Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d98b707-54a3-3458-9613-51d5569ba775.roa
File:                     1d98b707-54a3-3458-9613-51d5569ba775.roa (raw, json)
Hash identifier:          87xKPMALMp7q4demJ+sxSznvY5ymkArOvUezaJRfwRI=
Subject key identifier:   FB:3A:BE:01:3E:7C:DA:96:7D:27:63:87:F1:51:56:04:02:9A:21:0D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491246C91AC9030D25C6163B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d98b707-54a3-3458-9613-51d5569ba775.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3360
IP address blocks:        192.85.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c9:1a:c9:03:0d:25:c6:16:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=a95cf1f9-f301-44a5-b621-64cd5d2620a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a7:66:e6:b2:86:5a:ec:d1:78:fe:c8:8e:96:
                    9c:7a:48:5d:31:bc:38:3c:7f:2f:98:02:5a:bd:49:
                    76:2a:70:a9:5f:0f:4e:46:e9:3e:e6:0d:63:13:69:
                    4d:69:94:ae:bc:12:08:93:ed:24:3f:8a:d3:e7:ef:
                    11:60:2e:a4:e5:b6:a9:e5:55:9d:e7:e6:b6:79:90:
                    3f:ac:36:78:ac:c2:85:d0:23:e8:1f:18:95:97:55:
                    9e:cc:47:2f:5f:c2:d6:f5:55:4c:5a:e0:79:7e:fb:
                    8f:c2:10:9a:2c:39:d9:a4:96:1f:ac:9e:75:db:dc:
                    3c:7b:4d:f0:16:3d:f3:6c:38:4a:d9:e2:7c:67:92:
                    82:94:10:42:d3:64:a2:8c:5f:28:1f:95:2f:22:bc:
                    16:c1:c6:cb:a8:17:03:56:54:6f:1e:4b:55:50:07:
                    eb:54:a9:69:c4:1c:8e:3f:fd:13:7c:78:c0:11:d2:
                    f7:c1:b4:cd:db:2a:65:e3:80:f3:cd:96:ae:5d:47:
                    02:0f:99:c0:b7:f7:6f:c6:24:48:c8:2d:40:52:06:
                    76:a0:94:ac:7a:47:a9:fd:97:7f:db:41:a2:96:55:
                    f0:3b:b2:ba:dd:11:13:49:30:d7:6c:f8:5e:f3:6b:
                    c7:c6:59:1d:8c:f6:f9:ae:66:1c:c1:2a:4f:11:b7:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3A:BE:01:3E:7C:DA:96:7D:27:63:87:F1:51:56:04:02:9A:21:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1d98b707-54a3-3458-9613-51d5569ba775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:f4:0d:64:ae:3e:83:2d:1a:07:cd:78:f9:4f:d0:6c:80:
         55:df:ed:54:ed:8a:9b:bb:19:ca:8f:5d:4d:6b:7f:70:a4:5d:
         0a:b0:73:e7:40:af:04:9f:1b:5a:bf:88:a4:b8:10:e5:9a:7c:
         a8:b7:85:38:1c:4a:fa:ba:ae:16:dd:9a:b2:72:a7:eb:03:1c:
         40:ec:b5:f1:bf:17:a9:f6:f2:b7:96:f1:8d:cc:56:78:fc:de:
         64:a9:ed:e3:29:7a:8a:77:c3:95:aa:3d:11:72:33:bd:0f:19:
         b3:a5:4a:c9:47:83:f7:03:b9:8d:d4:bb:8d:06:f2:39:1e:f4:
         20:cc:e2:7a:f2:ca:1a:60:db:ea:8a:33:c8:4b:b2:3b:0c:1d:
         29:05:41:ae:c5:d7:15:b4:40:93:d8:f7:7c:a0:31:b3:18:be:
         54:f5:78:0b:8a:df:b8:fe:b9:25:1e:66:e6:7a:24:dc:7f:db:
         8f:7f:d5:0f:d2:82:ba:28:3f:5e:fe:4e:ad:1c:ee:c6:81:bc:
         5e:1e:91:35:9b:5a:ab:e3:28:5b:83:bf:13:4b:18:82:61:29:
         8e:04:7d:4b:c0:c8:7f:df:a4:32:e8:9d:a0:49:87:16:af:3d:
         6d:7b:5b:bd:33:43:ab:77:70:1f:86:8e:1e:89:a1:4e:3a:cc:
         5f:09:a6:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRskayQMNJcYWO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
YTk1Y2YxZjktZjMwMS00NGE1LWI2MjEtNjRjZDVkMjYyMGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6dm5rKGWuzReP7IjpacekhdMbw4PH8vmAJa
vUl2KnCpXw9ORuk+5g1jE2lNaZSuvBIIk+0kP4rT5+8RYC6k5bap5VWd5+a2eZA/
rDZ4rMKF0CPoHxiVl1WezEcvX8LW9VVMWuB5fvuPwhCaLDnZpJYfrJ5129w8e03w
Fj3zbDhK2eJ8Z5KClBBC02SijF8oH5UvIrwWwcbLqBcDVlRvHktVUAfrVKlpxByO
P/0TfHjAEdL3wbTN2ypl44DzzZauXUcCD5nAt/dvxiRIyC1AUgZ2oJSsekep/Zd/
20GillXwO7K63RETSTDXbPhe82vHxlkdjPb5rmYcwSpPEbfL/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPs6vgE+fNqWfSdjh/FRVgQCmiENMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWQ5OGI3MDctNTRhMy0z
NDU4LTk2MTMtNTFkNTU2OWJhNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFU7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxb9A1krj6DLRoHzXj5T9BsgFXf7VTtipu7GcqPXU1rf3CkXQqwc+dA
rwSfG1q/iKS4EOWafKi3hTgcSvq6rhbdmrJyp+sDHEDstfG/F6n28reW8Y3MVnj8
3mSp7eMpeop3w5WqPRFyM70PGbOlSslHg/cDuY3Uu40G8jke9CDM4nryyhpg2+qK
M8hLsjsMHSkFQa7F1xW0QJPY93ygMbMYvlT1eAuK37j+uSUeZuZ6JNx/249/1Q/S
grooP17+Tq0c7saBvF4ekTWbWqvjKFuDvxNLGIJhKY4EfUvAyH/fpDLonaBJhxav
PW17W70zQ6t3cB+Gjh6JoU46zF8Jpgc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:23 2025 by rpki-client