Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb83528d-e4ae-3c40-a929-d5331a6d00a0.roa
File:                     fb83528d-e4ae-3c40-a929-d5331a6d00a0.roa (raw, json)
Hash identifier:          MLybD2oiEEx1QM6Fxco9wCEUICNi/DYrm5mPHyf+9/E=
Subject key identifier:   9E:FE:64:45:5B:6A:F4:19:FE:48:D5:A3:2D:76:98:2C:E7:0A:2E:2C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848673CB916BFBACCC201772400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb83528d-e4ae-3c40-a929-d5331a6d00a0.roa
Signing time:             Wed 01 Jan 2025 19:37:30 +0000
ROA not before:           Wed 01 Jan 2025 19:37:30 +0000
ROA not after:            Tue 01 Apr 2025 18:37:30 +0000
asID:                     214025
IP address blocks:        67.207.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:3c:b9:16:bf:ba:cc:c2:01:77:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  1 19:37:30 2025 GMT
            Not After : Apr  1 18:37:30 2025 GMT
        Subject: CN=12e9c1dd-6d37-4cb9-adfd-cfc509c0a249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:36:16:cb:d5:ac:08:34:ba:ca:7a:b2:7f:
                    f4:9c:c5:04:5a:2e:29:28:73:8d:6d:e8:79:50:74:
                    12:52:3b:d0:e9:c1:c8:81:1f:3c:f8:3e:07:73:9c:
                    cd:22:95:89:96:49:86:ef:b2:cb:1e:ad:23:e8:72:
                    d2:81:e4:03:26:b3:bc:3a:46:1d:28:ad:e6:c2:0a:
                    73:ee:7a:16:30:f0:c4:4a:6e:0b:be:bc:53:d2:e9:
                    ac:a5:35:20:71:16:48:47:5c:14:bd:1d:5b:73:43:
                    13:78:e9:82:75:af:83:b3:dc:05:63:ec:ea:0e:0a:
                    0d:50:25:d5:69:ab:6c:03:a3:58:d8:dc:78:4d:ad:
                    b7:90:e2:8d:ca:c1:c0:95:73:40:25:50:ce:fc:dd:
                    05:0d:fc:26:1d:bb:b4:bf:82:ae:fa:f3:c8:cb:84:
                    ff:b0:dc:54:21:52:f3:89:37:24:77:f8:79:4b:85:
                    2f:9e:6f:ef:af:74:41:7a:be:11:1b:69:fe:8d:ef:
                    c6:3b:e8:95:b2:77:24:26:5c:6c:8a:c4:70:49:96:
                    6e:dc:21:16:7d:3a:4b:6b:89:79:f6:7f:3f:3d:6e:
                    62:74:0e:08:fe:aa:00:48:36:4a:85:99:43:b7:0f:
                    b0:e1:c6:20:20:18:58:c4:e1:ba:5e:9a:5e:48:c5:
                    bb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FE:64:45:5B:6A:F4:19:FE:48:D5:A3:2D:76:98:2C:E7:0A:2E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb83528d-e4ae-3c40-a929-d5331a6d00a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:bb:36:3b:f7:e0:98:b4:89:c5:c7:ff:be:c0:4f:66:79:
         c8:aa:8a:4c:b7:39:53:cb:e4:50:ab:14:93:6c:52:fd:30:ce:
         df:6c:71:2c:b5:15:52:6b:f7:67:e4:36:01:00:f4:42:3a:f6:
         2b:a1:fb:bc:1c:cb:51:9d:67:82:e7:fc:d3:ab:2b:5c:6a:d8:
         6a:a5:83:9a:f7:5e:bc:85:37:2c:86:e6:41:48:70:54:10:24:
         ac:5b:8c:57:26:81:c1:0e:88:bd:f0:15:9a:29:98:aa:d8:cc:
         be:57:ba:2c:f7:54:28:cc:46:3a:0d:80:8f:08:e6:00:e7:85:
         f1:a0:18:31:22:91:fe:1c:6a:db:c9:0e:7f:ce:c4:ce:0c:e8:
         56:47:32:12:0f:43:36:c5:53:b7:72:bb:6f:07:01:46:88:f5:
         b5:b5:62:d3:47:f5:cc:05:93:08:56:4e:36:52:3f:8a:02:f5:
         f3:b0:bc:da:18:ee:98:f9:54:b9:ac:b6:9f:82:68:09:59:1e:
         5f:a6:33:e3:ca:d1:87:39:8d:2f:a0:a8:d6:2a:fa:a7:cc:c0:
         7a:7d:1c:16:32:c0:64:19:8c:93:1f:9d:77:47:1d:40:a3:b7:
         0f:dd:4e:5b:d6:26:ac:de:34:3b:f4:6a:88:ba:3a:71:bd:15:
         05:a7:25:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhnPLkWv7rMwgF3JAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDEwMTE5MzczMFoXDTI1MDQwMTE4MzczMFowLzEtMCsGA1UEAxMk
MTJlOWMxZGQtNmQzNy00Y2I5LWFkZmQtY2ZjNTA5YzBhMjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Q2FsvVrAg0usp6sn/0nMUEWi4pKHONbeh5
UHQSUjvQ6cHIgR88+D4Hc5zNIpWJlkmG77LLHq0j6HLSgeQDJrO8OkYdKK3mwgpz
7noWMPDESm4LvrxT0umspTUgcRZIR1wUvR1bc0MTeOmCda+Ds9wFY+zqDgoNUCXV
aatsA6NY2Nx4Ta23kOKNysHAlXNAJVDO/N0FDfwmHbu0v4Ku+vPIy4T/sNxUIVLz
iTckd/h5S4Uvnm/vr3RBer4RG2n+je/GO+iVsnckJlxsisRwSZZu3CEWfTpLa4l5
9n8/PW5idA4I/qoASDZKhZlDtw+w4cYgIBhYxOG6XppeSMW7bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7+ZEVbavQZ/kjVoy12mCznCi4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZmI4MzUyOGQtZTRhZS0z
YzQwLWE5MjktZDUzMzFhNmQwMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8+8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwmuzY79+CYtInFx/++wE9meciqiky3OVPL5FCrFJNsUv0wzt9scSy1
FVJr92fkNgEA9EI69iuh+7wcy1GdZ4Ln/NOrK1xq2Gqlg5r3XryFNyyG5kFIcFQQ
JKxbjFcmgcEOiL3wFZopmKrYzL5Xuiz3VCjMRjoNgI8I5gDnhfGgGDEikf4catvJ
Dn/OxM4M6FZHMhIPQzbFU7dyu28HAUaI9bW1YtNH9cwFkwhWTjZSP4oC9fOwvNoY
7pj5VLmstp+CaAlZHl+mM+PK0Yc5jS+gqNYq+qfMwHp9HBYywGQZjJMfnXdHHUCj
tw/dTlvWJqzeNDv0aoi6OnG9FQWnJXQ=
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:02:10 2025 by rpki-client