Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/26a64c6d-c855-3647-8c7d-eecae6cd0dd2.roa
File:                     26a64c6d-c855-3647-8c7d-eecae6cd0dd2.roa (raw, json)
Hash identifier:          m2i/d0hW1cyiVrq2U92Zp4XntU4guBulOkgG33bPSks=
Subject key identifier:   21:85:9E:21:12:77:E8:D1:1B:0D:1E:A8:5F:AD:B9:0F:FC:D2:50:38
Certificate issuer:       /CN=55651fc6-0e55-441d-b7a4-89e8800340c4
Certificate serial:       010D0C9F4328584819CFC35EAB60E62174CCCF40
Authority key identifier: 37:92:8E:37:F8:9B:8E:3D:B6:C3:A2:60:E7:31:D6:CA:7A:99:CE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/26a64c6d-c855-3647-8c7d-eecae6cd0dd2.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        67.199.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c3:5e:ab:60:e6:21:74:cc:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55651fc6-0e55-441d-b7a4-89e8800340c4
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=7ca6ac7a-3332-4b6e-87b7-d11fa30446cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:ad:a3:9a:e5:de:82:1e:37:15:37:e5:37:
                    8a:a1:89:d6:ab:3e:50:25:1c:59:ac:8e:bb:80:c7:
                    37:e0:8c:b2:f8:65:52:d2:b4:3a:a9:1b:3f:75:63:
                    80:0f:92:25:f5:0f:6e:d5:eb:47:28:55:4a:af:52:
                    c3:3a:6b:c7:aa:ed:c7:2f:53:6d:1a:d7:fa:e7:48:
                    24:46:94:00:b2:80:d6:05:96:ea:d7:8e:52:df:5b:
                    52:28:f1:1a:0b:57:33:7d:9a:58:08:b2:a3:8d:6f:
                    58:be:e9:57:c8:f1:e7:88:25:3f:f7:e2:e7:7e:cb:
                    8d:8e:8e:3f:c4:24:52:a4:74:52:15:0d:41:6c:97:
                    1b:16:58:8a:e0:a9:1e:44:d4:b3:0c:b6:42:0d:95:
                    cc:d7:35:bc:1c:e8:e6:a3:61:f9:73:bd:44:ce:fe:
                    e8:79:49:80:ec:ed:ca:46:72:29:6d:f0:61:f3:32:
                    99:d0:bd:f6:b1:d4:61:0e:a9:08:6b:bd:a2:be:35:
                    90:c5:69:3d:ff:81:f4:d8:51:5f:d5:f3:85:3d:37:
                    3f:b6:73:f2:01:f8:9a:89:96:0a:4e:b4:f9:47:07:
                    64:18:04:f3:cf:93:80:c8:fc:35:0a:78:4e:c7:44:
                    d0:91:00:70:fe:bf:21:46:74:4f:60:af:3e:36:42:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:85:9E:21:12:77:E8:D1:1B:0D:1E:A8:5F:AD:B9:0F:FC:D2:50:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/26a64c6d-c855-3647-8c7d-eecae6cd0dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.crl

            X509v3 Authority Key Identifier:
                keyid:37:92:8E:37:F8:9B:8E:3D:B6:C3:A2:60:E7:31:D6:CA:7A:99:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:c3:85:12:29:27:c9:d5:06:e9:2e:8c:a2:dd:1f:b5:d5:
         6f:34:38:b9:49:60:c7:14:aa:ef:16:81:1b:a5:c7:2f:46:f9:
         a0:60:1d:ee:71:74:7b:4f:fd:48:c5:15:0f:f8:b8:b2:39:80:
         c0:dd:c7:16:ec:82:5d:b5:cb:49:72:76:c3:de:18:21:e8:b3:
         a5:74:7c:2b:54:ab:86:a9:cd:bf:ec:46:05:90:88:8c:22:18:
         ee:a3:e0:93:f5:60:59:a4:67:5d:ae:70:f2:37:d5:db:1a:53:
         f1:6c:cc:87:9a:a3:3f:d8:a1:72:8a:72:d4:68:5b:cf:ed:c4:
         87:b7:c6:31:61:24:4e:1b:cc:f2:53:ea:b7:9a:3f:f8:36:db:
         e6:de:c7:e8:d2:5c:ff:de:a3:e8:35:3c:3a:1f:3e:cb:43:c2:
         e7:20:af:ac:70:dc:0d:65:5f:f1:10:cb:c7:6f:2f:70:ae:e0:
         09:53:dc:af:a7:93:86:e6:77:5b:2d:54:bf:22:71:8b:98:a9:
         49:43:4b:5d:e3:b7:24:d3:4f:8e:dc:22:80:ed:9b:24:61:75:
         a4:b4:d1:04:c7:6c:f2:3e:87:af:28:c1:b6:4c:df:6c:4d:e1:
         97:d8:5c:66:2c:49:ec:40:f6:5c:6e:87:32:a1:da:96:ca:bf:
         0f:a1:ea:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8Neq2DmIXTMz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NTFmYzYtMGU1NS00NDFkLWI3YTQtODllODgwMDM0
MGM0MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
N2NhNmFjN2EtMzMzMi00YjZlLTg3YjctZDExZmEzMDQ0NmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeito5rl3oIeNxU35TeKoYnWqz5QJRxZrI67
gMc34Iyy+GVS0rQ6qRs/dWOAD5Il9Q9u1etHKFVKr1LDOmvHqu3HL1NtGtf650gk
RpQAsoDWBZbq145S31tSKPEaC1czfZpYCLKjjW9YvulXyPHniCU/9+LnfsuNjo4/
xCRSpHRSFQ1BbJcbFliK4KkeRNSzDLZCDZXM1zW8HOjmo2H5c71Ezv7oeUmA7O3K
RnIpbfBh8zKZ0L32sdRhDqkIa72ivjWQxWk9/4H02FFf1fOFPTc/tnPyAfiaiZYK
TrT5RwdkGATzz5OAyPw1CnhOx0TQkQBw/r8hRnRPYK8+NkIjCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGFniESd+jRGw0eqF+tuQ/80lA4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTY1
MWZjNi0wZTU1LTQ0MWQtYjdhNC04OWU4ODAwMzQwYzQvMjZhNjRjNmQtYzg1NS0z
NjQ3LThjN2QtZWVjYWU2Y2QwZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTU2NTFmYzYtMGU1NS00NDFkLWI3
YTQtODllODgwMDM0MGM0LzU1NjUxZmM2LTBlNTUtNDQxZC1iN2E0LTg5ZTg4MDAz
NDBjNC5jcmwwHwYDVR0jBBgwFoAUN5KON/ibjj22w6Jg5zHWynqZzqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTY1MWZjNi0wZTU1LTQ0MWQtYjdhNC04OWU4
ODAwMzQwYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8fvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6nw4USKSfJ1QbpLoyi3R+11W80OLlJYMcUqu8WgRulxy9G+aBgHe5x
dHtP/UjFFQ/4uLI5gMDdxxbsgl21y0lydsPeGCHos6V0fCtUq4apzb/sRgWQiIwi
GO6j4JP1YFmkZ12ucPI31dsaU/FszIeaoz/YoXKKctRoW8/txIe3xjFhJE4bzPJT
6reaP/g22+bex+jSXP/eo+g1PDofPstDwucgr6xw3A1lX/EQy8dvL3Cu4AlT3K+n
k4bmd1stVL8icYuYqUlDS13jtyTTT47cIoDtmyRhdaS00QTHbPI+h68owbZM32xN
4ZfYXGYsSexA9lxuhzKh2pbKvw+h6l8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:07 2025 by rpki-client