Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/f052c218-1b02-3e88-8f4c-909898e26c58.roa
File:                     f052c218-1b02-3e88-8f4c-909898e26c58.roa (raw, json)
Hash identifier:          gv5bfnOgZt7i2hMaU7yZcCOre3pRY8nD1mjmhL8TQ7o=
Subject key identifier:   2C:AA:A2:6C:99:70:52:A0:FC:5D:A7:82:34:17:EE:34:B1:5A:E1:5A
Certificate issuer:       /CN=05a2efdb-ee12-40bc-8c32-27ae26210fd3
Certificate serial:       010D0C9F4328584A23C00821079EE0F2BE961740
Authority key identifier: 54:3B:A7:AE:54:3B:D8:15:09:0D:EC:C5:E5:C1:AC:92:D6:C5:FF:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/f052c218-1b02-3e88-8f4c-909898e26c58.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     31898
IP address blocks:        208.76.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/05a2efdb-ee12-40bc-8c32-27ae26210fd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/05a2efdb-ee12-40bc-8c32-27ae26210fd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:08:21:07:9e:e0:f2:be:96:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a2efdb-ee12-40bc-8c32-27ae26210fd3
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=42c567eb-fbc4-4cb3-9e9f-b469c6a8cf9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:f7:dd:e8:41:60:30:42:dd:52:1b:34:7f:
                    93:f9:ef:a3:98:1e:92:cd:5e:c6:84:ba:9b:42:83:
                    38:43:57:c6:c6:4f:89:a3:c6:b0:73:f0:4e:fb:5f:
                    bb:05:1d:e0:68:da:79:2f:64:3f:ed:a1:36:67:f5:
                    0e:0f:0d:c0:32:97:f0:ad:f0:cc:42:dc:ba:c4:f6:
                    c2:c0:f4:03:c7:82:05:23:ea:f1:2a:73:36:91:f1:
                    b8:3a:18:2b:1c:ee:95:67:20:be:d0:d7:57:94:8b:
                    24:51:18:f4:5d:46:86:3e:29:62:a9:81:23:1b:86:
                    57:ac:01:c0:64:58:e6:5a:4a:9a:0f:21:cb:13:9d:
                    51:fc:1f:4b:89:3c:b7:ef:30:ba:79:25:9c:81:20:
                    9f:58:96:3a:ac:a8:8e:a9:78:92:a1:32:35:52:40:
                    2b:02:16:f8:d7:32:28:16:bc:57:6e:fe:b8:1b:ac:
                    05:0f:fb:92:d2:9a:3d:59:1b:45:51:0e:c9:4c:8d:
                    65:8c:4e:80:fa:8f:46:6d:71:ac:42:b2:ec:26:0c:
                    79:9a:65:5e:0c:a7:da:f8:d3:a5:4d:90:02:33:18:
                    5c:09:b7:5c:95:56:93:b4:c1:67:9f:76:42:e9:04:
                    66:f2:25:30:b0:c0:af:24:30:f5:fd:9f:6c:d7:d8:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:A2:6C:99:70:52:A0:FC:5D:A7:82:34:17:EE:34:B1:5A:E1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/f052c218-1b02-3e88-8f4c-909898e26c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3/05a2efdb-ee12-40bc-8c32-27ae26210fd3.crl

            X509v3 Authority Key Identifier:
