Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/6c08d8eb-85e5-3bbf-93de-fd484ee7d0f8.roa
File:                     6c08d8eb-85e5-3bbf-93de-fd484ee7d0f8.roa (raw, json)
Hash identifier:          T/K5HtkbscDBUqq77O54u3lZB3/q4sVJh2I1aUnh+6c=
Subject key identifier:   1F:CC:47:A3:9C:6E:09:53:4D:AE:25:82:7C:0B:85:37:D0:A2:40:3B
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F4328584886B0773E1CC221D6861245E0
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/6c08d8eb-85e5-3bbf-93de-fd484ee7d0f8.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     211544
IP address blocks:        199.83.26.0/24 maxlen: 24
                          199.83.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:77:3e:1c:c2:21:d6:86:12:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=4fbc958a-a666-4602-b922-ce2741f30a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:a8:71:b8:27:83:1a:c7:5b:d8:05:37:6e:
                    da:25:ea:fe:6f:32:ce:fd:ad:cb:3d:3e:c5:18:9e:
                    62:eb:d6:4d:72:ed:4d:e6:30:c6:7e:2c:68:60:f6:
                    05:5d:1d:ae:7b:73:29:99:f2:82:41:21:7d:0c:25:
                    c9:75:a8:7d:2b:5e:ab:68:a6:2e:b5:2b:97:1c:3d:
                    b5:f6:77:8f:ed:30:5c:b6:4f:24:8a:7a:e1:73:7e:
                    03:bd:70:2e:86:bd:30:25:28:57:6e:4d:c5:90:a9:
                    f9:1f:d9:6a:65:f6:19:f0:a4:8a:4e:db:e6:2a:57:
                    63:f7:97:68:06:58:74:a6:20:04:75:5a:cb:4f:44:
                    c9:40:50:98:a1:fb:d6:56:d4:fe:57:4c:b3:b5:82:
                    92:84:a7:3e:9d:37:9f:62:e1:14:78:4e:55:f6:c4:
                    9d:0c:61:5f:c8:c6:ce:53:aa:7e:a8:4e:a0:d2:68:
                    b9:6d:5f:48:4a:0b:bf:b8:0c:ba:57:26:88:dc:68:
                    ab:14:0e:52:95:49:32:97:1d:91:9d:e4:77:77:8f:
                    77:c0:23:3e:72:f6:d2:32:26:7a:32:82:b8:66:3c:
                    40:cc:e5:7e:fe:d5:8b:59:e4:92:b3:c5:bb:9d:37:
                    9f:d5:91:06:3c:08:1f:76:ab:d8:71:3d:96:40:71:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:47:A3:9C:6E:09:53:4D:AE:25:82:7C:0B:85:37:D0:A2:40:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/6c08d8eb-85e5-3bbf-93de-fd484ee7d0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:38:6b:0a:81:b2:88:5e:d8:1f:1f:71:f7:59:0f:1a:79:
         6a:4a:82:2d:3b:60:91:9d:68:da:6f:e2:48:d7:16:ad:e1:cb:
         61:38:94:d2:86:76:3d:62:ee:75:93:92:71:f8:36:ce:b9:6a:
         c6:f4:17:98:3d:78:f9:89:7f:b6:0d:be:96:7f:53:67:63:50:
         96:e5:af:9d:48:1d:10:6d:72:c1:1b:c1:e9:a2:f7:88:92:96:
         3c:5a:71:2e:c2:42:2c:76:99:f9:4d:75:ea:22:2a:61:ad:de:
         89:b6:e4:d4:8d:f0:94:24:57:73:01:60:ca:4a:0f:06:f7:0c:
         81:a8:47:dc:fe:5c:98:e3:04:a7:29:8d:7c:f4:c9:3c:5c:14:
         09:7b:88:5a:2a:53:19:da:8a:10:0d:f1:39:58:80:6f:ad:d8:
         ab:91:87:56:9e:46:f2:0a:9d:57:0f:cb:7a:6b:32:53:70:2f:
         46:ad:41:67:1f:92:32:bc:75:2c:bd:fb:75:b6:f8:34:77:67:
         55:e5:33:ba:54:a5:15:1d:d0:e6:4f:11:3c:64:02:4b:a1:1f:
         3f:b8:1c:a9:ce:2b:b9:9f:05:6e:6c:e6:e6:24:71:33:e5:7b:
         1a:ea:76:e1:f2:24:a0:17:e7:9b:a9:e3:8f:fc:dc:a5:33:1e:
         00:df:c7:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHc+HMIh1oYSReAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDdjYjE3ZDQtOTUwMi00ZDM4LWI1MWEtMDJhZTdiZjMx
MzdiMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGZiYzk1OGEtYTY2Ni00NjAyLWI5MjItY2UyNzQxZjMwYTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC2ocbgngxrHW9gFN27aJer+bzLO/a3LPT7F
GJ5i69ZNcu1N5jDGfixoYPYFXR2ue3MpmfKCQSF9DCXJdah9K16raKYutSuXHD21
9neP7TBctk8kinrhc34DvXAuhr0wJShXbk3FkKn5H9lqZfYZ8KSKTtvmKldj95do
Blh0piAEdVrLT0TJQFCYofvWVtT+V0yztYKShKc+nTefYuEUeE5V9sSdDGFfyMbO
U6p+qE6g0mi5bV9ISgu/uAy6VyaI3GirFA5SlUkylx2RneR3d493wCM+cvbSMiZ6
MoK4ZjxAzOV+/tWLWeSSs8W7nTef1ZEGPAgfdqvYcT2WQHGaTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/MR6OcbglTTa4lgnwLhTfQokA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2Ni
MTdkNC05NTAyLTRkMzgtYjUxYS0wMmFlN2JmMzEzN2IvNmMwOGQ4ZWItODVlNS0z
YmJmLTkzZGUtZmQ0ODRlZTdkMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDdjYjE3ZDQtOTUwMi00ZDM4LWI1
MWEtMDJhZTdiZjMxMzdiLzA3Y2IxN2Q0LTk1MDItNGQzOC1iNTFhLTAyYWU3YmYz
MTM3Yi5jcmwwHwYDVR0jBBgwFoAUwH3zKRqRjc36N2MZ7igizrWINA4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2NiMTdkNC05NTAyLTRkMzgtYjUxYS0wMmFl
N2JmMzEzN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1MaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKvEOGsKgbKIXtgfH3H3WQ8aeWpKgi07YJGdaNpv4kjXFq3hy2E4lNKG
dj1i7nWTknH4Ns65asb0F5g9ePmJf7YNvpZ/U2djUJblr51IHRBtcsEbwemi94iS
ljxacS7CQix2mflNdeoiKmGt3om25NSN8JQkV3MBYMpKDwb3DIGoR9z+XJjjBKcp
jXz0yTxcFAl7iFoqUxnaihAN8TlYgG+t2KuRh1aeRvIKnVcPy3prMlNwL0atQWcf
kjK8dSy9+3W2+DR3Z1XlM7pUpRUd0OZPETxkAkuhHz+4HKnOK7mfBW5s5uYkcTPl
exrqduHyJKAX55up44/83KUzHgDfxyA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:31:36 2025 by rpki-client