Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa
File:                     1fde58cb-1b82-3dee-9119-156933d5f187.roa (raw, json)
Hash identifier:          AAoWFEEj7e/8kahbfhd/x4m8RjvK1KYhgiiNK+DRJE8=
Subject key identifier:   EC:75:41:6D:E0:F8:1F:E3:EA:0E:C1:A9:07:AD:66:1F:06:BD:85:BF
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584973DEE44C95F5B54F32B17BC0
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        208.81.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e4:4c:95:f5:b5:4f:32:b1:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=1c585b4b-71a6-4293-a3ac-b0921f5a69b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:7c:55:d8:47:58:d1:79:b8:e2:63:60:27:
                    b5:fb:ca:21:f6:0e:67:78:33:90:63:2c:60:0f:61:
                    dd:95:41:2b:05:a3:e5:22:71:8d:6a:f6:36:c7:ce:
                    41:8e:62:57:08:e7:2a:44:6d:0f:d0:6f:ef:c3:48:
                    cf:2c:99:ea:23:ef:d7:d6:d2:45:9c:a0:03:46:29:
                    f4:29:75:8c:67:a0:b0:f7:fd:05:d6:77:03:bc:97:
                    d8:f9:e4:f2:b1:86:9e:22:8e:de:f8:2c:f5:69:33:
                    78:c1:cc:d6:d1:d2:d7:b3:14:03:f3:16:02:8a:f7:
                    3a:93:19:46:02:8f:29:cf:6a:76:95:d6:66:21:b7:
                    99:4d:8a:1d:00:9a:68:b8:ef:57:f9:b8:e6:6c:d9:
                    83:1c:e6:d7:03:7b:d6:75:25:7f:95:be:8b:64:5b:
                    7c:9a:7d:fd:a1:e9:7d:4d:79:39:cb:9b:20:96:5f:
                    75:ee:3f:a8:4b:77:40:39:a0:ff:64:65:a8:93:68:
                    e1:7f:0b:cc:e5:6c:96:df:93:c4:15:5b:aa:4f:eb:
                    51:e6:5b:a4:37:f2:6a:76:24:20:90:4f:37:04:6a:
                    ad:11:f7:ae:b7:13:22:e7:93:69:04:20:5a:9b:04:
                    b8:a1:09:10:09:d7:89:33:01:62:c9:c2:eb:39:d4:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:75:41:6D:E0:F8:1F:E3:EA:0E:C1:A9:07:AD:66:1F:06:BD:85:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:1d:fe:1a:08:f8:48:06:22:f1:ff:21:4b:40:b4:fc:fb:
         19:8b:89:dc:aa:47:a7:d8:40:3f:86:b3:0a:c3:3d:5b:8f:41:
         43:9d:27:21:b4:7e:19:6f:73:5f:e1:10:5e:42:0e:71:c4:83:
         85:0b:1a:5f:e5:1a:ef:d2:54:22:83:dc:c7:82:1b:6f:11:79:
         53:23:35:02:dc:56:02:27:b4:0f:cc:f6:4e:1a:54:b7:d5:14:
         ca:30:3b:01:fd:95:59:99:fe:1f:48:fe:03:e9:01:7b:b9:7e:
         9b:2e:b1:5d:54:2e:70:a7:86:2a:bd:7f:4d:2d:39:a6:82:88:
         45:df:f9:a0:33:d1:04:bb:ec:06:a9:d9:7f:69:9f:86:66:72:
         6c:64:81:8e:28:94:fb:e1:9d:14:68:71:a9:83:96:f1:b4:5c:
         1e:0c:8c:88:8c:aa:69:4e:89:b6:01:3b:42:7c:6e:f1:fb:83:
         26:94:2a:db:4a:96:c5:66:8f:e5:f6:3f:29:a0:94:13:4a:eb:
         df:b8:8c:68:ab:45:18:ff:64:95:bf:86:cf:7a:16:ad:44:96:
         97:81:7c:a9:a1:f4:5c:cb:02:0e:f7:2f:c4:4d:5d:d2:60:d1:
         15:63:96:70:a4:37:37:e1:a4:05:df:2c:5c:64:e7:94:cc:ce:
         77:2c:b6:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uRMlfW1TzKxe8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1
ZjNkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
MWM1ODViNGItNzFhNi00MjkzLWEzYWMtYjA5MjFmNWE2OWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9h8VdhHWNF5uOJjYCe1+8oh9g5neDOQYyxg
D2HdlUErBaPlInGNavY2x85BjmJXCOcqRG0P0G/vw0jPLJnqI+/X1tJFnKADRin0
KXWMZ6Cw9/0F1ncDvJfY+eTysYaeIo7e+Cz1aTN4wczW0dLXsxQD8xYCivc6kxlG
Ao8pz2p2ldZmIbeZTYodAJpouO9X+bjmbNmDHObXA3vWdSV/lb6LZFt8mn39oel9
TXk5y5sgll917j+oS3dAOaD/ZGWok2jhfwvM5WyW35PEFVuqT+tR5lukN/JqdiQg
kE83BGqtEfeutxMi55NpBCBamwS4oQkQCdeJMwFiycLrOdRp+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOx1QW3g+B/j6g7BqQetZh8GvYW/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky
NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMWZkZTU4Y2ItMWI4Mi0z
ZGVlLTkxMTktMTU2OTMzZDVmMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0
NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3
NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm
NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwLHf4aCPhIBiLx/yFLQLT8+xmLidyqR6fYQD+GswrDPVuPQUOdJyG0
fhlvc1/hEF5CDnHEg4ULGl/lGu/SVCKD3MeCG28ReVMjNQLcVgIntA/M9k4aVLfV
FMowOwH9lVmZ/h9I/gPpAXu5fpsusV1ULnCnhiq9f00tOaaCiEXf+aAz0QS77Aap
2X9pn4ZmcmxkgY4olPvhnRRocamDlvG0XB4MjIiMqmlOibYBO0J8bvH7gyaUKttK
lsVmj+X2PymglBNK69+4jGirRRj/ZJW/hs96Fq1ElpeBfKmh9FzLAg73L8RNXdJg
0RVjlnCkNzfhpAXfLFxk55TMzncstqU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:07 2025 by rpki-client