Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa
File:                     8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa (raw, json)
Hash identifier:          rS2z2vAfsWcZjk+tPvmZRy7wM8mkCC6+7Yh11hwOekY=
Subject key identifier:   86:4F:AE:F5:F7:27:0F:15:1E:5E:AD:50:43:1E:78:C3:85:BB:8A:2B
Certificate issuer:       /CN=7e860267-056f-4836-b9b4-0bc612378041
Certificate serial:       010D0C9F43285848EF61631AAC5F7E144CA176C0
Authority key identifier: BD:97:AB:39:F9:A2:F9:CB:9D:14:C2:1E:2C:87:3E:1A:F2:CA:F3:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     30272
IP address blocks:        67.159.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:63:1a:ac:5f:7e:14:4c:a1:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e860267-056f-4836-b9b4-0bc612378041
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=8eb8fc8d-a430-4bc5-a905-599237ddc674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:bd:2c:80:a0:8f:05:50:0e:94:3f:d7:f7:
                    e3:3f:5d:3b:40:58:1b:bd:d2:d5:5d:7c:0c:3e:72:
                    4c:09:a6:19:1e:ca:5f:e5:b6:97:71:a1:5a:29:c7:
                    81:ca:0c:b5:f8:63:f7:83:89:b1:ad:15:a1:24:59:
                    38:2a:39:f2:27:ef:5a:68:6f:5b:2f:4e:e0:7a:33:
                    10:3b:54:43:9e:c6:b6:97:e1:f0:fa:a1:8b:23:bd:
                    21:1b:26:81:d6:b1:39:71:af:99:c0:2b:e4:89:8b:
                    72:0c:0b:ec:48:ce:78:17:ad:58:40:53:5f:1c:11:
                    0c:49:56:43:6c:95:f6:df:60:4f:ed:02:96:e3:05:
                    6a:04:6b:bc:0d:80:32:82:4d:e3:92:47:05:be:9e:
                    de:06:de:ae:a2:d7:90:f1:90:d0:ee:e0:60:f4:99:
                    1d:54:dd:42:2b:98:6b:b9:30:02:4b:33:a5:ce:fd:
                    a0:a8:41:9a:d1:d7:6b:80:be:7c:af:32:3e:41:f9:
                    57:2e:3a:17:b7:f9:9c:84:05:b1:91:88:c9:ba:a3:
                    e2:63:18:ef:a7:61:f9:15:67:cf:e9:a3:02:df:2d:
                    cd:ef:0f:3e:1b:85:e9:f2:db:11:7f:a8:53:78:03:
                    3c:a0:fb:ee:30:0c:35:c8:c3:6b:00:b4:92:7a:be:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4F:AE:F5:F7:27:0F:15:1E:5E:AD:50:43:1E:78:C3:85:BB:8A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/8ae74e5b-46d5-37db-86e6-0b921f65d82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.crl

            X509v3 Authority Key Identifier:
                keyid:BD:97:AB:39:F9:A2:F9:CB:9D:14:C2:1E:2C:87:3E:1A:F2:CA:F3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a6:82:bd:cb:f9:4b:17:20:75:21:50:fa:b5:86:b0:29:07:
         f6:13:a3:05:c2:91:23:95:86:06:c4:42:1f:49:53:03:d4:15:
         56:8d:6d:c2:4b:58:43:74:6e:06:10:e8:ca:b3:e7:05:bf:d5:
         bd:d9:1e:ec:36:b1:ab:ea:2d:77:7f:85:31:3e:9d:80:7b:3a:
         05:44:49:07:73:22:6a:58:af:46:a7:e0:ae:ad:e9:46:2d:91:
         6a:ec:c4:b7:bb:5c:ae:22:99:1e:b3:ff:51:72:b6:af:7e:30:
         b4:c3:d8:a5:75:d2:1d:51:57:9a:5b:8a:98:0f:e6:bd:6d:49:
         62:6f:28:18:bb:c8:16:b9:7a:c6:ca:53:42:07:dc:77:a5:eb:
         9b:77:5d:50:b3:6a:ee:40:05:e8:57:c7:51:60:cf:68:89:e1:
         06:89:0b:2c:a6:15:9f:88:d6:9c:56:d1:8b:a4:94:15:dd:1b:
         30:cd:f3:aa:15:c8:43:07:35:23:50:ff:86:e8:e4:41:14:c1:
         8f:c1:9f:82:d8:a0:e7:f8:4e:3e:7a:9a:92:5f:d0:47:83:52:
         0c:10:b6:73:93:d4:39:56:26:ec:42:6c:87:47:4d:08:94:20:
         08:49:48:f2:58:c4:bd:ce:51:a9:bd:db:e4:27:ac:ad:e4:fb:
         d7:fa:1f:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWMarF9+FEyhdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U4NjAyNjctMDU2Zi00ODM2LWI5YjQtMGJjNjEyMzc4
MDQxMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
OGViOGZjOGQtYTQzMC00YmM1LWE5MDUtNTk5MjM3ZGRjNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPe9LICgjwVQDpQ/1/fjP107QFgbvdLVXXwM
PnJMCaYZHspf5baXcaFaKceBygy1+GP3g4mxrRWhJFk4KjnyJ+9aaG9bL07gejMQ
O1RDnsa2l+Hw+qGLI70hGyaB1rE5ca+ZwCvkiYtyDAvsSM54F61YQFNfHBEMSVZD
bJX232BP7QKW4wVqBGu8DYAygk3jkkcFvp7eBt6uoteQ8ZDQ7uBg9JkdVN1CK5hr
uTACSzOlzv2gqEGa0ddrgL58rzI+QflXLjoXt/mchAWxkYjJuqPiYxjvp2H5FWfP
6aMC3y3N7w8+G4Xp8tsRf6hTeAM8oPvuMAw1yMNrALSSer4dOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZPrvX3Jw8VHl6tUEMeeMOFu4orMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZTg2
MDI2Ny0wNTZmLTQ4MzYtYjliNC0wYmM2MTIzNzgwNDEvOGFlNzRlNWItNDZkNS0z
N2RiLTg2ZTYtMGI5MjFmNjVkODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2U4NjAyNjctMDU2Zi00ODM2LWI5
YjQtMGJjNjEyMzc4MDQxLzdlODYwMjY3LTA1NmYtNDgzNi1iOWI0LTBiYzYxMjM3
ODA0MS5jcmwwHwYDVR0jBBgwFoAUvZerOfmi+cudFMIeLIc+GvLK85cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZTg2MDI2Ny0wNTZmLTQ4MzYtYjliNC0wYmM2
MTIzNzgwNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5/HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSmgr3L+UsXIHUhUPq1hrApB/YTowXCkSOVhgbEQh9JUwPUFVaNbcJL
WEN0bgYQ6Mqz5wW/1b3ZHuw2savqLXd/hTE+nYB7OgVESQdzImpYr0an4K6t6UYt
kWrsxLe7XK4imR6z/1Fytq9+MLTD2KV10h1RV5pbipgP5r1tSWJvKBi7yBa5esbK
U0IH3Hel65t3XVCzau5ABehXx1Fgz2iJ4QaJCyymFZ+I1pxW0YuklBXdGzDN86oV
yEMHNSNQ/4bo5EEUwY/Bn4LYoOf4Tj56mpJf0EeDUgwQtnOT1DlWJuxCbIdHTQiU
IAhJSPJYxL3OUam92+QnrK3k+9f6H8I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:31 2025 by rpki-client