Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/fffde444-795a-3762-b2d3-bc090b693bb6.roa
File:                     fffde444-795a-3762-b2d3-bc090b693bb6.roa (raw, json)
Hash identifier:          jAGItxhMIDqkcZKONHOAcS09srm9MGMU9H9XEZ95jDo=
Subject key identifier:   4A:F2:0D:F5:8D:7E:5E:3E:FF:E3:79:11:A7:36:61:08:2D:54:91:AA
Certificate issuer:       /CN=11c334f7-44cd-44e0-b27a-eee4f9a87c83
Certificate serial:       010D0C9F432858494733EF46B06C58540533CF00
Authority key identifier: 37:63:27:47:C7:0F:E5:40:CE:69:7C:FA:B8:2A:71:AA:55:0D:64:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/fffde444-795a-3762-b2d3-bc090b693bb6.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     14230
IP address blocks:        207.166.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/11c334f7-44cd-44e0-b27a-eee4f9a87c83.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/11c334f7-44cd-44e0-b27a-eee4f9a87c83.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:ef:46:b0:6c:58:54:05:33:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c334f7-44cd-44e0-b27a-eee4f9a87c83
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=0b9e9908-17ca-4bd9-be5c-083be1ececbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:49:f9:f2:87:33:3b:77:35:80:f8:57:f5:e8:
                    ee:ec:4a:67:ed:3a:7c:c7:ea:71:cb:ca:38:d0:33:
                    bf:e1:c2:ec:62:5c:56:30:61:8e:30:02:0a:0b:db:
                    23:08:93:d3:d0:e1:94:cd:f7:e5:7f:ff:9a:fa:26:
                    c6:e5:0e:24:08:e2:80:5f:55:e8:eb:f0:46:48:18:
                    2a:47:0c:05:ed:2a:59:52:a6:7c:74:fd:47:4d:d4:
                    50:9d:30:02:fb:c5:01:19:0c:71:4c:1e:a0:41:e7:
                    2a:90:1d:fd:6c:00:98:25:b3:a4:66:e4:13:35:61:
                    3b:75:e2:55:b3:72:1e:d0:5e:75:1e:7c:33:9e:27:
                    ba:d8:ec:f7:e8:63:9f:e1:78:1a:80:4d:2a:67:b5:
                    f2:77:de:b7:19:dc:e4:a1:52:ff:89:c7:49:77:3d:
                    aa:16:98:a7:3b:d3:c8:58:84:86:44:2e:33:c8:c4:
                    be:c3:50:b9:a5:6b:d0:03:0c:e5:30:f9:3d:6c:1d:
                    d0:91:1a:aa:5f:07:bb:e1:3c:88:18:04:ab:71:a3:
                    b6:68:15:d7:b3:f2:36:65:df:95:03:f5:94:79:03:
                    c5:88:3c:c6:2a:f4:f2:51:fb:ab:79:96:b1:1f:66:
                    a3:74:cc:4f:1d:73:b2:26:52:0e:9b:e5:e0:a5:74:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F2:0D:F5:8D:7E:5E:3E:FF:E3:79:11:A7:36:61:08:2D:54:91:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/fffde444-795a-3762-b2d3-bc090b693bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83/11c334f7-44cd-44e0-b27a-eee4f9a87c83.crl

            X509v3 Authority Key Identifier:
