Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e1c8817-1d38-37ce-a66c-9c910d939186.roa
File:                     1e1c8817-1d38-37ce-a66c-9c910d939186.roa (raw, json)
Hash identifier:          70+nIB8LqxeDXfQ4Ek9WTGdMvnUdKooNvvCt/Hi/UsY=
Subject key identifier:   A2:68:0A:C0:AF:6A:E4:23:1F:49:C9:5C:F7:6B:6D:01:A1:47:D6:2C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA09A9E759C49ED451340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e1c8817-1d38-37ce-a66c-9c910d939186.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     46872
IP address blocks:        204.101.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a0:9a:9e:75:9c:49:ed:45:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6d424760-21d5-42bc-aa8f-eccea6fa22ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:3a:65:56:00:73:68:f2:e0:e6:17:2f:63:
                    91:00:d1:38:5c:23:e9:a3:14:84:c3:23:f4:1b:3a:
                    3c:c3:3d:36:ee:6a:35:58:28:56:55:93:fd:d6:c0:
                    e9:e9:a9:42:8c:7f:86:d0:04:1b:41:f3:21:b9:af:
                    af:85:74:2b:25:2f:3f:4c:4d:7b:de:7f:6d:82:96:
                    45:2e:fa:90:5a:5e:4a:c1:20:af:11:e8:90:4c:75:
                    3d:6f:87:80:a3:f5:86:6d:f3:ff:e9:63:80:95:a4:
                    db:b3:ab:46:b4:4f:5a:bc:e8:c8:b2:84:c1:11:db:
                    6f:41:50:6b:ca:63:00:bb:f2:eb:34:dc:d6:4c:13:
                    97:3c:a2:f6:75:95:85:c7:60:63:be:2c:74:d9:ef:
                    7f:a8:18:0f:ed:ce:18:d1:bd:b2:63:9f:23:65:b7:
                    77:83:f2:70:fd:62:16:63:8c:09:6b:8b:92:ba:84:
                    13:21:f1:49:14:8b:93:5d:3d:6f:81:a7:99:8f:9d:
                    eb:b1:54:07:5d:be:4a:71:e8:0a:48:55:e1:4d:e7:
                    2d:76:ca:85:b7:50:1e:cd:c8:aa:b9:e1:96:79:10:
                    ff:05:7b:02:89:b1:18:1e:82:1c:2a:56:34:3e:8e:
                    f3:1e:0a:74:df:e7:e6:80:44:4c:04:2a:24:40:0d:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:68:0A:C0:AF:6A:E4:23:1F:49:C9:5C:F7:6B:6D:01:A1:47:D6:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1e1c8817-1d38-37ce-a66c-9c910d939186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:da:11:85:73:9b:09:ed:51:07:6e:24:85:6a:21:73:e3:96:
         bb:07:93:4a:84:89:83:f3:80:2b:cf:dc:b4:43:7f:13:fe:87:
         e7:e2:13:f2:20:b0:87:71:06:cd:84:0c:ad:b0:a9:c4:8c:a9:
         58:c6:e7:df:f7:ed:45:6f:b5:40:74:f3:76:ae:7e:79:e1:49:
         45:52:77:61:e9:e0:d6:07:70:21:e9:e8:af:d1:1d:bc:43:31:
         11:e4:26:9e:5a:da:d9:8e:d7:d1:55:fa:d1:02:0f:5d:a6:f5:
         d6:ae:d2:42:72:ef:75:9a:ca:c3:86:e9:6a:23:49:6a:8b:51:
         e1:52:f5:5d:93:57:e9:55:9c:59:9c:5d:a7:74:d1:f6:ca:6d:
         d1:51:ae:fe:ba:96:57:af:c1:3e:d4:51:68:92:31:74:95:bd:
         49:92:0e:53:4f:ec:ab:0e:c4:d5:b1:88:91:05:dc:d5:8e:39:
         7e:a0:b4:40:67:6d:d7:5c:31:d4:15:d5:d1:8c:28:0b:74:50:
         94:4a:36:07:20:c6:21:f9:09:0b:06:7a:5e:df:3c:b0:4f:6e:
         2a:51:55:ce:9f:51:81:3a:f1:75:19:c1:80:3b:69:c8:ee:67:
         dd:23:82:70:54:67:dc:12:4b:89:5f:d5:80:0e:a2:a7:dd:d6:
         60:ce:b9:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2qCannWcSe1FE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NmQ0MjQ3NjAtMjFkNS00MmJjLWFhOGYtZWNjZWE2ZmEyMmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSU6ZVYAc2jy4OYXL2ORANE4XCPpoxSEwyP0
Gzo8wz027mo1WChWVZP91sDp6alCjH+G0AQbQfMhua+vhXQrJS8/TE173n9tgpZF
LvqQWl5KwSCvEeiQTHU9b4eAo/WGbfP/6WOAlaTbs6tGtE9avOjIsoTBEdtvQVBr
ymMAu/LrNNzWTBOXPKL2dZWFx2Bjvix02e9/qBgP7c4Y0b2yY58jZbd3g/Jw/WIW
Y4wJa4uSuoQTIfFJFIuTXT1vgaeZj53rsVQHXb5KcegKSFXhTectdsqFt1Aezciq
ueGWeRD/BXsCibEYHoIcKlY0Po7zHgp03+fmgERMBCokQA3m/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJoCsCvauQjH0nJXPdrbQGhR9YsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWUxYzg4MTctMWQzOC0z
N2NlLWE2NmMtOWM5MTBkOTM5MTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGXuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfaEYVzmwntUQduJIVqIXPjlrsHk0qEiYPzgCvP3LRDfxP+h+fiE/Ig
sIdxBs2EDK2wqcSMqVjG59/37UVvtUB083aufnnhSUVSd2Hp4NYHcCHp6K/RHbxD
MRHkJp5a2tmO19FV+tECD12m9dau0kJy73WaysOG6WojSWqLUeFS9V2TV+lVnFmc
Xad00fbKbdFRrv66llevwT7UUWiSMXSVvUmSDlNP7KsOxNWxiJEF3NWOOX6gtEBn
bddcMdQV1dGMKAt0UJRKNgcgxiH5CQsGel7fPLBPbipRVc6fUYE68XUZwYA7acju
Z90jgnBUZ9wSS4lf1YAOoqfd1mDOufk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:46 2025 by rpki-client