Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa
File:                     c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa (raw, json)
Hash identifier:          tZYe09lSEIthaPkpxC1GxcicOuVltQDY0Xd1d08unmw=
Subject key identifier:   F3:94:2A:E9:7A:63:FD:6E:E1:F0:64:5C:89:B6:92:12:AB:F4:69:D9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B1F6288C9D40F628310A6180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     7861
IP address blocks:        207.167.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:28:8c:9d:40:f6:28:31:0a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=bd43096e-689c-49ae-853e-de356641fb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:00:04:8b:2d:93:63:39:64:db:ab:e4:b9:
                    51:a8:53:aa:9e:d6:b8:6e:7b:26:19:7d:f4:84:f9:
                    f4:8d:90:90:38:1a:eb:b1:3b:61:78:52:1a:c7:6a:
                    f3:f8:4e:a4:a8:45:15:8a:db:77:e5:0d:f8:37:84:
                    ab:17:ce:52:43:64:89:13:3b:a7:17:76:27:52:41:
                    3f:c3:b5:3b:c0:e1:a6:17:2e:3e:5a:d6:ce:c3:8f:
                    04:b8:cd:91:9d:3d:06:92:8a:45:1c:41:fa:46:1e:
                    62:be:d5:e7:e8:f4:7d:4f:c9:52:5b:9d:2a:a6:7b:
                    15:24:f5:4f:6c:39:23:2b:75:f9:34:a8:cb:72:48:
                    20:9b:f1:f1:59:65:93:92:83:fb:a7:63:da:38:db:
                    70:91:32:8e:28:04:8a:62:07:dd:f7:00:57:2a:04:
                    90:ba:bd:09:2f:b7:ae:1b:e5:e2:29:e2:ac:95:99:
                    12:6d:6c:13:51:7c:18:7c:46:a3:87:19:c8:0c:60:
                    7c:f8:6d:f1:ea:f3:bd:c7:99:84:4c:e3:37:77:a4:
                    ed:4a:3c:f5:8c:53:96:2e:a2:ac:94:ff:b9:05:0d:
                    28:55:3d:23:d9:27:7e:e9:1d:60:f9:4e:06:bc:2c:
                    24:2c:c8:7c:57:5e:55:bc:a3:e6:9b:a4:8a:d5:77:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:94:2A:E9:7A:63:FD:6E:E1:F0:64:5C:89:B6:92:12:AB:F4:69:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:13:c0:b1:af:3f:cc:02:38:96:07:6b:a4:fd:18:7c:1f:
         2a:eb:5d:98:a8:12:59:63:81:04:e5:36:1c:3d:7f:c0:8e:8e:
         dd:01:56:e9:0f:e0:5e:59:e0:51:48:8e:5f:9d:8b:b0:12:18:
         71:4f:5b:3c:84:0d:7f:ff:f2:0b:bb:f8:16:ce:aa:87:31:ee:
         34:ea:7d:fe:3f:0a:9d:4d:de:d5:cc:1a:f0:a1:73:6a:8a:58:
         c6:79:3a:f2:b0:dd:7f:b4:dd:1e:79:c9:63:35:38:32:89:64:
         bc:57:26:ea:c1:a1:4c:65:63:8b:34:b6:b2:21:45:d7:29:dc:
         0a:ab:a5:ec:fc:c0:5e:fc:90:55:f7:45:e1:65:73:3b:59:ce:
         db:d9:5e:a0:75:d5:98:78:e1:be:e8:0f:51:a5:10:bf:ab:31:
         05:d0:d3:f7:36:ca:1d:e4:3f:a6:a1:e2:52:c5:f4:d6:e1:09:
         04:52:86:21:a4:76:b6:22:ad:c9:7e:87:3d:84:68:6c:23:eb:
         60:9d:2c:27:f5:ad:9e:ad:4b:4a:01:1c:be:85:e0:12:6a:07:
         22:81:88:fc:7f:1a:51:77:36:26:65:af:4a:28:f6:74:f2:b2:
         24:37:1c:7f:02:04:55:40:07:ce:8e:a7:4f:e4:f6:d6:2b:3a:
         11:0e:4f:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9iiMnUD2KDEKYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
YmQ0MzA5NmUtNjg5Yy00OWFlLTg1M2UtZGUzNTY2NDFmYjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcEABIstk2M5ZNur5LlRqFOqnta4bnsmGX30
hPn0jZCQOBrrsTtheFIax2rz+E6kqEUVitt35Q34N4SrF85SQ2SJEzunF3YnUkE/
w7U7wOGmFy4+WtbOw48EuM2RnT0GkopFHEH6Rh5ivtXn6PR9T8lSW50qpnsVJPVP
bDkjK3X5NKjLckggm/HxWWWTkoP7p2PaONtwkTKOKASKYgfd9wBXKgSQur0JL7eu
G+XiKeKslZkSbWwTUXwYfEajhxnIDGB8+G3x6vO9x5mETOM3d6TtSjz1jFOWLqKs
lP+5BQ0oVT0j2Sd+6R1g+U4GvCwkLMh8V15VvKPmm6SK1XfJAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOUKul6Y/1u4fBkXIm2khKr9GnZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzdhY2E4OTAtMmFkYy0z
MjAzLWEzZDAtZWJiZmJkZDI3OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6foMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdvE8Cxrz/MAjiWB2uk/Rh8HyrrXZioElljgQTlNhw9f8COjt0BVukP
4F5Z4FFIjl+di7ASGHFPWzyEDX//8gu7+BbOqocx7jTqff4/Cp1N3tXMGvChc2qK
WMZ5OvKw3X+03R55yWM1ODKJZLxXJurBoUxlY4s0trIhRdcp3Aqrpez8wF78kFX3
ReFlcztZztvZXqB11Zh44b7oD1GlEL+rMQXQ0/c2yh3kP6ah4lLF9NbhCQRShiGk
drYircl+hz2EaGwj62CdLCf1rZ6tS0oBHL6F4BJqByKBiPx/GlF3NiZlr0oo9nTy
siQ3HH8CBFVAB86Op0/k9tYrOhEOT0E=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:00 2025 by rpki-client