Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85686169-ee3f-31ef-9da4-9d434e7ba384.roa
File:                     85686169-ee3f-31ef-9da4-9d434e7ba384.roa (raw, json)
Hash identifier:          n7pzWPdNvSjntcvw2Nt/36s6fnBQVx1nEEl22Ffedr0=
Subject key identifier:   FA:B4:29:92:F0:8E:11:A0:52:86:D7:90:C4:B9:38:2D:A7:54:DB:67
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76DDE66A4DFD534272D3A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85686169-ee3f-31ef-9da4-9d434e7ba384.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397231
IP address blocks:        199.7.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:dd:e6:6a:4d:fd:53:42:72:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=8ec53436-7d32-4793-bf01-748c96e74130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:34:ac:78:b5:e4:8d:f7:7b:ac:13:cc:7e:
                    92:f5:04:6e:43:7c:a0:69:02:e7:0b:f1:1d:80:ab:
                    70:86:86:0d:23:79:c8:94:b8:ad:4e:13:8a:1a:cc:
                    67:93:e1:cd:95:92:cf:d6:0b:c6:c5:df:5a:fa:20:
                    c9:0b:f5:ad:fa:9e:38:b5:20:f4:f2:4e:19:52:79:
                    bc:0a:14:25:a4:b2:7d:84:86:36:fb:a9:fb:25:d9:
                    f9:e3:18:30:31:6e:f9:c5:46:85:82:36:fa:0c:9f:
                    d1:8e:74:48:59:12:4a:3c:7b:87:07:80:09:17:5c:
                    fa:e7:f8:94:5d:29:01:8b:19:78:34:2a:8c:45:f5:
                    56:7f:c9:73:f7:29:66:bd:1d:c9:66:c0:15:fa:7f:
                    cf:ec:a7:93:88:af:61:28:a0:0a:e1:be:22:85:7f:
                    a7:d6:f6:ed:3b:30:a5:06:c8:fe:b1:50:54:c6:8f:
                    15:50:15:3e:0b:66:1d:ed:3e:56:6b:93:66:5c:7e:
                    44:96:08:a6:b7:2d:ef:ba:63:8f:a9:f4:5c:25:25:
                    99:05:7a:7d:2b:a4:2d:aa:b4:e0:ef:f9:0e:7b:d4:
                    5a:04:8e:2c:25:ce:2b:63:6e:41:51:00:a5:70:0e:
                    d3:1a:4d:66:57:a9:98:21:df:07:e0:95:f9:a5:06:
                    da:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B4:29:92:F0:8E:11:A0:52:86:D7:90:C4:B9:38:2D:A7:54:DB:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/85686169-ee3f-31ef-9da4-9d434e7ba384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:7f:79:af:31:01:b3:bd:d4:90:f5:bc:2d:b5:66:bc:22:
         a5:01:85:af:88:be:00:1e:38:da:9a:cd:65:f5:7a:d3:77:f7:
         1a:a1:3c:14:e1:1d:27:9d:85:f0:25:38:cb:3f:a5:d1:03:34:
         db:9c:bb:c3:c4:d4:93:73:b4:79:68:c4:66:be:ad:89:70:26:
         59:6a:45:55:f4:9c:ca:ab:22:58:51:d7:89:dc:93:8c:93:d0:
         00:e6:b4:93:78:2c:8a:88:d5:c8:96:74:74:2e:bb:8c:77:20:
         6c:70:09:87:0e:24:db:06:0f:1b:ea:d7:14:eb:b2:76:07:df:
         1d:ba:ff:2d:74:35:ce:d2:69:3c:ca:34:8d:f1:f7:67:cd:2a:
         37:46:6a:66:a5:57:40:97:75:26:c5:57:c9:ac:dc:b8:ea:a9:
         c4:d3:d1:e9:44:95:5d:13:bb:65:86:a0:02:16:5b:9b:21:64:
         b4:85:41:28:3a:fc:c8:ce:1f:7b:61:d0:cf:8f:b9:ee:30:04:
         40:f1:c4:f6:6c:03:24:77:11:c3:04:66:73:a1:36:a8:4b:b8:
         c8:68:ff:81:9d:ee:34:88:61:fd:17:b8:bb:b8:a0:1b:d7:e6:
         0c:50:95:47:76:cd:c7:14:d7:0f:45:b7:c0:fb:a5:59:20:80:
         5d:2e:7f:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddt3mak39U0Jy06AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
OGVjNTM0MzYtN2QzMi00NzkzLWJmMDEtNzQ4Yzk2ZTc0MTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIE0rHi15I33e6wTzH6S9QRuQ3ygaQLnC/Ed
gKtwhoYNI3nIlLitThOKGsxnk+HNlZLP1gvGxd9a+iDJC/Wt+p44tSD08k4ZUnm8
ChQlpLJ9hIY2+6n7Jdn54xgwMW75xUaFgjb6DJ/RjnRIWRJKPHuHB4AJF1z65/iU
XSkBixl4NCqMRfVWf8lz9ylmvR3JZsAV+n/P7KeTiK9hKKAK4b4ihX+n1vbtOzCl
Bsj+sVBUxo8VUBU+C2Yd7T5Wa5NmXH5Elgimty3vumOPqfRcJSWZBXp9K6QtqrTg
7/kOe9RaBI4sJc4rY25BUQClcA7TGk1mV6mYId8H4JX5pQbaAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPq0KZLwjhGgUobXkMS5OC2nVNtnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODU2ODYxNjktZWUzZi0z
MWVmLTlkYTQtOWQ0MzRlN2JhMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHlf3mvMQGzvdSQ9bwttWa8IqUBha+IvgAeONqazWX1etN39xqhPBTh
HSedhfAlOMs/pdEDNNucu8PE1JNztHloxGa+rYlwJllqRVX0nMqrIlhR14nck4yT
0ADmtJN4LIqI1ciWdHQuu4x3IGxwCYcOJNsGDxvq1xTrsnYH3x26/y10Nc7SaTzK
NI3x92fNKjdGamalV0CXdSbFV8ms3LjqqcTT0elElV0Tu2WGoAIWW5shZLSFQSg6
/MjOH3th0M+Pue4wBEDxxPZsAyR3EcMEZnOhNqhLuMho/4Gd7jSIYf0XuLu4oBvX
5gxQlUd2zccU1w9Ft8D7pVkggF0ufyg=
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:18:53 2024 by rpki-client on console-fra.rpki-client.org