Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa
File:                     4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa (raw, json)
Hash identifier:          GtQp/le8xknSZiyyr6OQI09kOVDKt7EO6phwsW/evJE=
Subject key identifier:   C6:7B:E6:C1:4F:48:34:A4:4B:D8:22:B8:68:35:B5:01:24:5D:72:62
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285848CB1654FB65527A2215307380
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        199.195.116.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:54:fb:65:52:7a:22:15:30:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=cfdac9ec-debb-41df-b8c6-350e9835be88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:50:a4:e9:eb:cf:3f:2b:65:e4:18:e7:86:
                    2c:52:7a:23:ab:71:4e:40:a5:dd:ea:65:fe:fa:ee:
                    2b:8f:2b:f3:20:b1:1b:bd:6b:0c:d5:3a:00:8f:94:
                    09:1d:d9:f7:15:9c:ee:a3:6c:ef:b5:d4:7d:a0:af:
                    5e:46:52:69:cd:b9:6c:df:1e:95:e7:e7:00:e4:3d:
                    da:4f:18:ef:14:c1:df:72:3a:f1:9b:23:e0:4c:87:
                    b9:b6:f4:96:30:b4:80:ed:3a:f2:11:00:1a:6c:80:
                    04:8c:63:93:9a:6c:a3:a6:26:0a:9e:a4:98:01:3f:
                    e1:f2:3e:97:d9:8e:d8:b1:00:30:57:37:46:a4:ed:
                    fe:8a:3e:49:64:65:96:a2:9f:86:a2:86:c9:1a:41:
                    32:40:06:c9:44:21:1c:33:9f:29:8f:7c:69:6b:07:
                    15:99:d7:89:c7:8a:d7:15:21:74:7a:7d:55:0d:a9:
                    7e:ef:3b:44:68:56:ec:97:6c:e6:01:ef:d8:5d:02:
                    bf:36:f5:c7:e6:4c:2f:96:92:30:40:a5:25:2c:8a:
                    ec:9e:06:0e:ad:d9:b3:9b:29:68:4d:4c:62:c5:d8:
                    a7:43:9e:b8:fd:81:eb:95:39:f3:fc:a4:c7:15:c1:
                    95:bf:ff:2e:3b:3b:65:11:54:d3:89:d0:0f:92:e7:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7B:E6:C1:4F:48:34:A4:4B:D8:22:B8:68:35:B5:01:24:5D:72:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4f3323a0-d75d-37c4-b2ea-2f666d66e885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.195.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:67:39:a8:02:9a:64:8f:7b:34:03:fd:e2:e6:7c:31:65:
         f6:e0:a8:60:ef:18:2d:93:27:66:36:15:ac:4c:68:e2:be:cf:
         27:e5:7a:90:8c:83:ed:2f:f1:30:d0:1f:94:9a:2d:d8:12:ac:
         5d:f0:14:d4:a5:39:11:6b:22:45:7d:fb:2f:29:fa:72:de:b8:
         68:1a:75:28:d3:1a:98:f3:54:e4:2f:51:97:f0:5f:72:7e:f1:
         0f:9f:fe:87:75:da:20:fc:af:db:13:4b:eb:55:62:cc:ea:ca:
         53:57:9a:b1:3c:0b:32:ba:f4:e8:bd:ab:cd:93:d0:04:bf:c4:
         64:9d:af:72:34:d5:79:3c:a3:18:e4:35:d7:14:cf:f1:c4:3c:
         4a:28:5f:f0:3d:a6:5f:44:ec:df:db:9d:d6:53:e5:97:66:b8:
         c8:4d:58:97:77:4c:e9:3a:fd:a5:c7:ae:29:23:75:43:2a:b7:
         5f:2f:a6:4c:ae:94:af:89:5f:ca:7b:ab:b1:18:1b:fc:ec:ea:
         cf:49:42:4e:eb:3c:5a:00:77:0a:82:11:90:fd:71:e7:79:36:
         53:cc:5d:59:09:e5:cf:b7:93:bb:df:9c:32:ff:a9:eb:62:ac:
         1c:44:71:f7:d7:fc:0f:99:6f:d8:c1:2c:bd:24:c9:fc:83:9f:
         fd:35:d6:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlT7ZVJ6IhUwc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk
Y2ZkYWM5ZWMtZGViYi00MWRmLWI4YzYtMzUwZTk4MzViZTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/tQpOnrzz8rZeQY54YsUnojq3FOQKXd6mX+
+u4rjyvzILEbvWsM1ToAj5QJHdn3FZzuo2zvtdR9oK9eRlJpzbls3x6V5+cA5D3a
TxjvFMHfcjrxmyPgTIe5tvSWMLSA7TryEQAabIAEjGOTmmyjpiYKnqSYAT/h8j6X
2Y7YsQAwVzdGpO3+ij5JZGWWop+GoobJGkEyQAbJRCEcM58pj3xpawcVmdeJx4rX
FSF0en1VDal+7ztEaFbsl2zmAe/YXQK/NvXH5kwvlpIwQKUlLIrsngYOrdmzmylo
TUxixdinQ564/YHrlTnz/KTHFcGVv/8uOztlEVTTidAPkufb2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZ75sFPSDSkS9giuGg1tQEkXXJiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNGYzMzIzYTAtZDc1ZC0z
N2M0LWIyZWEtMmY2NjZkNjZlODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8N0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBMZzmoAppkj3s0A/3i5nwxZfbgqGDvGC2TJ2Y2FaxMaOK+zyflepCM
g+0v8TDQH5SaLdgSrF3wFNSlORFrIkV9+y8p+nLeuGgadSjTGpjzVOQvUZfwX3J+
8Q+f/od12iD8r9sTS+tVYszqylNXmrE8CzK69Oi9q82T0AS/xGSdr3I01Xk8oxjk
NdcUz/HEPEooX/A9pl9E7N/bndZT5ZdmuMhNWJd3TOk6/aXHrikjdUMqt18vpkyu
lK+JX8p7q7EYG/zs6s9JQk7rPFoAdwqCEZD9ced5NlPMXVkJ5c+3k7vfnDL/qeti
rBxEcffX/A+Zb9jBLL0kyfyDn/011rY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:22:06 2025 by rpki-client