Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa
File:                     4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa (raw, json)
Hash identifier:          fNhDMQk4ZwCyPxVi7HLWHnqOh6OYzjbMyg4vl6/JG8g=
Subject key identifier:   5F:53:38:87:0C:0C:14:FA:2E:0D:E1:6E:F1:CA:B1:45:18:A8:CA:D0
Certificate issuer:       /CN=339ec033-73b6-4268-bb2b-7188aedd736e
Certificate serial:       010D0C9F4328584819CFD214A9F59204E14F9200
Authority key identifier: 13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        199.242.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d2:14:a9:f5:92:04:e1:4f:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339ec033-73b6-4268-bb2b-7188aedd736e
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=c3bdc793-dda4-4b3c-8f9d-81c6702b6ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:68:91:21:d5:f4:34:f7:8c:dc:bc:13:ee:8d:
                    09:6a:a1:af:a4:11:f6:c6:c2:b7:52:95:12:b9:06:
                    b6:cf:57:0c:f8:07:a0:22:c5:02:d2:ea:08:8a:8a:
                    c7:ce:d9:31:cf:d2:5f:87:57:a0:8a:b4:0f:c7:f8:
                    96:91:8b:f5:a2:4a:f8:8f:e5:0b:0e:3d:6c:f3:28:
                    95:7c:7b:bd:f3:7e:64:56:eb:98:60:a0:f7:76:25:
                    a4:97:3e:89:dc:0b:59:e8:dd:36:04:87:0d:33:60:
                    ec:0b:5e:fd:c2:a6:07:d2:a1:f1:58:dc:cc:de:0a:
                    00:9a:42:90:6b:1f:48:f4:7e:30:6a:6a:b1:bd:93:
                    e3:12:3d:ce:86:40:f6:c7:8a:fb:33:10:c4:35:a1:
                    ce:75:71:08:6a:7a:45:ef:68:5a:ec:4d:27:88:21:
                    7a:cf:15:64:a5:b6:c6:a5:44:28:bf:02:13:62:c6:
                    e8:7d:c3:51:06:85:af:f5:b8:32:fe:0f:58:a6:85:
                    4a:c5:69:e8:0c:dd:d5:04:35:d1:69:41:ab:76:04:
                    73:7d:a8:c6:9d:30:db:a9:51:a7:25:cc:ae:25:26:
                    04:26:e0:70:60:44:8b:62:72:f3:07:d9:b2:cb:ca:
                    09:fb:42:a9:02:3d:ab:f9:3d:7f:63:ce:1f:a1:e7:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:38:87:0C:0C:14:FA:2E:0D:E1:6E:F1:CA:B1:45:18:A8:CA:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.crl

            X509v3 Authority Key Identifier:
                keyid:13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:33:f7:17:36:56:f5:fc:b1:69:3c:9f:b9:a7:4e:e7:40:
         99:66:0f:db:8d:d6:37:c5:24:91:96:c5:49:39:88:17:22:aa:
         36:31:9e:2a:5c:8b:35:7e:45:45:f5:87:42:04:78:93:73:bf:
         0a:66:c2:8d:03:c2:5c:94:bc:45:22:d8:6b:32:e4:6a:f8:6d:
         a0:ae:73:82:df:9c:f0:d6:17:9f:c3:8f:21:91:f1:41:59:d8:
         63:60:b3:6b:07:3d:ac:4f:de:10:b9:44:d5:b2:1a:2d:9d:89:
         8c:6e:1b:31:a3:0b:88:c8:ff:98:6d:3b:c8:10:9e:aa:c6:28:
         a2:64:a1:54:99:8a:26:2e:2a:63:96:72:32:1e:c5:8d:72:14:
         5e:a2:81:0a:5a:e2:2f:1e:41:62:ad:94:ba:3d:62:6a:6f:63:
         4f:58:60:d3:31:91:06:d9:13:09:00:63:96:28:84:e2:d1:68:
         db:25:71:28:06:cf:98:15:ac:13:7e:8c:7b:cc:41:f4:70:2c:
         c1:bd:80:e7:a8:b6:46:62:61:a4:21:9a:40:a8:85:c7:45:6d:
         62:04:bc:94:db:10:0c:2b:35:2e:f6:93:49:6f:2d:62:73:56:
         07:99:e2:24:f6:dd:3c:c4:a1:bb:1d:a7:0f:94:73:bc:3e:d3:
         0d:ea:c3:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz9IUqfWSBOFPkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM5ZWMwMzMtNzNiNi00MjY4LWJiMmItNzE4OGFlZGQ3
MzZlMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YzNiZGM3OTMtZGRhNC00YjNjLThmOWQtODFjNjcwMmI2Y2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmiRIdX0NPeM3LwT7o0JaqGvpBH2xsK3UpUS
uQa2z1cM+AegIsUC0uoIiorHztkxz9Jfh1egirQPx/iWkYv1okr4j+ULDj1s8yiV
fHu9835kVuuYYKD3diWklz6J3AtZ6N02BIcNM2DsC179wqYH0qHxWNzM3goAmkKQ
ax9I9H4wamqxvZPjEj3OhkD2x4r7MxDENaHOdXEIanpF72ha7E0niCF6zxVkpbbG
pUQovwITYsbofcNRBoWv9bgy/g9YpoVKxWnoDN3VBDXRaUGrdgRzfajGnTDbqVGn
JcyuJSYEJuBwYESLYnLzB9myy8oJ+0KpAj2r+T1/Y84foecP/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9TOIcMDBT6Lg3hbvHKsUUYqMrQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMzll
YzAzMy03M2I2LTQyNjgtYmIyYi03MTg4YWVkZDczNmUvNGE1NjE0OWItMjcxMS0z
YmVjLWJlYjItOWJhNzlkZTllNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzM5ZWMwMzMtNzNiNi00MjY4LWJi
MmItNzE4OGFlZGQ3MzZlLzMzOWVjMDMzLTczYjYtNDI2OC1iYjJiLTcxODhhZWRk
NzM2ZS5jcmwwHwYDVR0jBBgwFoAUE3YYYxEkPKr4k3G6tQLXJeXQpMcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMzllYzAzMy03M2I2LTQyNjgtYmIyYi03MTg4
YWVkZDczNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/L/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADYM/cXNlb1/LFpPJ+5p07nQJlmD9uN1jfFJJGWxUk5iBciqjYxnipc
izV+RUX1h0IEeJNzvwpmwo0DwlyUvEUi2Gsy5Gr4baCuc4LfnPDWF5/DjyGR8UFZ
2GNgs2sHPaxP3hC5RNWyGi2diYxuGzGjC4jI/5htO8gQnqrGKKJkoVSZiiYuKmOW
cjIexY1yFF6igQpa4i8eQWKtlLo9YmpvY09YYNMxkQbZEwkAY5YohOLRaNslcSgG
z5gVrBN+jHvMQfRwLMG9gOeotkZiYaQhmkCohcdFbWIEvJTbEAwrNS72k0lvLWJz
VgeZ4iT23TzEobsdpw+Uc7w+0w3qw8Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:45 2025 by rpki-client