Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/49332bf4-b1b7-3613-a109-30e602fa1290.roa
File:                     49332bf4-b1b7-3613-a109-30e602fa1290.roa (raw, json)
Hash identifier:          GGZoTwGxPa+etSvP1RQT7gZ2sU7P9owiHlLaHZBkMxk=
Subject key identifier:   FB:59:DB:AF:F4:FD:B7:48:33:EB:5D:2B:06:64:A0:A4:7C:9B:E0:A3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584988CF49563DBEF0D6E81B7800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/49332bf4-b1b7-3613-a109-30e602fa1290.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     397226
IP address blocks:        199.7.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:49:56:3d:be:f0:d6:e8:1b:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=3a6ce804-5067-49a6-a926-4c61f2f19c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:d6:34:19:c7:bb:ba:08:6d:02:91:71:3f:
                    2b:50:1d:9f:a0:e8:f1:4b:ac:ca:50:75:73:7a:5b:
                    f4:75:36:3e:ea:a1:fc:77:52:a8:68:c2:ca:39:79:
                    45:a5:93:8f:a0:d9:b4:3d:59:32:36:a6:30:ac:cd:
                    f0:2e:af:97:af:d0:10:63:f5:e3:c6:31:dc:9b:54:
                    ff:89:40:20:7a:a5:72:10:47:d4:6d:26:d1:34:b2:
                    76:e4:92:3c:d3:7f:50:0f:2b:05:a2:2d:d2:cc:bc:
                    ab:b8:44:0d:67:9c:94:27:fe:80:a2:e7:45:dd:4c:
                    21:75:45:51:bd:9b:09:4b:1c:61:0b:34:35:85:97:
                    0e:0b:af:40:75:4a:25:57:b2:cb:93:5d:27:c9:8a:
                    8b:f9:64:a7:da:86:b6:67:d9:46:c3:dc:5b:f5:04:
                    c6:c8:1b:72:31:1b:48:d9:39:31:f4:33:1d:2c:30:
                    55:e4:2f:8d:68:5a:8e:7e:54:ad:86:ac:48:bd:88:
                    57:6d:3f:ad:30:15:6d:aa:69:02:fd:a5:b4:b2:10:
                    20:a9:30:28:bc:db:8a:23:86:68:12:3a:32:3e:e2:
                    de:a0:20:18:67:55:92:ff:18:2c:3e:86:f8:12:27:
                    d2:46:3e:d2:74:f0:f0:32:c0:4b:eb:c5:8f:74:83:
                    40:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:59:DB:AF:F4:FD:B7:48:33:EB:5D:2B:06:64:A0:A4:7C:9B:E0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/49332bf4-b1b7-3613-a109-30e602fa1290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:d3:d7:07:6c:2e:4a:ae:5e:73:e7:5e:d8:fe:fa:3a:db:
         49:16:a6:35:a0:6b:b5:b3:1e:4e:48:b6:bb:4c:65:b3:6d:ad:
         50:5e:f0:e7:f4:45:06:3a:fc:ef:3a:66:4b:64:bd:23:d6:2a:
         ea:ae:8f:72:d4:6f:c8:4c:f4:d5:e5:66:06:91:9f:cf:31:0e:
         de:76:17:a3:da:5a:5d:25:54:2c:84:5e:73:17:39:82:ed:4d:
         86:8e:63:b1:01:c6:0b:20:e1:73:33:b0:44:3b:0f:1d:fe:0e:
         03:24:1e:4f:dd:84:2e:0f:05:27:2e:81:ae:34:c9:8b:37:c1:
         23:f8:68:a8:90:a6:6e:e9:ec:c8:94:7a:03:98:35:3a:ad:c2:
         c9:54:69:50:87:58:03:0e:19:4f:bc:9c:f7:cf:d9:72:19:48:
         ae:d8:eb:a5:e1:b0:bd:27:f2:16:3a:bd:dc:05:85:8a:da:2c:
         33:91:c6:fa:c5:23:62:2b:30:94:72:79:29:43:8c:74:db:f0:
         77:fe:41:b7:f3:b8:60:5d:3d:82:8e:4d:eb:8d:8f:54:83:21:
         66:a5:cc:cf:45:69:c4:c2:14:12:dd:37:73:19:3f:57:85:fb:
         49:3a:8e:67:ef:ee:26:7d:3b:93:26:7c:62:09:c7:2b:90:e0:
         f5:c0:ca:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz0lWPb7w1ugbeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
M2E2Y2U4MDQtNTA2Ny00OWE2LWE5MjYtNGM2MWYyZjE5YzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjXWNBnHu7oIbQKRcT8rUB2foOjxS6zKUHVz
elv0dTY+6qH8d1KoaMLKOXlFpZOPoNm0PVkyNqYwrM3wLq+Xr9AQY/XjxjHcm1T/
iUAgeqVyEEfUbSbRNLJ25JI8039QDysFoi3SzLyruEQNZ5yUJ/6AoudF3UwhdUVR
vZsJSxxhCzQ1hZcOC69AdUolV7LLk10nyYqL+WSn2oa2Z9lGw9xb9QTGyBtyMRtI
2Tkx9DMdLDBV5C+NaFqOflSthqxIvYhXbT+tMBVtqmkC/aW0shAgqTAovNuKI4Zo
EjoyPuLeoCAYZ1WS/xgsPob4EifSRj7SdPDwMsBL68WPdINAzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtZ26/0/bdIM+tdKwZkoKR8m+CjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDkzMzJiZjQtYjFiNy0z
NjEzLWExMDktMzBlNjAyZmExMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADS909cHbC5Krl5z517Y/vo620kWpjWga7WzHk5ItrtMZbNtrVBe8Of0
RQY6/O86ZktkvSPWKuquj3LUb8hM9NXlZgaRn88xDt52F6PaWl0lVCyEXnMXOYLt
TYaOY7EBxgsg4XMzsEQ7Dx3+DgMkHk/dhC4PBScuga40yYs3wSP4aKiQpm7p7MiU
egOYNTqtwslUaVCHWAMOGU+8nPfP2XIZSK7Y66XhsL0n8hY6vdwFhYraLDORxvrF
I2IrMJRyeSlDjHTb8Hf+QbfzuGBdPYKOTeuNj1SDIWalzM9FacTCFBLdN3MZP1eF
+0k6jmfv7iZ9O5MmfGIJxyuQ4PXAyvQ=
-----END CERTIFICATE-----
Generated at Fri May 9 13:09:49 2025 by rpki-client