                keyid:37:63:27:47:C7:0F:E5:40:CE:69:7C:FA:B8:2A:71:AA:55:0D:64:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/11c334f7-44cd-44e0-b27a-eee4f9a87c83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.166.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:21:e5:69:5a:93:0f:ec:58:e4:6e:3b:05:c5:fd:78:20:
         f6:e4:02:eb:17:46:56:d9:10:0e:12:2b:25:0b:06:05:6e:59:
         a4:6d:e2:61:c2:5d:d1:43:cd:0f:19:58:19:df:8b:a5:2c:e2:
         93:bf:65:f0:43:a2:94:28:02:f2:69:95:7e:4e:85:5c:24:a1:
         7e:19:27:02:34:90:4f:79:18:a2:a4:2f:e9:d4:6d:b3:dc:96:
         99:c1:ed:12:b8:04:f7:74:02:3d:80:24:d3:7e:a5:b1:b6:35:
         b0:f1:f5:da:36:9c:c2:e6:b9:18:fa:a1:5d:e4:86:cb:09:1b:
         ef:75:7a:dc:25:5f:d9:5f:db:6e:54:79:55:bf:3f:da:b0:7d:
         cc:33:c8:19:12:ae:84:ec:83:bf:65:26:fe:54:2e:4b:67:05:
         0d:04:30:ec:bd:87:42:92:55:3f:6e:af:9c:ab:24:2e:33:2f:
         cf:62:96:df:93:72:30:02:58:c6:61:b5:5f:a4:9c:79:1f:c5:
         56:b9:8e:3f:5a:a9:e6:f3:c8:53:ca:61:8e:ab:15:6a:8f:4c:
         4f:90:a5:57:e8:38:3b:cb:c4:6a:3a:67:dd:86:ff:9c:22:74:
         2f:f9:d9:7c:fd:d4:f5:82:22:aa:41:47:01:ee:31:78:3d:2f:
         f2:f9:31:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+9GsGxYVAUzzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFjMzM0ZjctNDRjZC00NGUwLWIyN2EtZWVlNGY5YTg3
YzgzMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MGI5ZTk5MDgtMTdjYS00YmQ5LWJlNWMtMDgzYmUxZWNlY2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUn58oczO3c1gPhX9eju7Epn7Tp8x+pxy8o4
0DO/4cLsYlxWMGGOMAIKC9sjCJPT0OGUzfflf/+a+ibG5Q4kCOKAX1Xo6/BGSBgq
RwwF7SpZUqZ8dP1HTdRQnTAC+8UBGQxxTB6gQecqkB39bACYJbOkZuQTNWE7deJV
s3Ie0F51Hnwznie62Oz36GOf4XgagE0qZ7Xyd963GdzkoVL/icdJdz2qFpinO9PI
WISGRC4zyMS+w1C5pWvQAwzlMPk9bB3QkRqqXwe74TyIGASrcaO2aBXXs/I2Zd+V
A/WUeQPFiDzGKvTyUfureZaxH2ajdMxPHXOyJlIOm+XgpXS8YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEryDfWNfl4+/+N5Eac2YQgtVJGqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMWMz
MzRmNy00NGNkLTQ0ZTAtYjI3YS1lZWU0ZjlhODdjODMvZmZmZGU0NDQtNzk1YS0z
NzYyLWIyZDMtYmMwOTBiNjkzYmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTFjMzM0ZjctNDRjZC00NGUwLWIy
N2EtZWVlNGY5YTg3YzgzLzExYzMzNGY3LTQ0Y2QtNDRlMC1iMjdhLWVlZTRmOWE4
N2M4My5jcmwwHwYDVR0jBBgwFoAUN2MnR8cP5UDOaXz6uCpxqlUNZKcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMWMzMzRmNy00NGNkLTQ0ZTAtYjI3YS1lZWU0
ZjlhODdjODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6bJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwhIeVpWpMP7FjkbjsFxf14IPbkAusXRlbZEA4SKyULBgVuWaRt4mHC
XdFDzQ8ZWBnfi6Us4pO/ZfBDopQoAvJplX5OhVwkoX4ZJwI0kE95GKKkL+nUbbPc
lpnB7RK4BPd0Aj2AJNN+pbG2NbDx9do2nMLmuRj6oV3khssJG+91etwlX9lf225U
eVW/P9qwfcwzyBkSroTsg79lJv5ULktnBQ0EMOy9h0KSVT9ur5yrJC4zL89ilt+T
cjACWMZhtV+knHkfxVa5jj9aqebzyFPKYY6rFWqPTE+QpVfoODvLxGo6Z92G/5wi
dC/52Xz91PWCIqpBRwHuMXg9L/L5MSE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:16 2025 by rpki-client