Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa
File:                     9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (raw, json)
Hash identifier:          liIcFqmwZ5bJlgEF8PinSJRnTxiVM0K1cE5bVB+mKGQ=
Subject key identifier:   48:1C:5F:7B:2C:C3:68:E9:AB:A2:34:85:53:18:11:59:DC:3F:B2:1B
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F432858497DA4711D828143B38647E400
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     26918
IP address blocks:        204.77.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:71:1d:82:81:43:b3:86:47:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=15c34366-0d3b-40c1-8944-de70e0c71c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:fc:94:a4:4c:ca:b3:3a:a7:c3:54:6b:3c:
                    a0:d2:9f:6a:17:39:2a:f2:58:2b:42:e8:2e:5f:0f:
                    ed:21:6e:9d:f7:4c:0e:fc:df:42:7c:7a:a8:37:6f:
                    87:fb:37:c7:6a:ba:f2:5c:1f:e3:03:7e:96:d4:eb:
                    9e:9b:6b:43:3d:d7:b4:d3:24:f9:55:c3:c2:f2:8a:
                    db:86:cd:c4:a8:d6:f3:9a:aa:2c:6b:cb:86:9b:cc:
                    65:90:88:d9:3c:8e:0e:04:06:69:50:b5:8c:4b:47:
                    9e:6d:16:cf:5a:f8:1f:9c:08:b4:32:32:84:c2:be:
                    66:6b:d1:15:27:af:53:c4:12:d3:9e:70:a9:4d:de:
                    cc:82:1a:7e:1f:91:89:3a:52:67:21:71:a3:ea:d6:
                    b7:19:7a:f0:b6:91:24:b1:d3:d8:84:56:e9:d1:66:
                    5f:64:54:9b:88:10:c8:ed:a0:ce:21:3e:ea:64:2f:
                    8c:5c:3b:f3:80:4c:6f:16:98:5f:e2:42:70:bc:a3:
                    a8:23:1f:c1:60:a1:9f:69:16:a5:99:ea:d5:b3:80:
                    d3:f2:43:04:9b:68:09:e9:32:15:56:98:12:2f:52:
                    0d:83:50:51:6a:f9:ce:79:40:48:ad:30:79:aa:0a:
                    26:8f:94:2e:91:97:a8:79:76:69:c4:19:db:26:0d:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:5F:7B:2C:C3:68:E9:AB:A2:34:85:53:18:11:59:DC:3F:B2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:10:26:48:26:82:c3:88:cd:8b:52:fd:31:f8:09:6b:96:83:
         40:92:eb:9e:0e:42:dd:13:99:b9:5b:43:38:b4:86:f1:cc:8f:
         8d:30:be:0d:0d:08:a1:96:8c:69:20:88:eb:d9:3a:7d:81:db:
         52:d1:67:00:75:d6:c2:9b:a2:39:f8:ab:61:cb:53:0f:8b:ca:
         07:b9:77:40:2c:ff:95:56:a4:2f:94:3d:2d:c4:60:03:ca:4c:
         1a:e3:57:95:93:c5:d3:d4:de:e7:f5:87:57:71:a9:46:ab:69:
         a8:c0:4a:06:c4:ea:cf:f9:0e:3b:5f:7d:59:fc:a4:b2:24:1b:
         64:8d:77:ba:95:9a:6f:df:10:e8:86:9d:18:4f:44:8c:bd:71:
         de:90:d0:0b:21:2f:8b:6e:d6:3a:b0:80:c3:5c:ab:56:f7:de:
         44:b6:57:a1:c5:08:86:65:1a:d2:de:87:ee:96:fc:2a:7a:26:
         1b:5a:be:c3:3a:b1:cd:dd:5c:65:57:1a:aa:8b:e5:c4:0f:eb:
         eb:cd:21:c1:58:06:44:37:78:aa:08:2e:33:07:b5:68:b2:06:
         60:97:57:f4:59:ac:96:3c:3c:2c:f6:35:9c:68:79:51:ec:14:
         fc:b4:44:62:fd:6d:fc:cc:53:7b:86:d9:64:2a:f9:b2:ea:a8:
         58:96:c7:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHEdgoFDs4ZH5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0
M2U4MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MTVjMzQzNjYtMGQzYi00MGMxLTg5NDQtZGU3MGUwYzcxYzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm678lKRMyrM6p8NUazyg0p9qFzkq8lgrQugu
Xw/tIW6d90wO/N9CfHqoN2+H+zfHarryXB/jA36W1Ouem2tDPde00yT5VcPC8orb
hs3EqNbzmqosa8uGm8xlkIjZPI4OBAZpULWMS0eebRbPWvgfnAi0MjKEwr5ma9EV
J69TxBLTnnCpTd7Mghp+H5GJOlJnIXGj6ta3GXrwtpEksdPYhFbp0WZfZFSbiBDI
7aDOIT7qZC+MXDvzgExvFphf4kJwvKOoIx/BYKGfaRalmerVs4DT8kMEm2gJ6TIV
VpgSL1INg1BRavnOeUBIrTB5qgomj5QukZeoeXZpxBnbJg2N3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgcX3ssw2jpq6I0hVMYEVncP7IbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy
Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvOWMzZmFiNzQtMGIwZC0z
MWNlLTllNjAtNDgzODJkZGFiMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx
YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3
NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi
Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcQJkgmgsOIzYtS/TH4CWuWg0CS654OQt0TmblbQzi0hvHMj40wvg0N
CKGWjGkgiOvZOn2B21LRZwB11sKbojn4q2HLUw+Lyge5d0As/5VWpC+UPS3EYAPK
TBrjV5WTxdPU3uf1h1dxqUaraajASgbE6s/5DjtffVn8pLIkG2SNd7qVmm/fEOiG
nRhPRIy9cd6Q0AshL4tu1jqwgMNcq1b33kS2V6HFCIZlGtLeh+6W/Cp6JhtavsM6
sc3dXGVXGqqL5cQP6+vNIcFYBkQ3eKoILjMHtWiyBmCXV/RZrJY8PCz2NZxoeVHs
FPy0RGL9bfzMU3uG2WQq+bLqqFiWxwM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:12:52 2025 by rpki-client