Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b0050b3-3fa8-39e1-bb1b-9a69ad0e657a.roa
File:                     5b0050b3-3fa8-39e1-bb1b-9a69ad0e657a.roa (raw, json)
Hash identifier:          7MYbMS9t+dv+xj/gt1B6eDZ1CKpyaigHy7l2j7IqemY=
Subject key identifier:   D0:23:DB:60:A5:A9:15:23:BC:13:AE:80:B0:0E:8D:C4:2B:83:A3:F9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9F5FA904D7F4CF0DCF40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b0050b3-3fa8-39e1-bb1b-9a69ad0e657a.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     25946
IP address blocks:        204.101.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:9f:5f:a9:04:d7:f4:cf:0d:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1dab8927-bc38-48be-8e64-60dd989b19f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:3c:a9:7c:e3:9d:25:ca:60:05:18:f2:a4:
                    ff:ce:4d:0e:ee:eb:4d:55:ed:b5:e1:16:44:65:4c:
                    1b:ff:d1:65:e1:f5:da:a7:33:dd:7c:72:4b:00:d1:
                    2e:5f:97:21:16:a0:21:52:de:f6:ce:b2:f6:64:ce:
                    24:82:25:29:d2:15:1e:ff:be:4d:aa:03:fa:f3:74:
                    9d:ca:07:e4:eb:75:2b:13:0d:e6:91:3d:94:cc:6f:
                    ad:a6:43:2a:2a:22:13:83:a5:61:5b:34:9a:1a:29:
                    d8:9f:05:8c:1a:5f:4f:ec:a8:eb:38:b5:e8:4b:f8:
                    ed:bb:8f:1a:6c:7d:a0:e5:58:21:c7:2a:5e:40:60:
                    8a:6c:27:8d:70:1e:07:c9:06:8f:e9:1f:65:02:c9:
                    3d:24:e6:f8:05:e7:63:21:25:3c:fc:1a:3c:4b:b2:
                    79:c2:1d:dd:f3:2a:7f:47:c4:a6:2b:9f:4f:c3:79:
                    b2:38:76:7c:10:e1:08:ba:82:e0:90:95:d5:ea:b4:
                    65:93:fd:72:09:9e:91:65:e2:db:34:c9:d1:53:d6:
                    be:8f:dd:76:ac:c9:07:70:83:f7:64:92:09:20:76:
                    4e:1c:df:06:d0:6c:ac:1e:29:b3:25:c6:f5:a4:58:
                    d8:ad:87:70:ec:f1:19:60:f0:33:d8:30:3c:68:f1:
                    fc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:23:DB:60:A5:A9:15:23:BC:13:AE:80:B0:0E:8D:C4:2B:83:A3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5b0050b3-3fa8-39e1-bb1b-9a69ad0e657a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b7:b6:77:71:4e:bb:de:fc:26:79:72:a1:77:b6:2e:5b:1f:
         be:1b:04:11:0e:05:74:6b:5d:bd:dd:b0:e3:f1:b4:3d:bc:73:
         b0:83:c7:a4:6f:d1:f8:44:3f:27:97:7c:68:da:24:d0:9f:08:
         74:f3:58:a0:48:93:92:85:a2:85:de:51:b0:29:5f:c3:84:d1:
         89:7e:f9:50:b4:16:4a:21:51:68:02:c4:bf:3f:1b:79:ed:5b:
         e0:b8:cd:91:f6:67:4d:b6:20:a6:a7:cf:4e:3d:6b:b1:81:73:
         40:7c:1d:66:f9:b7:79:53:44:59:af:2c:6d:c1:17:54:d8:31:
         d9:02:ec:54:6a:e3:88:74:9a:66:e5:c1:ea:8b:22:c7:dc:a7:
         30:91:65:3c:c2:e5:3c:2b:ce:a1:1c:78:57:b8:81:f0:66:b5:
         e7:91:de:5b:f6:9e:2c:42:e5:22:33:b2:16:df:e1:12:13:ea:
         85:dd:77:d6:51:d6:14:d2:c0:ac:a8:d3:ae:f1:68:ae:20:e6:
         81:13:32:c8:7a:0c:c8:8a:25:37:c9:e1:9e:65:26:bd:06:d1:
         52:cd:1a:f7:38:31:2f:7b:e7:bc:bb:a0:90:d7:12:49:18:66:
         d9:d2:7e:f1:a9:f1:8f:4e:f7:be:76:cf:66:74:78:91:07:43:
         f2:64:b4:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2p9fqQTX9M8Nz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MWRhYjg5MjctYmMzOC00OGJlLThlNjQtNjBkZDk4OWIxOWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzI8qXzjnSXKYAUY8qT/zk0O7utNVe214RZE
ZUwb/9Fl4fXapzPdfHJLANEuX5chFqAhUt72zrL2ZM4kgiUp0hUe/75NqgP683Sd
ygfk63UrEw3mkT2UzG+tpkMqKiITg6VhWzSaGinYnwWMGl9P7KjrOLXoS/jtu48a
bH2g5VghxypeQGCKbCeNcB4HyQaP6R9lAsk9JOb4BedjISU8/Bo8S7J5wh3d8yp/
R8SmK59Pw3myOHZ8EOEIuoLgkJXV6rRlk/1yCZ6RZeLbNMnRU9a+j912rMkHcIP3
ZJIJIHZOHN8G0GysHimzJcb1pFjYrYdw7PEZYPAz2DA8aPH8HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAj22ClqRUjvBOugLAOjcQrg6P5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNWIwMDUwYjMtM2ZhOC0z
OWUxLWJiMWItOWE2OWFkMGU2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe3tndxTrve/CZ5cqF3ti5bH74bBBEOBXRrXb3dsOPxtD28c7CDx6Rv
0fhEPyeXfGjaJNCfCHTzWKBIk5KFooXeUbApX8OE0Yl++VC0FkohUWgCxL8/G3nt
W+C4zZH2Z022IKanz049a7GBc0B8HWb5t3lTRFmvLG3BF1TYMdkC7FRq44h0mmbl
weqLIsfcpzCRZTzC5TwrzqEceFe4gfBmteeR3lv2nixC5SIzshbf4RIT6oXdd9ZR
1hTSwKyo067xaK4g5oETMsh6DMiKJTfJ4Z5lJr0G0VLNGvc4MS9757y7oJDXEkkY
ZtnSfvGp8Y9O9752z2Z0eJEHQ/JktPE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:48 2025 by rpki-client