Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/7f25139c-af3a-39f8-bcc9-7286fafc27a7.roa
File:                     7f25139c-af3a-39f8-bcc9-7286fafc27a7.roa (raw, json)
Hash identifier:          KknxPvf3LJxbOrMlkHkWr3ithop+FHiJvoBOw9dCDUo=
Subject key identifier:   7D:89:4D:A1:98:7A:7D:3A:F4:CF:1A:41:49:48:B8:5E:37:D4:8C:9D
Certificate issuer:       /CN=55651fc6-0e55-441d-b7a4-89e8800340c4
Certificate serial:       010D0C9F43285848F9269DE32463660A36E57A00
Authority key identifier: 37:92:8E:37:F8:9B:8E:3D:B6:C3:A2:60:E7:31:D6:CA:7A:99:CE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/7f25139c-af3a-39f8-bcc9-7286fafc27a7.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        67.199.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9d:e3:24:63:66:0a:36:e5:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55651fc6-0e55-441d-b7a4-89e8800340c4
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f3cf54f5-dd1d-4306-a299-4bba4c6bbf64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:7b:a4:78:6a:55:38:c8:e0:1c:7c:fd:3c:
                    bb:f6:90:af:84:cb:d5:b2:e8:a5:c7:c4:bf:a0:13:
                    0e:d3:bd:5a:5a:9a:9e:8f:1d:f6:73:61:55:20:be:
                    fa:ff:4f:2b:a7:82:f3:bd:bf:10:fe:d3:53:ad:35:
                    0d:eb:e8:ec:76:8c:0d:66:23:8f:50:0d:11:44:89:
                    68:fa:fb:cc:98:07:1d:b2:eb:ee:09:36:3c:e0:c2:
                    42:d5:c3:7c:9a:c5:d0:60:0d:de:0c:7e:6f:1b:84:
                    e6:ef:51:e2:0a:02:7f:ec:00:a2:01:2a:e6:05:e6:
                    a9:f2:a6:e2:fd:ba:ab:40:04:2e:16:b9:1e:2a:24:
                    9b:d2:5f:16:09:d6:ab:3e:2a:ce:55:bf:e0:d3:1b:
                    0b:00:c0:84:70:b8:4b:0b:6a:05:27:70:0b:a0:a4:
                    1c:bd:21:79:3e:fc:f5:0e:92:3a:1d:e0:9e:df:59:
                    50:ea:40:e5:35:c3:c1:a9:93:dd:6d:f3:e1:2b:32:
                    e0:88:80:37:91:fb:40:35:fb:7c:51:a8:a5:ba:09:
                    57:25:0e:03:e4:43:4a:88:2c:1b:1c:69:d9:fa:3b:
                    50:fc:7d:a0:a2:4b:ce:14:15:7f:22:1f:f0:53:e9:
                    23:e4:c1:af:d3:18:23:b1:7c:57:37:23:c2:51:c9:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:89:4D:A1:98:7A:7D:3A:F4:CF:1A:41:49:48:B8:5E:37:D4:8C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/7f25139c-af3a-39f8-bcc9-7286fafc27a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.crl

            X509v3 Authority Key Identifier:
                keyid:37:92:8E:37:F8:9B:8E:3D:B6:C3:A2:60:E7:31:D6:CA:7A:99:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d3:95:80:68:a2:72:46:6e:6b:4d:9c:1f:9e:40:84:84:15:
         58:dc:ba:27:f9:c6:88:48:0a:8a:b1:01:16:4f:29:e2:2d:64:
         99:56:4a:43:0b:d3:dc:eb:77:e9:08:01:52:df:dc:45:ab:c1:
         f9:db:5a:85:6e:10:b5:37:c3:07:24:52:4f:d8:31:f5:52:fb:
         8a:49:f6:5d:ae:23:1e:5b:22:cd:98:b5:da:a0:79:63:5f:7e:
         0c:e5:25:a6:90:b6:af:ba:da:df:05:21:5e:3e:b9:3f:ac:8f:
         b7:af:14:9d:34:7b:5a:56:31:4e:d5:60:82:69:ee:10:aa:f4:
         02:4f:9f:9e:a3:dd:e1:ae:cd:cb:73:87:0a:fa:77:85:a8:8b:
         95:c5:59:14:eb:6c:4c:85:04:4a:24:82:a8:9a:af:4a:7e:19:
         90:37:da:90:5f:3d:88:7d:16:ae:51:38:28:9d:b9:49:52:b7:
         51:de:a2:bd:f4:92:fc:e4:29:7c:52:81:05:61:47:ac:29:28:
         9b:fb:97:f2:55:e5:ce:92:ec:c6:77:04:1b:2e:71:b9:be:cd:
         31:e1:7e:18:57:89:be:ef:ba:a1:b6:71:18:d5:e6:8b:51:f4:
         28:1e:b9:9f:12:63:37:11:09:81:88:3d:c8:52:c1:bc:99:59:
         a8:28:36:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jp3jJGNmCjblegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NTFmYzYtMGU1NS00NDFkLWI3YTQtODllODgwMDM0
MGM0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjNjZjU0ZjUtZGQxZC00MzA2LWEyOTktNGJiYTRjNmJiZjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuN7pHhqVTjI4Bx8/Ty79pCvhMvVsuilx8S/
oBMO071aWpqejx32c2FVIL76/08rp4Lzvb8Q/tNTrTUN6+jsdowNZiOPUA0RRIlo
+vvMmAcdsuvuCTY84MJC1cN8msXQYA3eDH5vG4Tm71HiCgJ/7ACiASrmBeap8qbi
/bqrQAQuFrkeKiSb0l8WCdarPirOVb/g0xsLAMCEcLhLC2oFJ3ALoKQcvSF5Pvz1
DpI6HeCe31lQ6kDlNcPBqZPdbfPhKzLgiIA3kftANft8UailuglXJQ4D5ENKiCwb
HGnZ+jtQ/H2gokvOFBV/Ih/wU+kj5MGv0xgjsXxXNyPCUcm6MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2JTaGYen069M8aQUlIuF431IydMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTY1
MWZjNi0wZTU1LTQ0MWQtYjdhNC04OWU4ODAwMzQwYzQvN2YyNTEzOWMtYWYzYS0z
OWY4LWJjYzktNzI4NmZhZmMyN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTU2NTFmYzYtMGU1NS00NDFkLWI3
YTQtODllODgwMDM0MGM0LzU1NjUxZmM2LTBlNTUtNDQxZC1iN2E0LTg5ZTg4MDAz
NDBjNC5jcmwwHwYDVR0jBBgwFoAUN5KON/ibjj22w6Jg5zHWynqZzqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTY1MWZjNi0wZTU1LTQ0MWQtYjdhNC04OWU4
ODAwMzQwYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8fvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETTlYBoonJGbmtNnB+eQISEFVjcuif5xohICoqxARZPKeItZJlWSkML
09zrd+kIAVLf3EWrwfnbWoVuELU3wwckUk/YMfVS+4pJ9l2uIx5bIs2YtdqgeWNf
fgzlJaaQtq+62t8FIV4+uT+sj7evFJ00e1pWMU7VYIJp7hCq9AJPn56j3eGuzctz
hwr6d4Woi5XFWRTrbEyFBEokgqiar0p+GZA32pBfPYh9Fq5ROCiduUlSt1Heor30
kvzkKXxSgQVhR6wpKJv7l/JV5c6S7MZ3BBsucbm+zTHhfhhXib7vuqG2cRjV5otR
9CgeuZ8SYzcRCYGIPchSwbyZWagoNnA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:28:38 2025 by rpki-client