Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa
File:                     306fc983-244c-33e2-8c4a-51231d217125.roa (raw, json)
Hash identifier:          8Afzg+RWixey6s8WW4dC4HZcyVLlVcBd0FcKWBl1x0U=
Subject key identifier:   8A:D6:0B:16:24:A8:74:2B:A2:F6:DF:90:84:01:8F:A5:EE:70:EE:19
Certificate issuer:       /CN=64b51de8-9235-4199-90c9-93aee2696fab
Certificate serial:       010D0C9F43285849287E6C1C4F66D3F57A1E3F00
Authority key identifier: 09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        199.47.26.0/24 maxlen: 24
                          199.47.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6c:1c:4f:66:d3:f5:7a:1e:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b51de8-9235-4199-90c9-93aee2696fab
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=dd813300-6b2f-4ddc-8ad4-26f7893bd807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:66:76:74:70:53:f9:09:b3:9a:ca:b5:93:
                    f5:1c:4e:ef:31:10:9c:70:45:a7:de:b8:0a:ca:06:
                    25:ad:c9:ea:f2:06:29:da:c4:16:e3:ac:3f:b5:bf:
                    7a:47:b8:bc:ba:6c:f2:46:9a:c2:36:ae:86:21:e6:
                    2d:63:85:cd:87:96:c7:7c:d1:3a:d4:9f:43:de:2d:
                    d0:05:f6:f5:e2:90:10:07:98:cd:05:b6:66:99:54:
                    bc:b8:e1:92:06:d3:27:fb:f4:b4:97:e6:ae:f5:a4:
                    8f:d7:ca:e1:d3:66:7d:39:80:d1:43:24:a9:ed:d3:
                    e9:f0:08:69:72:1e:8f:9c:ff:c1:33:d2:3d:13:43:
                    39:44:b7:64:45:b5:e1:28:96:95:1c:55:60:17:95:
                    ca:98:c0:3c:51:c7:ee:98:18:f3:ea:23:5d:dd:ab:
                    65:4d:77:cb:0c:55:6d:2b:60:76:8a:b1:4a:61:68:
                    84:a6:e7:37:8f:83:0f:58:bc:e4:1d:f2:2a:7e:e3:
                    a2:c6:db:12:af:4e:37:75:82:0c:35:66:34:d7:59:
                    ac:07:d6:3e:ea:9f:72:6b:ea:d9:77:f1:e6:dd:8e:
                    33:06:93:bf:d9:8b:84:ad:06:e0:14:1e:eb:cf:9d:
                    99:2b:1e:48:8c:a4:ca:02:4c:49:60:84:58:a7:95:
                    ae:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:0B:16:24:A8:74:2B:A2:F6:DF:90:84:01:8F:A5:EE:70:EE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl

            X509v3 Authority Key Identifier:
                keyid:09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e5:c0:a4:23:af:4d:d1:32:4f:42:c0:9c:a3:a2:39:9e:da:
         47:41:3a:0e:0d:30:81:40:c9:81:7f:1a:fb:30:12:7c:8e:eb:
         4b:ea:06:1d:86:94:bc:e5:8f:96:70:21:bf:d7:8f:af:ca:25:
         bc:bc:d7:5d:b6:7b:74:f3:a1:b6:3a:37:b9:82:fc:86:41:85:
         5d:a1:10:f1:d1:58:51:ad:0f:31:e4:65:45:c9:c8:d4:44:b7:
         0d:8a:e5:35:fe:18:a9:f5:a0:b3:c5:b2:1b:28:c5:19:dd:ca:
         4e:55:e3:31:11:61:00:8e:77:74:fa:bf:0c:25:55:03:d0:47:
         79:97:05:27:b1:69:c4:dc:d2:53:e5:c9:c1:4d:6d:c2:d4:53:
         57:0e:eb:8f:21:12:6e:c0:9d:98:ef:d2:33:e2:fd:8e:0c:33:
         cc:73:1c:5c:90:b7:e5:a3:fe:1b:d8:6a:9e:39:6a:f3:d4:d0:
         80:3f:13:9e:58:25:50:cc:06:0f:1f:3d:17:56:54:63:7b:02:
         66:12:87:27:75:81:f8:30:6a:ba:aa:70:3f:80:18:da:7f:fb:
         4e:08:61:02:d6:e0:e6:3c:09:dc:ff:60:f8:53:25:8d:2d:c2:
         a7:76:e1:63:76:3e:0e:76:54:84:02:d5:76:5c:60:fc:cc:b6:
         87:20:dc:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmwcT2bT9XoePwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjRiNTFkZTgtOTIzNS00MTk5LTkwYzktOTNhZWUyNjk2
ZmFiMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
ZGQ4MTMzMDAtNmIyZi00ZGRjLThhZDQtMjZmNzg5M2JkODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5lmdnRwU/kJs5rKtZP1HE7vMRCccEWn3rgK
ygYlrcnq8gYp2sQW46w/tb96R7i8umzyRprCNq6GIeYtY4XNh5bHfNE61J9D3i3Q
Bfb14pAQB5jNBbZmmVS8uOGSBtMn+/S0l+au9aSP18rh02Z9OYDRQySp7dPp8Ahp
ch6PnP/BM9I9E0M5RLdkRbXhKJaVHFVgF5XKmMA8UcfumBjz6iNd3atlTXfLDFVt
K2B2irFKYWiEpuc3j4MPWLzkHfIqfuOixtsSr043dYIMNWY011msB9Y+6p9ya+rZ
d/Hm3Y4zBpO/2YuErQbgFB7rz52ZKx5IjKTKAkxJYIRYp5WuFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIrWCxYkqHQrovbfkIQBj6XucO4ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NGI1
MWRlOC05MjM1LTQxOTktOTBjOS05M2FlZTI2OTZmYWIvMzA2ZmM5ODMtMjQ0Yy0z
M2UyLThjNGEtNTEyMzFkMjE3MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjRiNTFkZTgtOTIzNS00MTk5LTkw
YzktOTNhZWUyNjk2ZmFiLzY0YjUxZGU4LTkyMzUtNDE5OS05MGM5LTkzYWVlMjY5
NmZhYi5jcmwwHwYDVR0jBBgwFoAUCfcqtMRSN+hUqmJ0vvTE4pvCtE8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82NGI1MWRlOC05MjM1LTQxOTktOTBjOS05M2Fl
ZTI2OTZmYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxy8aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzlwKQjr03RMk9CwJyjojme2kdBOg4NMIFAyYF/GvswEnyO60vqBh2G
lLzlj5ZwIb/Xj6/KJby81122e3TzobY6N7mC/IZBhV2hEPHRWFGtDzHkZUXJyNRE
tw2K5TX+GKn1oLPFshsoxRndyk5V4zERYQCOd3T6vwwlVQPQR3mXBSexacTc0lPl
ycFNbcLUU1cO648hEm7AnZjv0jPi/Y4MM8xzHFyQt+Wj/hvYap45avPU0IA/E55Y
JVDMBg8fPRdWVGN7AmYShyd1gfgwarqqcD+AGNp/+04IYQLW4OY8Cdz/YPhTJY0t
wqd24WN2Pg52VIQC1XZcYPzMtocg3LE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:42:52 2025 by rpki-client