Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa
File:                     c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa (raw, json)
Hash identifier:          uQIme/tDwylXorqreEBbsehmn7WDplrzB5NL5aK00xk=
Subject key identifier:   98:10:00:36:21:03:AD:F4:70:5B:9F:78:D4:85:84:B7:52:1E:C5:D8
Certificate issuer:       /CN=d31b4a7d-fdad-44f3-ad1b-35d470b481b6
Certificate serial:       010D0C9F43285849D594DDCBAC0FA4B51220BABC
Authority key identifier: 79:2A:B5:D6:3F:8D:27:64:C3:F2:CC:12:4A:94:19:C4:9A:01:EF:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        199.166.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:dd:cb:ac:0f:a4:b5:12:20:ba:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31b4a7d-fdad-44f3-ad1b-35d470b481b6
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=7c315770-bb85-4c7a-b99d-df9737f364fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:7d:27:59:22:50:16:bb:c4:31:a3:d4:60:
                    75:14:63:d1:ad:e8:b1:ac:03:6a:5e:bc:b2:bb:93:
                    6c:cb:e1:cf:4e:6c:84:b8:cf:c1:a9:a3:2e:d2:f3:
                    6b:1e:d8:95:19:01:12:2d:6a:ca:b4:38:82:6f:01:
                    ba:be:1d:3f:f3:37:50:fc:f0:b9:ab:27:15:1e:51:
                    e7:dd:c6:a9:3f:71:bd:e7:36:08:49:ef:1b:41:a3:
                    0b:8a:9a:a0:56:08:39:22:6d:17:f5:e0:54:e8:d6:
                    64:cb:cb:e7:bb:4d:56:18:01:00:47:71:66:43:6e:
                    c5:87:68:1f:38:9a:a1:38:2d:9f:c8:1a:9f:81:66:
                    bd:56:fe:f3:fd:0d:f6:10:41:bd:0c:98:06:17:6f:
                    ef:6c:49:04:45:96:dd:86:48:b6:d8:df:41:cf:6e:
                    66:c4:b1:e3:75:62:af:3c:40:b3:8d:21:03:85:ee:
                    ff:4e:5b:87:49:8d:bd:bf:49:0d:e1:bd:a6:b7:cb:
                    bb:c3:31:98:59:4a:d2:41:eb:ae:63:99:57:b7:77:
                    0d:96:6a:3a:d3:5b:73:ab:62:31:d1:e1:30:b5:ab:
                    65:e8:69:26:d5:b4:06:e6:5f:48:b0:05:60:5c:31:
                    71:e7:9d:e7:95:32:de:3c:e9:39:c5:88:56:17:a9:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:10:00:36:21:03:AD:F4:70:5B:9F:78:D4:85:84:B7:52:1E:C5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/c299c2ed-fc1b-3bb8-b23d-546ac1f961fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.crl

            X509v3 Authority Key Identifier:
                keyid:79:2A:B5:D6:3F:8D:27:64:C3:F2:CC:12:4A:94:19:C4:9A:01:EF:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d31b4a7d-fdad-44f3-ad1b-35d470b481b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:ff:08:37:82:66:e5:46:0b:b2:57:1b:b1:dd:7b:fe:42:
         be:ef:10:de:7b:5b:d3:43:8a:bd:ee:57:67:dc:71:76:20:07:
         d3:0f:6d:62:65:e6:f1:8b:5b:a0:95:29:5a:ff:7e:0b:e1:a4:
         c8:27:7c:ee:be:bf:14:2f:88:eb:48:29:5b:9b:75:5e:dd:ad:
         73:64:41:f3:73:dd:be:d1:49:0d:aa:68:4e:4e:c5:c3:14:85:
         1e:0a:8d:3a:a8:fc:77:60:64:fa:aa:55:e6:86:d5:ff:d9:4f:
         34:c6:28:4d:30:69:c6:17:9c:e8:f3:c0:28:74:d5:f8:3b:2c:
         78:7d:14:6d:c4:c9:d3:f5:ca:93:7c:8b:e4:28:b4:89:4c:b1:
         95:48:18:7d:76:d3:97:a1:ee:9f:13:64:ea:57:6d:7e:1b:fc:
         c9:89:8f:3d:57:79:3a:5b:c0:7b:8a:c9:d1:b5:7d:c7:e1:05:
         9c:64:06:5f:5f:76:ab:31:03:41:21:2d:04:f5:9a:32:4a:fe:
         28:b9:78:13:93:c7:ba:29:43:86:b4:53:9c:1a:74:9d:c2:4e:
         9e:8d:85:21:10:2c:0f:74:41:81:42:dc:54:3d:b8:66:79:7f:
         7c:df:74:d8:ab:f7:bb:5f:89:52:2d:e1:f4:f4:91:eb:00:94:
         8a:8d:dd:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlN3LrA+ktRIgurwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMxYjRhN2QtZmRhZC00NGYzLWFkMWItMzVkNDcwYjQ4
MWI2MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
N2MzMTU3NzAtYmI4NS00YzdhLWI5OWQtZGY5NzM3ZjM2NGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7B9J1kiUBa7xDGj1GB1FGPRreixrANqXryy
u5Nsy+HPTmyEuM/BqaMu0vNrHtiVGQESLWrKtDiCbwG6vh0/8zdQ/PC5qycVHlHn
3capP3G95zYISe8bQaMLipqgVgg5Im0X9eBU6NZky8vnu01WGAEAR3FmQ27Fh2gf
OJqhOC2fyBqfgWa9Vv7z/Q32EEG9DJgGF2/vbEkERZbdhki22N9Bz25mxLHjdWKv
PECzjSEDhe7/TluHSY29v0kN4b2mt8u7wzGYWUrSQeuuY5lXt3cNlmo601tzq2Ix
0eEwtatl6Gkm1bQG5l9IsAVgXDFx553nlTLePOk5xYhWF6llEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgQADYhA630cFufeNSFhLdSHsXYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMzFi
NGE3ZC1mZGFkLTQ0ZjMtYWQxYi0zNWQ0NzBiNDgxYjYvYzI5OWMyZWQtZmMxYi0z
YmI4LWIyM2QtNTQ2YWMxZjk2MWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDMxYjRhN2QtZmRhZC00NGYzLWFk
MWItMzVkNDcwYjQ4MWI2L2QzMWI0YTdkLWZkYWQtNDRmMy1hZDFiLTM1ZDQ3MGI0
ODFiNi5jcmwwHwYDVR0jBBgwFoAUeSq11j+NJ2TD8swSSpQZxJoB7zcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMzFiNGE3ZC1mZGFkLTQ0ZjMtYWQxYi0zNWQ0
NzBiNDgxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6bUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAip/wg3gmblRguyVxux3Xv+Qr7vEN57W9NDir3uV2fccXYgB9MPbWJl
5vGLW6CVKVr/fgvhpMgnfO6+vxQviOtIKVubdV7drXNkQfNz3b7RSQ2qaE5OxcMU
hR4KjTqo/HdgZPqqVeaG1f/ZTzTGKE0wacYXnOjzwCh01fg7LHh9FG3EydP1ypN8
i+QotIlMsZVIGH1205eh7p8TZOpXbX4b/MmJjz1XeTpbwHuKydG1fcfhBZxkBl9f
dqsxA0EhLQT1mjJK/ii5eBOTx7opQ4a0U5wadJ3CTp6NhSEQLA90QYFC3FQ9uGZ5
f3zfdNir97tfiVIt4fT0kesAlIqN3UY=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:36 2025 by rpki-client