Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/6c4bf32a-6c94-3e69-917a-60537956b376.roa
File:                     6c4bf32a-6c94-3e69-917a-60537956b376.roa (raw, json)
Hash identifier:          KnkJaD/CsYjgU3+InPWovvIsMcc8/tkMqsZuCFC93+0=
Subject key identifier:   26:85:A2:3E:D2:6C:2A:CE:E5:75:EE:C6:B3:34:28:6F:70:22:38:2B
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F43285849AC4FD2088F44EC439887A500
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/6c4bf32a-6c94-3e69-917a-60537956b376.roa
Signing time:             Mon 28 Apr 2025 06:13:41 +0000
ROA not before:           Mon 28 Apr 2025 06:13:41 +0000
ROA not after:            Sun 27 Jul 2025 06:13:41 +0000
asID:                     397032
IP address blocks:        209.112.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ac:4f:d2:08:8f:44:ec:43:98:87:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Apr 28 06:13:41 2025 GMT
            Not After : Jul 27 06:13:41 2025 GMT
        Subject: CN=dd4fecc1-1c85-479e-b974-d210a0bd424d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:58:76:23:1f:be:6d:37:b1:fe:ab:8c:89:
                    06:13:e6:13:70:c9:df:a1:cc:41:76:26:5c:ed:6a:
                    09:44:79:ca:b9:f5:d4:17:57:7d:4a:80:ce:8f:77:
                    fd:c4:a8:e2:9e:94:be:28:a0:8d:23:cb:fd:d3:bf:
                    1e:5a:d6:a1:51:77:66:b9:24:cc:28:73:e4:06:ea:
                    6a:84:5e:07:d1:e9:d0:9c:c7:d1:e1:84:b0:fc:19:
                    a9:df:39:16:f9:35:0d:12:89:24:85:76:f0:8b:52:
                    ad:ea:0d:7c:be:61:2f:1d:cc:d6:2f:7e:8a:a7:f0:
                    11:37:3d:53:ba:d3:44:18:93:60:b8:e5:4b:9a:d1:
                    de:dd:27:2f:35:d7:b0:35:24:90:04:79:04:82:cd:
                    e9:b0:f1:1f:85:25:c6:df:70:a1:30:a6:8c:17:81:
                    92:43:ab:e0:9d:23:0a:b7:85:05:72:23:ba:2f:45:
                    72:07:9b:ed:0e:d8:92:97:c8:75:38:40:d8:f0:f3:
                    58:0f:3f:6a:4d:12:a6:00:33:9c:87:e7:76:df:25:
                    80:f7:e7:b7:e5:f3:11:27:92:a8:e4:42:74:13:77:
                    05:78:22:14:24:b7:5b:ca:12:2b:54:7c:19:62:11:
                    57:96:8c:f2:9e:ef:47:24:67:f0:09:14:d1:9a:6d:
                    45:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:85:A2:3E:D2:6C:2A:CE:E5:75:EE:C6:B3:34:28:6F:70:22:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/6c4bf32a-6c94-3e69-917a-60537956b376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:10:05:7f:4b:d3:14:a3:a0:cb:49:71:32:57:0b:54:ea:
         41:b4:b8:7d:21:4d:87:7a:32:67:cd:c7:03:f1:0c:7f:9e:28:
         64:87:fe:42:a5:be:d2:35:f6:82:39:48:20:1b:86:7c:17:ee:
         0d:a1:10:d5:d9:69:5c:da:d3:07:38:e2:53:f4:08:42:64:17:
         93:e0:88:1d:22:00:5b:bf:63:d6:5c:9b:72:3b:7d:aa:d9:ea:
         38:10:9f:f2:08:93:98:ff:ed:fe:bf:90:04:95:0f:f6:95:fd:
         27:65:74:c8:3e:32:5f:e4:e6:96:1c:34:7d:d1:2b:45:55:56:
         72:40:c6:98:43:95:1e:6b:8f:1f:37:22:9a:4d:18:dc:4b:27:
         03:9e:a3:8b:b1:26:25:c1:68:0e:1a:4b:77:fb:90:54:9b:16:
         f5:93:d5:8a:ac:fc:c4:e3:41:78:30:9c:99:12:d5:b1:17:e0:
         8d:a6:79:1f:eb:27:2e:ee:2b:68:cf:51:5c:d7:15:a2:72:9e:
         20:1b:9e:22:fe:fc:f3:ca:b1:00:db:1a:86:be:eb:5c:cf:c5:
         dd:2e:d8:34:08:07:00:b4:b5:0b:ec:00:86:d8:6b:1a:b4:39:
         9b:3a:0f:da:d4:1f:9e:d9:3a:14:02:62:65:7d:2b:bc:10:2c:
         6a:48:f9:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmsT9IIj0TsQ5iHpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI1MDQyODA2MTM0MVoXDTI1MDcyNzA2MTM0MVowLzEtMCsGA1UEAxMk
ZGQ0ZmVjYzEtMWM4NS00NzllLWI5NzQtZDIxMGEwYmQ0MjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky1YdiMfvm03sf6rjIkGE+YTcMnfocxBdiZc
7WoJRHnKufXUF1d9SoDOj3f9xKjinpS+KKCNI8v9078eWtahUXdmuSTMKHPkBupq
hF4H0enQnMfR4YSw/Bmp3zkW+TUNEokkhXbwi1Kt6g18vmEvHczWL36Kp/ARNz1T
utNEGJNguOVLmtHe3ScvNdewNSSQBHkEgs3psPEfhSXG33ChMKaMF4GSQ6vgnSMK
t4UFciO6L0VyB5vtDtiSl8h1OEDY8PNYDz9qTRKmADOch+d23yWA9+e35fMRJ5Ko
5EJ0E3cFeCIUJLdbyhIrVHwZYhFXlozynu9HJGfwCRTRmm1FCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCaFoj7SbCrO5XXuxrM0KG9wIjgrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNmM0YmYzMmEtNmM5NC0z
ZTY5LTkxN2EtNjA1Mzc5NTZiMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiqEAV/S9MUo6DLSXEyVwtU6kG0uH0hTYd6MmfNxwPxDH+eKGSH/kKl
vtI19oI5SCAbhnwX7g2hENXZaVza0wc44lP0CEJkF5PgiB0iAFu/Y9Zcm3I7farZ
6jgQn/IIk5j/7f6/kASVD/aV/SdldMg+Ml/k5pYcNH3RK0VVVnJAxphDlR5rjx83
IppNGNxLJwOeo4uxJiXBaA4aS3f7kFSbFvWT1Yqs/MTjQXgwnJkS1bEX4I2meR/r
Jy7uK2jPUVzXFaJyniAbniL+/PPKsQDbGoa+61zPxd0u2DQIBwC0tQvsAIbYaxq0
OZs6D9rUH57ZOhQCYmV9K7wQLGpI+ZU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:02:51 2025 by rpki-client