identifier: DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/2dc240da-14a4-39d5-9e46-98cac6c05f7d.roa
Signing time:             Mon 31 Mar 2025 16:20:13 +0000
ROA not before:           Mon 31 Mar 2025 16:20:13 +0000
ROA not after:            Sun 29 Jun 2025 16:20:13 +0000
asID:                     7828
IP address blocks:        199.26.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5f:51:b0:8a:66:b3:97:65:f3:4f:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e76461-567a-47c1-a387-9b9f7415be5f
        Validity
            Not Before: Mar 31 16:20:13 2025 GMT
            Not After : Jun 29 16:20:13 2025 GMT
        Subject: CN=53cd96a8-9c6e-48d5-989d-8d311dea409d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7b:66:1e:81:f5:26:b3:89:42:c6:38:bb:d6:
                    2a:01:e3:04:90:9c:c0:80:09:fb:4d:87:bf:9f:ca:
                    79:be:f3:07:5e:c5:b2:df:06:50:24:0a:4b:b1:7b:
                    28:dd:5e:b8:07:85:86:9e:7a:14:92:9d:86:22:e3:
                    c4:3d:90:c7:09:eb:d5:69:9d:98:4b:84:e0:00:07:
                    fb:d9:bb:4a:04:a5:ac:67:67:b5:27:ee:f5:26:e3:
                    ff:94:32:c6:d3:1a:c0:83:60:98:9b:6e:8b:25:5a:
                    4f:35:0b:08:61:9a:46:74:c9:72:d1:72:51:ce:90:
                    4b:8e:68:11:e7:ac:aa:92:5a:f9:2d:1e:4f:0a:63:
                    08:d7:1b:0b:64:57:75:48:3d:d3:a4:fb:67:9b:23:
                    5b:c8:ef:dc:b5:a7:68:46:61:a4:38:31:00:c0:05:
                    ed:a3:64:6d:1a:e3:57:cf:d0:b0:9f:63:d1:0f:d7:
                    4c:a3:6c:bb:e6:50:0e:a0:55:98:f1:96:5d:63:16:
                    f2:9b:f9:d1:fd:d0:ec:64:e3:7a:4b:66:3b:dc:6d:
                    8c:cb:82:ea:e7:d7:8e:fe:9d:91:e9:22:f7:66:1a:
                    7e:a9:62:00:4d:99:68:5c:9c:e7:60:df:88:4f:3d:
                    6f:fd:2d:b9:d9:6c:d8:a5:2f:8e:14:ba:0e:4a:07:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:02:55:79:22:DE:08:8F:33:8E:63:55:27:F0:0D:06:9F:CE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/2dc240da-14a4-39d5-9e46-98cac6c05f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl

            X509v3 Authority Key Identifier:
                keyid:DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.26.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:50:6c:48:7e:cd:66:66:5f:40:1d:f8:52:22:9c:e0:9f:
         27:f8:8c:2b:83:eb:56:d4:8b:16:7b:c0:ac:95:bc:ab:d3:0a:
         ff:55:24:cd:9d:b9:96:72:11:eb:d0:17:87:fd:72:4f:84:1f:
         df:97:9a:2f:28:e5:62:6c:61:2f:8c:27:de:75:f8:3c:d1:0c:
         43:a0:72:71:8c:36:6e:c6:4e:a0:53:e8:42:75:69:83:24:e4:
         e0:b8:f9:c3:cb:d1:8f:69:cb:a8:96:9b:26:d6:40:3d:39:8e:
         42:e2:36:4c:98:51:0b:41:fc:6e:5a:60:92:10:29:66:51:e0:
         24:84:47:e4:93:f6:03:8e:b5:86:9e:36:f7:69:2f:60:83:57:
         39:13:cf:09:12:6f:00:28:ff:7e:e0:dd:94:d9:db:80:1b:99:
         e2:eb:0f:ff:02:9c:05:97:92:97:12:fe:79:08:34:27:ad:24:
         f8:72:5a:eb:90:51:28:f4:f8:bb:cd:d3:73:7d:0e:d2:ee:46:
         1c:8c:5e:df:dd:10:49:56:be:40:83:47:6e:49:d5:8d:e7:f4:
         7e:64:8e:49:ef:6d:4e:61:79:09:f9:85:96:69:56:d0:bf:f6:
         ca:d8:db:d2:45:3c:85:40:62:0c:e0:b4:91:bf:42:17:69:ac:
         4d:e4:56:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfUbCKZrOXZfNPUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDFlNzY0NjEtNTY3YS00N2MxLWEzODctOWI5Zjc0MTVi
ZTVmMB4XDTI1MDMzMTE2MjAxM1oXDTI1MDYyOTE2MjAxM1owLzEtMCsGA1UEAxMk
NTNjZDk2YTgtOWM2ZS00OGQ1LTk4OWQtOGQzMTFkZWE0MDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3tmHoH1JrOJQsY4u9YqAeMEkJzAgAn7TYe/
n8p5vvMHXsWy3wZQJApLsXso3V64B4WGnnoUkp2GIuPEPZDHCevVaZ2YS4TgAAf7
2btKBKWsZ2e1J+71JuP/lDLG0xrAg2CYm26LJVpPNQsIYZpGdMly0XJRzpBLjmgR
56yqklr5LR5PCmMI1xsLZFd1SD3TpPtnmyNbyO/ctadoRmGkODEAwAXto2RtGuNX
z9Cwn2PRD9dMo2y75lAOoFWY8ZZdYxbym/nR/dDsZON6S2Y73G2My4Lq59eO/p2R
6SL3Zhp+qWIATZloXJznYN+ITz1v/S252WzYpS+OFLoOSgfsaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHeAlV5It4IjzOOY1Un8A0Gn84iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMWU3
NjQ2MS01NjdhLTQ3YzEtYTM4Ny05YjlmNzQxNWJlNWYvMmRjMjQwZGEtMTRhNC0z
OWQ1LTllNDYtOThjYWM2YzA1ZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDFlNzY0NjEtNTY3YS00N2MxLWEz
ODctOWI5Zjc0MTViZTVmLzAxZTc2NDYxLTU2N2EtNDdjMS1hMzg3LTliOWY3NDE1
YmU1Zi5jcmwwHwYDVR0jBBgwFoAU2pjX3MOZuiTu8R0eYzXuI26IL6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMWU3NjQ2MS01NjdhLTQ3YzEtYTM4Ny05Yjlm
NzQxNWJlNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxrUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5iUGxIfs1mZl9AHfhSIpzgnyf4jCuD61bUixZ7wKyVvKvTCv9VJM2d
uZZyEevQF4f9ck+EH9+Xmi8o5WJsYS+MJ951+DzRDEOgcnGMNm7GTqBT6EJ1aYMk
5OC4+cPL0Y9py6iWmybWQD05jkLiNkyYUQtB/G5aYJIQKWZR4CSER+ST9gOOtYae
NvdpL2CDVzkTzwkSbwAo/37g3ZTZ24AbmeLrD/8CnAWXkpcS/nkINCetJPhyWuuQ
USj0+LvN03N9DtLuRhyMXt/dEElWvkCDR25J1Y3n9H5kjknvbU5heQn5hZZpVtC/
9srY29JFPIVAYgzgtJG/QhdprE3kVmY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:32 2025 by rpki-client