Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa
File:                     0662bfc3-9ab0-3172-9e56-66414ef41478.roa (raw, json)
Hash identifier:          bTOB33wUxOht5cXv3i6ITeg+r4DkGQwcwba7TPYw4NI=
Subject key identifier:   00:4C:F1:D8:06:29:09:94:FA:9F:3A:05:FA:EB:CE:49:3A:9A:DE:D3
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F43285848EF61432AB57CDDDA4FEE8700
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     44632
IP address blocks:        208.99.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:43:2a:b5:7c:dd:da:4f:ee:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f9e57df3-a26e-4df5-ba26-b1eb6d844b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:e4:72:52:91:d2:bd:4a:fb:d6:aa:cd:f4:
                    8d:de:71:38:d6:4f:68:ec:26:d7:11:fe:ec:01:e8:
                    cd:7b:84:1d:8e:78:8c:72:34:8b:af:63:1f:41:c2:
                    05:18:2d:bd:35:27:f5:20:c8:8d:e4:21:d8:14:64:
                    44:4e:cd:bd:7f:24:c9:57:b0:a7:66:9c:5b:f8:c7:
                    c2:a9:4c:fa:2f:a1:5b:f4:64:e8:43:19:ad:3c:1c:
                    0b:4b:df:e8:10:0d:92:f8:1a:48:ac:a9:27:f8:c7:
                    15:ca:9d:8c:23:67:51:51:51:5f:a9:87:bc:08:06:
                    56:14:fc:f2:c4:59:21:5a:b2:5c:b7:bd:99:c5:f3:
                    3c:1a:b3:22:df:70:0c:c4:e5:fd:5d:ab:55:cd:0b:
                    f8:63:37:c8:7b:8f:aa:e7:fe:70:f8:b0:ed:c6:77:
                    b3:02:c1:a9:48:8c:1e:00:d6:46:e6:5f:f0:0d:6b:
                    b7:00:df:82:48:6b:9f:94:4f:39:ae:29:e6:7d:66:
                    fe:ad:8f:eb:0c:d4:c1:6d:be:2d:92:0a:c5:95:cc:
                    76:45:08:1e:8e:81:ac:5f:fd:ca:d4:de:dd:a8:48:
                    6e:6d:64:f3:51:71:55:d7:a8:23:f3:35:c9:55:5e:
                    0f:1c:d1:47:1e:4a:01:44:fc:18:41:62:d5:5a:f3:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:F1:D8:06:29:09:94:FA:9F:3A:05:FA:EB:CE:49:3A:9A:DE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ec:3c:60:24:08:9a:22:87:48:09:3b:5a:27:da:83:87:7b:
         8d:74:cd:fd:16:6a:02:71:75:76:58:fe:97:a9:30:eb:98:6d:
         1c:f9:db:62:90:73:45:73:1d:69:09:5c:f5:5a:50:19:5d:a0:
         60:d1:92:6d:5d:ac:c4:c8:7f:85:78:84:c0:87:5a:ca:e5:38:
         6e:3c:ce:15:25:e8:38:a7:fb:fd:0f:5a:b4:30:67:78:ea:b8:
         79:b3:d1:f6:ad:14:f9:bb:a9:02:10:b5:ef:a0:69:ff:9a:20:
         f7:ae:47:04:6a:27:ce:11:3a:7c:10:1b:cf:8c:3a:0f:67:01:
         4d:19:f6:30:43:80:5c:5c:2c:5f:e9:13:1e:f8:b2:b6:5b:42:
         85:06:d5:26:2b:52:cf:81:72:71:fc:06:2a:14:2e:3f:a4:73:
         35:36:58:ae:64:e7:08:b9:c0:c8:68:09:3b:25:b1:96:de:c1:
         e9:b5:5d:03:da:8b:d3:53:5b:0f:16:4a:b0:52:19:ed:8b:c2:
         83:aa:e0:a0:6b:a1:13:d7:ec:33:67:bc:05:d5:32:7e:60:99:
         2f:85:4a:ff:fa:ff:73:b6:cc:a2:46:a4:ea:e8:7e:18:81:2d:
         3f:00:1b:88:f5:8d:67:6b:e9:fe:06:f5:1d:06:f6:9e:10:b2:
         57:55:15:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUMqtXzd2k/uhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjllNTdkZjMtYTI2ZS00ZGY1LWJhMjYtYjFlYjZkODQ0YjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc7kclKR0r1K+9aqzfSN3nE41k9o7CbXEf7s
AejNe4QdjniMcjSLr2MfQcIFGC29NSf1IMiN5CHYFGRETs29fyTJV7CnZpxb+MfC
qUz6L6Fb9GToQxmtPBwLS9/oEA2S+BpIrKkn+McVyp2MI2dRUVFfqYe8CAZWFPzy
xFkhWrJct72ZxfM8GrMi33AMxOX9XatVzQv4YzfIe4+q5/5w+LDtxnezAsGpSIwe
ANZG5l/wDWu3AN+CSGuflE85rinmfWb+rY/rDNTBbb4tkgrFlcx2RQgejoGsX/3K
1N7dqEhubWTzUXFV16gj8zXJVV4PHNFHHkoBRPwYQWLVWvNHJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABM8dgGKQmU+p86Bfrrzkk6mt7TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvMDY2MmJmYzMtOWFiMC0z
MTcyLTllNTYtNjY0MTRlZjQxNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKTsPGAkCJoih0gJO1on2oOHe410zf0WagJxdXZY/pepMOuYbRz522KQ
c0VzHWkJXPVaUBldoGDRkm1drMTIf4V4hMCHWsrlOG48zhUl6Din+/0PWrQwZ3jq
uHmz0fatFPm7qQIQte+gaf+aIPeuRwRqJ84ROnwQG8+MOg9nAU0Z9jBDgFxcLF/p
Ex74srZbQoUG1SYrUs+BcnH8BioULj+kczU2WK5k5wi5wMhoCTslsZbewem1XQPa
i9NTWw8WSrBSGe2LwoOq4KBroRPX7DNnvAXVMn5gmS+FSv/6/3O2zKJGpOrofhiB
LT8AG4j1jWdr6f4G9R0G9p4QsldVFQA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:33:56 2025 by rpki-client