Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0168437-4a23-3fba-887d-28ed68fad64f.roa
File:                     f0168437-4a23-3fba-887d-28ed68fad64f.roa (raw, json)
Hash identifier:          5520Wz3pW/r0n/uIP8sRBWTvTMx0qrV1fW36/+zo/1g=
Subject key identifier:   CD:B2:5B:E7:EF:F1:98:2E:5E:5A:AA:30:98:9D:94:25:11:FF:49:2A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9D6F17DDBCF92A848B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0168437-4a23-3fba-887d-28ed68fad64f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        204.101.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:9d:6f:17:dd:bc:f9:2a:84:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0117466c-2e62-4b36-a5e1-6185610d431c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:44:36:36:06:5b:f0:6a:e4:8b:a9:61:d5:
                    69:c8:94:70:63:93:df:e4:2a:83:26:53:d3:73:86:
                    5e:d6:b8:72:39:f6:1c:0c:4e:35:3a:19:d7:34:83:
                    8e:02:4e:ae:a9:72:f6:2d:04:7e:64:e6:78:97:26:
                    e0:17:84:41:6a:55:64:92:4b:4c:79:b3:d1:c4:a6:
                    09:64:e4:df:7d:4e:ab:8f:f7:ad:e8:42:d7:0a:fb:
                    09:31:80:1b:b0:fb:33:81:bd:ed:31:48:b1:6d:ad:
                    ad:37:0c:2a:2e:a9:ad:52:b0:66:5e:24:2c:7b:db:
                    98:7a:dd:25:1e:a5:ce:7b:79:fe:1a:a4:34:86:b8:
                    fc:62:da:6a:08:58:0d:be:a8:2a:8b:ed:0a:b4:07:
                    a2:fe:d5:b1:d7:49:10:9f:fc:d7:9b:c2:10:c9:23:
                    af:b5:0a:ae:18:96:8c:41:c3:d6:4b:f8:e9:b3:1d:
                    d7:c3:7a:05:a2:28:72:d2:11:5f:72:bc:dc:d8:61:
                    27:1b:5a:de:1e:ef:20:60:d0:67:cf:a8:9a:bc:a6:
                    75:12:cb:41:87:92:7b:78:e6:6e:d6:96:42:71:52:
                    e3:bc:01:3e:ab:16:e7:66:b0:09:c7:bd:19:3f:e9:
                    96:b8:9b:60:60:30:9e:9a:72:4e:7d:54:83:a8:02:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:5B:E7:EF:F1:98:2E:5E:5A:AA:30:98:9D:94:25:11:FF:49:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f0168437-4a23-3fba-887d-28ed68fad64f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:a0:31:be:0a:23:c9:c9:a7:ac:49:c5:39:17:4a:a1:a8:
         16:a2:98:03:30:16:ed:92:00:4e:d7:8d:e7:56:af:b9:9e:f5:
         d1:f8:3e:d3:b0:ff:c6:6b:e8:f7:aa:17:c7:97:65:ce:77:1b:
         54:77:38:19:2a:a4:86:16:b7:f6:51:e8:6a:b3:a7:e9:b6:1a:
         96:ab:78:fb:31:1d:d4:40:33:5e:11:40:79:7e:13:48:fd:82:
         27:a5:f0:9d:7f:e5:ce:86:56:94:de:ff:c1:ab:ee:a6:06:9a:
         e0:59:01:01:27:43:28:cd:8e:bc:3e:f0:2f:76:c1:86:19:f9:
         e1:53:de:ba:10:55:36:e7:91:cd:70:7b:d9:4e:8a:f2:c9:59:
         81:2e:99:ce:a9:cc:8d:f4:2f:3a:68:db:6f:1e:28:6a:0c:5a:
         29:4a:78:c3:3d:97:9a:e9:02:d0:65:e0:43:74:25:0b:ca:2e:
         c7:7e:4a:7d:de:94:cc:3a:22:46:93:44:0d:0c:2c:25:49:17:
         f0:d8:db:f5:08:96:79:32:90:21:c2:de:01:76:fe:cc:5f:ea:
         33:af:b7:92:7b:dc:7a:09:0a:21:01:54:39:29:6f:88:9e:c5:
         bc:8d:8f:54:99:04:31:ae:f3:e7:e5:46:78:30:b7:ea:3b:70:
         87:93:56:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2p1vF928+SqEi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MDExNzQ2NmMtMmU2Mi00YjM2LWE1ZTEtNjE4NTYxMGQ0MzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipNENjYGW/Bq5IupYdVpyJRwY5Pf5CqDJlPT
c4Ze1rhyOfYcDE41OhnXNIOOAk6uqXL2LQR+ZOZ4lybgF4RBalVkkktMebPRxKYJ
ZOTffU6rj/et6ELXCvsJMYAbsPszgb3tMUixba2tNwwqLqmtUrBmXiQse9uYet0l
HqXOe3n+GqQ0hrj8YtpqCFgNvqgqi+0KtAei/tWx10kQn/zXm8IQySOvtQquGJaM
QcPWS/jpsx3Xw3oFoihy0hFfcrzc2GEnG1reHu8gYNBnz6iavKZ1EstBh5J7eOZu
1pZCcVLjvAE+qxbnZrAJx70ZP+mWuJtgYDCemnJOfVSDqAILsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2yW+fv8ZguXlqqMJidlCUR/0kqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjAxNjg0MzctNGEyMy0z
ZmJhLTg4N2QtMjhlZDY4ZmFkNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA36oDG+CiPJyaesScU5F0qhqBaimAMwFu2SAE7XjedWr7me9dH4PtOw
/8Zr6PeqF8eXZc53G1R3OBkqpIYWt/ZR6Gqzp+m2GparePsxHdRAM14RQHl+E0j9
giel8J1/5c6GVpTe/8Gr7qYGmuBZAQEnQyjNjrw+8C92wYYZ+eFT3roQVTbnkc1w
e9lOivLJWYEumc6pzI30Lzpo228eKGoMWilKeMM9l5rpAtBl4EN0JQvKLsd+Sn3e
lMw6IkaTRA0MLCVJF/DY2/UIlnkykCHC3gF2/sxf6jOvt5J73HoJCiEBVDkpb4ie
xbyNj1SZBDGu8+flRngwt+o7cIeTVnw=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:33 2025 by rpki-client