Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/848dd6de-3510-3f76-a679-a6f8f8aca2de.roa
File:                     848dd6de-3510-3f76-a679-a6f8f8aca2de.roa (raw, json)
Hash identifier:          XpkctcsJUQZeOkz+hGPEShDMCSj3vfsG6GeP7O4EnzM=
Subject key identifier:   21:D8:91:AD:C4:C5:89:E0:FE:9D:72:43:5A:3F:97:DD:18:07:BA:50
Certificate issuer:       /CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
Certificate serial:       010D0C9F432858495C24398CBCB1605B4E7ACF80
Authority key identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/848dd6de-3510-3f76-a679-a6f8f8aca2de.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        74.80.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:39:8c:bc:b1:60:5b:4e:7a:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=137a9d61-6b4a-45cc-80b3-0b83664723d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:fe:9e:78:c2:1b:c0:ea:3a:35:e9:08:cf:
                    e7:5b:1b:a0:9b:8a:af:71:19:9a:f4:ab:80:c8:1f:
                    91:de:14:d2:6e:6c:cc:14:f7:fd:18:32:6d:03:f6:
                    82:a1:5a:4d:39:21:28:c9:74:91:0e:15:51:41:76:
                    ba:f8:00:1c:1c:d9:1e:27:11:79:65:06:1b:fc:a2:
                    d1:6f:23:d0:bc:a3:3a:49:ac:f6:bf:89:be:ee:47:
                    0e:c1:93:a8:3d:a1:58:3c:c9:0b:36:82:4a:9c:6f:
                    06:42:0e:16:ed:79:fd:33:88:f5:0d:30:4f:fc:65:
                    06:3b:09:d5:e5:45:53:e1:50:bd:bc:80:f8:c0:e9:
                    f4:e1:e4:43:a8:f5:b2:a4:f7:64:b4:3e:cc:a6:e3:
                    fc:06:64:f5:52:77:49:a4:b8:99:d7:0b:d1:8a:5b:
                    be:9e:43:87:7f:2d:f3:67:74:b9:f7:27:13:dc:ae:
                    39:fd:12:1b:ef:6a:15:4a:e2:86:20:c4:c7:56:12:
                    5e:36:b2:7f:3e:5a:07:36:27:db:db:be:b5:04:2d:
                    2b:28:40:2e:32:79:0d:33:39:f6:be:7b:af:7d:46:
                    5b:51:72:59:75:07:18:27:f6:a5:3f:02:5c:b7:cd:
                    37:87:a5:cd:eb:c4:d3:01:de:ac:a6:51:e5:c6:72:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:91:AD:C4:C5:89:E0:FE:9D:72:43:5A:3F:97:DD:18:07:BA:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/848dd6de-3510-3f76-a679-a6f8f8aca2de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:54:a0:dd:0e:5e:28:41:cb:33:bc:58:56:16:33:0c:cb:2b:
         9b:9c:8a:3a:6b:24:a6:90:ef:19:b1:0e:bf:23:fb:74:a9:d1:
         ff:51:a2:96:ff:38:25:76:d0:ba:c0:ac:b1:52:7a:7c:90:8e:
         cb:26:d5:00:9c:58:2d:ce:e5:98:22:47:c3:52:58:19:ec:fb:
         3e:3a:4d:c0:7c:3f:df:dc:52:7a:67:9e:11:dc:41:35:d0:28:
         59:02:55:5c:c1:f5:a0:92:fc:0e:93:cb:34:f5:7b:a7:f8:79:
         c9:f0:06:8d:fe:15:da:34:6a:96:a4:a6:2b:cf:03:4e:c1:52:
         02:5d:da:60:07:01:d6:25:b9:d0:e1:43:d3:d9:db:52:23:fc:
         9b:12:61:16:cc:09:07:6c:8f:10:82:40:52:68:d4:af:e5:d3:
         58:bb:ca:4a:d6:3d:d1:f8:56:85:d7:6a:29:ab:25:3d:a0:1c:
         9e:65:08:4d:59:1f:9a:de:51:b8:a3:1d:42:87:8c:cf:55:e6:
         88:d9:7e:57:3a:0e:e9:65:ad:9f:88:20:84:c3:46:aa:93:3a:
         c8:ee:2b:e6:0d:95:89:89:73:d6:85:64:62:3c:73:82:ba:de:
         14:69:1d:8e:50:fe:14:08:7b:9f:2a:3f:69:ef:73:5e:c1:4d:
         aa:c1:b1:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDmMvLFgW056z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhjNDI0YWItMjBjMy00YTUyLWJiYTItMWNjZGRlZWUy
ZTM0MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
MTM3YTlkNjEtNmI0YS00NWNjLTgwYjMtMGI4MzY2NDcyM2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3z+nnjCG8DqOjXpCM/nWxugm4qvcRma9KuA
yB+R3hTSbmzMFPf9GDJtA/aCoVpNOSEoyXSRDhVRQXa6+AAcHNkeJxF5ZQYb/KLR
byPQvKM6Saz2v4m+7kcOwZOoPaFYPMkLNoJKnG8GQg4W7Xn9M4j1DTBP/GUGOwnV
5UVT4VC9vID4wOn04eRDqPWypPdktD7MpuP8BmT1UndJpLiZ1wvRilu+nkOHfy3z
Z3S59ycT3K45/RIb72oVSuKGIMTHVhJeNrJ/PloHNifb2761BC0rKEAuMnkNMzn2
vnuvfUZbUXJZdQcYJ/alPwJct803h6XN68TTAd6splHlxnLQeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHYka3ExYng/p1yQ1o/l90YB7pQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOGM0
MjRhYi0yMGMzLTRhNTItYmJhMi0xY2NkZGVlZTJlMzQvODQ4ZGQ2ZGUtMzUxMC0z
Zjc2LWE2NzktYTZmOGY4YWNhMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDhjNDI0YWItMjBjMy00YTUyLWJi
YTItMWNjZGRlZWUyZTM0LzA4YzQyNGFiLTIwYzMtNGE1Mi1iYmEyLTFjY2RkZWVl
MmUzNC5jcmwwHwYDVR0jBBgwFoAUDMrCrBv4twTm0oU3t1UyS+fc6A0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOGM0MjRhYi0yMGMzLTRhNTItYmJhMi0xY2Nk
ZGVlZTJlMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlD3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALlUoN0OXihByzO8WFYWMwzLK5ucijprJKaQ7xmxDr8j+3Sp0f9Ropb/
OCV20LrArLFSenyQjssm1QCcWC3O5ZgiR8NSWBns+z46TcB8P9/cUnpnnhHcQTXQ
KFkCVVzB9aCS/A6TyzT1e6f4ecnwBo3+Fdo0apakpivPA07BUgJd2mAHAdYludDh
Q9PZ21Ij/JsSYRbMCQdsjxCCQFJo1K/l01i7ykrWPdH4VoXXaimrJT2gHJ5lCE1Z
H5reUbijHUKHjM9V5ojZflc6DullrZ+IIITDRqqTOsjuK+YNlYmJc9aFZGI8c4K6
3hRpHY5Q/hQIe58qP2nvc17BTarBsQQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:13 2025 by rpki-client