                keyid:54:3B:A7:AE:54:3B:D8:15:09:0D:EC:C5:E5:C1:AC:92:D6:C5:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05a2efdb-ee12-40bc-8c32-27ae26210fd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:35:a2:43:db:6d:17:54:10:f8:af:90:c6:41:69:23:3a:
         b1:19:55:39:c9:2f:42:fd:de:b6:e9:00:70:e0:95:3e:66:85:
         67:37:8a:8e:f1:cc:59:9f:22:73:2f:09:03:bb:1b:23:89:86:
         6a:91:4e:2f:70:43:94:4c:96:9f:c2:e3:3c:75:a4:df:25:1f:
         13:14:76:7a:78:89:3c:76:a4:53:3c:62:8d:08:98:fe:92:c2:
         ef:ea:ee:3e:ed:97:fd:bd:1c:f4:34:cc:d2:3c:ae:e3:74:2e:
         e1:c4:97:99:b8:b1:4e:1c:8d:47:ce:01:84:3a:02:b6:dd:31:
         76:06:6b:fe:bc:a2:7f:a4:fb:c9:ce:66:ad:e7:2e:15:ee:48:
         c3:0e:9e:58:dc:17:bc:f1:19:c3:85:69:6b:a9:a3:d8:f4:e9:
         aa:f6:c3:b1:dc:0d:2f:82:1a:b5:87:ec:a7:45:df:1e:08:72:
         80:fc:85:9f:b5:c0:72:ec:b2:1d:c1:55:5e:bb:00:35:de:f5:
         85:ea:d3:1d:94:2c:76:9c:25:5e:a3:49:de:e0:4f:5c:9f:48:
         b5:68:59:64:f0:a0:30:9d:51:61:b9:c0:ba:34:66:3b:73:71:
         e0:9c:57:45:bc:9f:08:57:59:41:ec:49:48:06:fb:e1:c7:61:
         ed:af:01:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAghB57g8r6WF0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVhMmVmZGItZWUxMi00MGJjLThjMzItMjdhZTI2MjEw
ZmQzMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
NDJjNTY3ZWItZmJjNC00Y2IzLTllOWYtYjQ2OWM2YThjZjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUP33ehBYDBC3VIbNH+T+e+jmB6SzV7GhLqb
QoM4Q1fGxk+Jo8awc/BO+1+7BR3gaNp5L2Q/7aE2Z/UODw3AMpfwrfDMQty6xPbC
wPQDx4IFI+rxKnM2kfG4OhgrHO6VZyC+0NdXlIskURj0XUaGPiliqYEjG4ZXrAHA
ZFjmWkqaDyHLE51R/B9LiTy37zC6eSWcgSCfWJY6rKiOqXiSoTI1UkArAhb41zIo
FrxXbv64G6wFD/uS0po9WRtFUQ7JTI1ljE6A+o9GbXGsQrLsJgx5mmVeDKfa+NOl
TZACMxhcCbdclVaTtMFnn3ZC6QRm8iUwsMCvJDD1/Z9s19j+twIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyqomyZcFKg/F2ngjQX7jSxWuFaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNWEy
ZWZkYi1lZTEyLTQwYmMtOGMzMi0yN2FlMjYyMTBmZDMvZjA1MmMyMTgtMWIwMi0z
ZTg4LThmNGMtOTA5ODk4ZTI2YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDVhMmVmZGItZWUxMi00MGJjLThj
MzItMjdhZTI2MjEwZmQzLzA1YTJlZmRiLWVlMTItNDBiYy04YzMyLTI3YWUyNjIx
MGZkMy5jcmwwHwYDVR0jBBgwFoAUVDunrlQ72BUJDezF5cGsktbF/4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNWEyZWZkYi1lZTEyLTQwYmMtOGMzMi0yN2Fl
MjYyMTBmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ex4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx2NaJD220XVBD4r5DGQWkjOrEZVTnJL0L93rbpAHDglT5mhWc3io7x
zFmfInMvCQO7GyOJhmqRTi9wQ5RMlp/C4zx1pN8lHxMUdnp4iTx2pFM8Yo0ImP6S
wu/q7j7tl/29HPQ0zNI8ruN0LuHEl5m4sU4cjUfOAYQ6ArbdMXYGa/68on+k+8nO
Zq3nLhXuSMMOnljcF7zxGcOFaWupo9j06ar2w7HcDS+CGrWH7KdF3x4IcoD8hZ+1
wHLssh3BVV67ADXe9YXq0x2ULHacJV6jSd7gT1yfSLVoWWTwoDCdUWG5wLo0Zjtz
ceCcV0W8nwhXWUHsSUgG++HHYe2vAc0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:47:31 2025 by rpki-client