Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d981adfa-9f6c-3257-b035-07f610090697.roa
File:                     d981adfa-9f6c-3257-b035-07f610090697.roa (raw, json)
Hash identifier:          iZuh9MRW9a/dc+uVXdOz7o9HRB9O+bbcqaPbJB4iK+Q=
Subject key identifier:   05:FA:6D:95:A4:46:19:73:4A:66:4F:1C:C7:D7:64:45:1C:13:18:B4
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F432858499DBF3C99D7A8DC4E34B36030
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d981adfa-9f6c-3257-b035-07f610090697.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     26955
IP address blocks:        207.108.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:3c:99:d7:a8:dc:4e:34:b3:60:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=e0dc1ec8-d408-49fe-8574-81ce41af5899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:ef:9b:72:34:af:eb:f7:43:78:6b:dd:4c:
                    d2:e8:bc:bc:12:49:29:c9:c9:2e:63:07:19:b4:62:
                    20:ea:d4:eb:dc:46:fc:2d:36:51:dd:4a:1c:25:83:
                    0f:b0:ef:ff:5a:7d:3f:e2:65:d6:93:b7:a9:02:61:
                    f9:b1:3d:f7:ad:06:e1:74:5e:6f:64:87:38:09:27:
                    d4:1c:5a:4b:b9:c3:30:c8:dc:d9:20:82:4b:b7:da:
                    49:19:a0:f0:cd:d9:3c:74:22:44:36:08:65:8e:3a:
                    3d:1c:15:08:d0:57:71:ce:50:e9:7e:54:e8:f9:95:
                    d9:df:5a:5e:8d:98:c3:d5:5a:1b:56:73:c7:df:19:
                    10:f3:2f:7c:e5:6a:43:f1:40:6d:79:76:47:2b:f3:
                    93:25:45:82:d2:77:bf:5b:28:67:c6:84:26:a9:b2:
                    07:ab:57:15:e1:3c:d6:1c:67:d3:62:0d:44:58:62:
                    99:14:f3:28:5a:98:d3:20:4a:c7:98:99:67:ca:db:
                    28:8d:b9:71:28:ad:ea:5f:e4:5c:c3:a3:f9:b8:64:
                    b1:f0:76:b7:c4:32:87:13:40:5a:ef:e4:70:4a:ce:
                    c5:6d:24:1a:27:36:b7:ad:b3:38:5c:56:b5:42:5e:
                    aa:3d:8f:be:43:1b:8f:6f:52:ce:db:70:7d:e4:7b:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FA:6D:95:A4:46:19:73:4A:66:4F:1C:C7:D7:64:45:1C:13:18:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d981adfa-9f6c-3257-b035-07f610090697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.108.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:43:71:09:df:c4:cf:17:bb:15:5c:9e:75:16:43:c4:b9:
         76:cc:9f:8b:27:6f:3d:2b:ad:b5:64:9f:0f:4c:ff:26:58:dd:
         b4:87:b7:c5:0f:1b:7c:60:98:3d:92:e0:0c:eb:0c:06:68:36:
         6c:1e:67:20:d7:69:61:f8:eb:21:fa:1b:8a:1d:47:dd:6e:ee:
         0b:b5:8e:33:23:65:1c:ac:72:31:a2:c0:2c:45:8a:02:89:37:
         11:7d:87:c2:cb:bf:0b:f6:14:70:02:6b:90:c6:3f:6c:6b:6a:
         55:44:9c:52:ad:8f:08:45:9c:31:ea:04:84:6a:b0:9e:f4:0e:
         fb:4f:2a:e3:ad:83:17:d1:a0:9c:b3:6c:40:50:9c:2b:85:a8:
         24:3f:51:de:a3:08:08:59:63:f7:f6:9e:e0:13:2c:38:52:c9:
         dc:8e:0c:01:7d:a7:10:90:f7:60:d7:b2:93:5a:f4:c2:f7:02:
         3c:e2:2d:85:ef:1e:f6:43:e5:98:20:80:51:18:af:cb:49:f5:
         7a:60:de:fa:b7:79:46:f9:dd:83:a0:af:4c:d1:51:bf:c6:f4:
         0d:9c:2c:22:b0:9a:c0:8b:03:8c:f3:7d:6f:ec:7b:fb:d3:55:
         2a:2f:6c:0b:bb:72:90:6f:9d:54:9d:f5:d5:8d:85:65:d3:ca:
         7f:da:fd:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzyZ16jcTjSzYDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
ZTBkYzFlYzgtZDQwOC00OWZlLTg1NzQtODFjZTQxYWY1ODk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUnvm3I0r+v3Q3hr3UzS6Ly8EkkpyckuYwcZ
tGIg6tTr3Eb8LTZR3UocJYMPsO//Wn0/4mXWk7epAmH5sT33rQbhdF5vZIc4CSfU
HFpLucMwyNzZIIJLt9pJGaDwzdk8dCJENghljjo9HBUI0FdxzlDpflTo+ZXZ31pe
jZjD1VobVnPH3xkQ8y985WpD8UBteXZHK/OTJUWC0ne/WyhnxoQmqbIHq1cV4TzW
HGfTYg1EWGKZFPMoWpjTIErHmJlnytsojblxKK3qX+Rcw6P5uGSx8Ha3xDKHE0Ba
7+RwSs7FbSQaJza3rbM4XFa1Ql6qPY++QxuPb1LO23B95HvCuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAX6bZWkRhlzSmZPHMfXZEUcExi0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZDk4MWFkZmEtOWY2Yy0z
MjU3LWIwMzUtMDdmNjEwMDkwNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2wrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABc6Q3EJ38TPF7sVXJ51FkPEuXbMn4snbz0rrbVknw9M/yZY3bSHt8UP
G3xgmD2S4AzrDAZoNmweZyDXaWH46yH6G4odR91u7gu1jjMjZRyscjGiwCxFigKJ
NxF9h8LLvwv2FHACa5DGP2xralVEnFKtjwhFnDHqBIRqsJ70DvtPKuOtgxfRoJyz
bEBQnCuFqCQ/Ud6jCAhZY/f2nuATLDhSydyODAF9pxCQ92DXspNa9ML3AjziLYXv
HvZD5ZgggFEYr8tJ9Xpg3vq3eUb53YOgr0zRUb/G9A2cLCKwmsCLA4zzfW/se/vT
VSovbAu7cpBvnVSd9dWNhWXTyn/a/YQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:32:48 2025 by rpki-client