Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a12a55cf-685f-3fb4-b1b4-933c00ed8020.roa
File:                     a12a55cf-685f-3fb4-b1b4-933c00ed8020.roa (raw, json)
Hash identifier:          bOSicLl+ueLD1B/jDVo7TVdmW6F4rvA4u1+2BtR+3sI=
Subject key identifier:   8F:57:45:4D:F6:6B:6E:8E:D6:15:DF:68:5E:4E:DC:01:44:58:F2:66
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584882808B15014DF690BE3CEA40
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a12a55cf-685f-3fb4-b1b4-933c00ed8020.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        69.7.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:8b:15:01:4d:f6:90:be:3c:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=baa86e95-b86a-4903-b05c-f8265e0fc272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:74:10:f1:2f:0c:66:da:80:0d:07:38:73:
                    f0:41:9d:92:8b:72:7f:d5:8c:41:27:7f:08:49:88:
                    4b:b8:10:3b:01:cf:f6:56:35:64:17:e0:a6:ee:e0:
                    1f:9d:86:22:0c:d9:4c:f9:88:d1:f1:d0:13:86:30:
                    e7:6a:1f:8f:c2:38:e5:6c:bb:58:c8:3d:3c:1b:7b:
                    0c:81:5a:b6:52:83:63:78:6c:c9:b2:be:2b:30:b5:
                    81:94:19:17:67:0b:af:0a:f9:fd:55:fd:8a:11:aa:
                    41:f8:0e:ad:f5:3b:f4:5c:90:18:7d:ee:00:9f:20:
                    62:03:b9:44:69:61:98:4d:5b:ba:5f:e0:36:f5:58:
                    a5:53:81:db:de:75:8d:25:13:33:c0:95:ad:31:70:
                    93:91:73:27:9d:91:90:25:d7:43:be:58:e9:29:2a:
                    41:31:6c:e1:ed:3f:be:39:c6:d8:e7:17:dc:cd:b8:
                    23:50:f2:67:b3:2f:84:da:65:10:6e:c4:64:21:09:
                    6d:f0:89:92:b2:8d:5e:a1:c7:70:65:64:8a:60:f0:
                    48:e0:b4:6e:ec:85:1b:82:67:4b:ea:cb:cf:85:e4:
                    11:47:6e:c3:3c:43:62:af:87:37:b0:1a:77:25:60:
                    e6:14:da:5e:4a:b3:c6:db:5c:52:79:4a:e5:ce:3f:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:57:45:4D:F6:6B:6E:8E:D6:15:DF:68:5E:4E:DC:01:44:58:F2:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/a12a55cf-685f-3fb4-b1b4-933c00ed8020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:4c:30:f7:ad:c5:16:2e:74:65:70:bb:11:f7:e1:41:01:
         ba:b1:bb:95:8a:45:31:0a:87:66:51:27:c1:c4:5a:1a:7d:0a:
         2a:c6:4b:3d:2c:7a:85:6f:4d:2b:44:f3:96:4e:d5:0c:f6:60:
         88:6c:b0:19:85:5d:26:e7:af:91:02:46:79:0a:a9:c5:33:37:
         37:3d:3d:52:9f:75:8b:28:39:e5:c2:1e:28:c8:29:99:0c:70:
         87:b5:e2:d7:a5:7b:74:ec:57:ca:d0:9a:da:57:09:8a:37:df:
         9a:06:32:45:d6:f3:56:80:c7:d5:30:af:87:6b:6b:45:9a:75:
         82:a6:66:94:31:a5:7d:91:94:c8:2c:d3:bf:1a:60:3f:da:a8:
         50:38:f9:23:c5:49:e6:e9:ba:3b:a5:7c:60:92:5a:6d:eb:75:
         f4:1f:45:c6:58:96:14:1e:c1:73:c5:44:86:e0:29:fd:ac:20:
         69:37:bd:e6:c2:31:20:4f:dc:a2:17:5e:25:44:1f:29:02:23:
         c3:f5:07:0f:3e:f0:ac:2d:63:5c:f0:6d:c0:e0:02:14:f5:d9:
         68:c9:f2:44:66:a6:94:68:6d:a6:e7:11:eb:4b:2d:6c:ae:1f:
         dd:08:b4:c0:db:13:9e:7f:1d:cc:14:3d:50:ff:3a:b7:0d:2f:
         34:5c:33:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIsVAU32kL486kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh
ZTIwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YmFhODZlOTUtYjg2YS00OTAzLWIwNWMtZjgyNjVlMGZjMjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc90EPEvDGbagA0HOHPwQZ2Si3J/1YxBJ38I
SYhLuBA7Ac/2VjVkF+Cm7uAfnYYiDNlM+YjR8dAThjDnah+PwjjlbLtYyD08G3sM
gVq2UoNjeGzJsr4rMLWBlBkXZwuvCvn9Vf2KEapB+A6t9Tv0XJAYfe4AnyBiA7lE
aWGYTVu6X+A29VilU4Hb3nWNJRMzwJWtMXCTkXMnnZGQJddDvljpKSpBMWzh7T++
OcbY5xfczbgjUPJnsy+E2mUQbsRkIQlt8ImSso1eocdwZWSKYPBI4LRu7IUbgmdL
6svPheQRR27DPENir4c3sBp3JWDmFNpeSrPG21xSeUrlzj8iVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9XRU32a26O1hXfaF5O3AFEWPJmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh
ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvYTEyYTU1Y2YtNjg1Zi0z
ZmI0LWIxYjQtOTMzYzAwZWQ4MDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj
Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1
YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2
NzZhNWFlMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQeLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD69TDD3rcUWLnRlcLsR9+FBAbqxu5WKRTEKh2ZRJ8HEWhp9CirGSz0s
eoVvTStE85ZO1Qz2YIhssBmFXSbnr5ECRnkKqcUzNzc9PVKfdYsoOeXCHijIKZkM
cIe14tele3TsV8rQmtpXCYo335oGMkXW81aAx9Uwr4dra0WadYKmZpQxpX2RlMgs
078aYD/aqFA4+SPFSebpujulfGCSWm3rdfQfRcZYlhQewXPFRIbgKf2sIGk3vebC
MSBP3KIXXiVEHykCI8P1Bw8+8KwtY1zwbcDgAhT12WjJ8kRmppRobabnEetLLWyu
H90ItMDbE55/HcwUPVD/OrcNLzRcMww=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:36:31 2025 by rpki-client