Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ff0ffb5-1eda-3a6f-b3f8-6f0b673c2759.roa
File:                     9ff0ffb5-1eda-3a6f-b3f8-6f0b673c2759.roa (raw, json)
Hash identifier:          f13DnVztrK9AwVPaLPqEqO8xgAA4OjbvJWDJyRScLSM=
Subject key identifier:   07:1D:1F:9C:55:D6:ED:A5:19:A9:42:AF:2E:EF:B9:4C:2E:0A:9D:89
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76DDCFB00AC3E90A930180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ff0ffb5-1eda-3a6f-b3f8-6f0b673c2759.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397229
IP address blocks:        199.7.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:dd:cf:b0:0a:c3:e9:0a:93:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=5a60d107-b8a3-4ce9-9dae-d240c0401bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:79:84:a0:c0:7c:65:f3:ab:f1:3c:85:47:12:
                    b2:d9:93:09:5e:95:a6:da:1a:39:9c:6b:d4:a1:81:
                    a1:0a:d1:70:9f:e2:f8:df:7a:1c:e0:b3:fe:5a:28:
                    5f:0b:8a:f9:59:e0:ff:14:c4:ae:00:36:51:34:53:
                    d0:88:c2:cc:2f:9c:af:9d:54:9b:fc:6a:4a:4c:d2:
                    a8:56:79:36:e4:19:0f:1b:a5:1d:21:e4:54:36:f6:
                    d1:e1:e5:4b:5d:00:b0:1b:40:f2:f9:32:d2:46:c5:
                    de:b4:1e:49:16:60:0b:49:1b:1c:40:2f:58:d4:40:
                    53:01:de:2e:2d:df:fe:74:f1:1f:eb:00:36:5e:97:
                    17:6d:b4:65:87:e6:0c:dd:11:68:8c:16:f4:2f:ef:
                    c1:e7:c0:dd:cc:b2:c9:30:72:e9:22:47:a6:fa:d8:
                    a5:4c:a0:ba:07:24:83:b7:d0:5b:47:4d:d6:e8:37:
                    61:a7:e9:14:ad:23:e1:ec:ac:f0:2e:ee:54:67:0f:
                    3f:e7:9a:6e:87:66:f7:2f:c9:6f:ec:e5:c5:89:a7:
                    b5:02:fe:d7:3c:b9:37:13:43:80:c6:30:d9:82:a8:
                    2b:b1:90:27:f9:8d:ec:8d:7e:bd:82:14:04:2c:8c:
                    92:47:e9:a7:2e:e4:4d:11:6d:01:32:bd:8d:25:d1:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:1F:9C:55:D6:ED:A5:19:A9:42:AF:2E:EF:B9:4C:2E:0A:9D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ff0ffb5-1eda-3a6f-b3f8-6f0b673c2759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:93:22:b2:27:ef:67:7f:a4:a9:8b:7a:02:55:18:0b:66:
         48:61:40:69:03:66:d1:a3:d6:04:42:57:d3:f8:de:df:80:4a:
         df:19:c2:5d:7a:71:82:70:80:c7:6f:b6:b2:a5:8a:64:f4:11:
         73:97:b9:ba:0a:7f:a2:e1:f9:5d:ce:64:9d:1c:da:9d:ef:d9:
         8e:43:21:be:b1:6c:ca:f4:c3:13:b0:a3:1f:d3:71:29:29:20:
         ea:c3:81:72:6a:0c:74:ae:69:3b:f8:ff:12:98:5b:c4:82:17:
         d4:f7:cd:0a:08:b7:57:b2:e6:a7:93:c9:a8:14:68:e3:e9:d0:
         59:e1:57:f8:ab:83:3a:df:e9:38:3d:52:5f:1d:2f:14:b8:8c:
         65:94:2d:b5:1f:d3:c1:1f:ff:ec:1c:1a:ee:3e:bc:3e:e5:a5:
         98:aa:91:aa:f6:b5:b4:de:d0:bb:7f:89:87:23:e8:1a:e0:ee:
         86:bf:6a:b0:ed:26:21:ce:9f:35:30:40:33:41:ce:b2:11:5d:
         16:be:47:44:51:7b:93:b1:3a:5c:4f:3c:e2:81:d6:44:5e:be:
         ce:f3:01:a5:69:54:81:72:e1:d8:0e:92:3a:85:cf:6f:2c:59:
         b1:81:9a:bc:fc:4f:e2:53:73:38:67:46:f3:f9:f2:a9:70:af:
         8a:07:b5:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddt3PsArD6QqTAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk
NWE2MGQxMDctYjhhMy00Y2U5LTlkYWUtZDI0MGMwNDAxYmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33mEoMB8ZfOr8TyFRxKy2ZMJXpWm2ho5nGvU
oYGhCtFwn+L433oc4LP+WihfC4r5WeD/FMSuADZRNFPQiMLML5yvnVSb/GpKTNKo
Vnk25BkPG6UdIeRUNvbR4eVLXQCwG0Dy+TLSRsXetB5JFmALSRscQC9Y1EBTAd4u
Ld/+dPEf6wA2XpcXbbRlh+YM3RFojBb0L+/B58DdzLLJMHLpIkem+tilTKC6BySD
t9BbR03W6Ddhp+kUrSPh7KzwLu5UZw8/55puh2b3L8lv7OXFiae1Av7XPLk3E0OA
xjDZgqgrsZAn+Y3sjX69ghQELIySR+mnLuRNEW0BMr2NJdFRJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcdH5xV1u2lGalCry7vuUwuCp2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWZmMGZmYjUtMWVkYS0z
YTZmLWIzZjgtNmYwYjY3M2MyNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnNkyKyJ+9nf6Spi3oCVRgLZkhhQGkDZtGj1gRCV9P43t+ASt8Zwl16
cYJwgMdvtrKlimT0EXOXuboKf6Lh+V3OZJ0c2p3v2Y5DIb6xbMr0wxOwox/TcSkp
IOrDgXJqDHSuaTv4/xKYW8SCF9T3zQoIt1ey5qeTyagUaOPp0FnhV/irgzrf6Tg9
Ul8dLxS4jGWULbUf08Ef/+wcGu4+vD7lpZiqkar2tbTe0Lt/iYcj6Brg7oa/arDt
JiHOnzUwQDNBzrIRXRa+R0RRe5OxOlxPPOKB1kRevs7zAaVpVIFy4dgOkjqFz28s
WbGBmrz8T+JTczhnRvP58qlwr4oHtUQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:50 2024 by rpki-client on console-ams.rpki-client.org