Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa
File:                     fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa (raw, json)
Hash identifier:          ttTLx3xuN/FLT4rLLm2bh8fVtgqkokaaIKlFED9kEMg=
Subject key identifier:   A9:8C:40:54:5D:A9:DB:1D:2B:59:AE:74:88:8F:C0:03:43:C7:CD:0B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849EE64F69BAF26ECD12B353A60
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa
Signing time:             Wed 21 May 2025 22:19:38 +0000
ROA not before:           Wed 21 May 2025 22:19:38 +0000
ROA not after:            Tue 19 Aug 2025 22:19:38 +0000
asID:                     3356
IP address blocks:        4.42.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:64:f6:9b:af:26:ec:d1:2b:35:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 21 22:19:38 2025 GMT
            Not After : Aug 19 22:19:38 2025 GMT
        Subject: CN=4774e616-65cb-47af-ab08-b51576a7b129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:69:40:73:1f:0c:c4:50:d6:e0:95:3c:49:
                    d7:35:2b:ba:40:bb:83:11:6e:b4:a9:84:99:1e:78:
                    b3:2c:07:37:a0:36:ef:9f:70:61:b9:3f:45:0e:37:
                    bf:8b:8f:f5:38:88:d3:0e:09:a1:c7:38:8f:dd:3d:
                    e1:a8:c6:69:3e:c4:5b:b3:83:3e:60:ff:20:cb:d0:
                    f3:02:68:eb:e6:4c:29:4a:4a:10:67:02:e9:04:18:
                    3a:b4:1a:16:75:da:83:52:b3:75:a9:2d:e7:06:b4:
                    3f:14:dc:62:ab:74:de:73:70:de:9d:e1:ee:c6:13:
                    c9:7d:90:14:17:93:ee:e3:ae:65:75:24:06:e8:04:
                    af:a1:15:79:f2:ad:1b:b5:90:9a:8f:4a:76:d2:87:
                    91:de:b9:1d:29:6b:e4:ad:d9:5a:08:a5:5c:3a:17:
                    e2:3b:e4:ef:64:74:cd:24:6a:64:81:1e:ea:63:4b:
                    2f:97:47:c1:55:db:81:0d:f3:f1:91:0c:a5:35:7f:
                    68:be:d1:3f:76:07:ff:68:c2:33:2d:d6:68:9e:5f:
                    fd:70:34:66:46:cc:bf:47:12:32:b9:4f:26:10:73:
                    87:80:84:14:1e:0f:fd:6f:cd:46:d9:c4:e8:8e:df:
                    cb:fc:bf:d7:d6:17:1f:43:9c:6d:77:69:5f:61:c4:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:40:54:5D:A9:DB:1D:2B:59:AE:74:88:8F:C0:03:43:C7:CD:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fcf6ea16-0487-380e-af6b-3afdecde9bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  4.42.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e1:33:e3:1e:cf:e9:ce:be:ca:00:47:8d:45:cc:d7:6e:67:
         b8:82:dc:7e:c3:09:cf:a6:b1:59:db:6a:0c:23:34:42:e2:4b:
         1a:7d:17:e0:b6:83:1f:12:ea:f0:2d:1c:be:06:5f:22:61:41:
         6e:ce:0e:21:f0:c6:35:cb:cb:5b:bc:ea:57:f1:3b:74:20:b9:
         53:f8:a6:8f:26:03:8c:b5:b9:88:b7:f1:9d:55:d0:63:da:a3:
         14:65:74:0d:94:75:c1:6e:5f:bf:4e:b5:b5:11:77:55:12:aa:
         13:da:cc:7c:ae:4a:7e:1a:d9:83:4f:5d:fc:1f:77:dd:ca:8a:
         eb:92:80:92:59:a8:8d:98:68:64:91:81:ee:14:fd:2b:3c:28:
         51:66:54:bc:f7:be:6f:30:17:29:50:64:fd:c2:05:4e:11:a8:
         a8:cc:4e:fb:66:92:2a:70:86:46:28:4a:18:22:58:c5:77:e6:
         f9:be:04:11:d6:f3:96:ee:87:76:84:be:3f:8a:ca:d2:62:2f:
         81:16:fd:7a:97:43:79:9b:ed:a6:bb:3a:8d:54:a2:71:3c:7c:
         63:34:18:2b:6d:0c:ff:5d:84:dc:b7:87:cd:d8:4d:17:68:5f:
         c3:a5:29:0b:67:ce:2b:f3:cd:e2:69:b9:b1:06:a8:3c:6a:2d:
         5f:b6:88:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnuZPabrybs0Ss1OmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDUyMTIyMTkzOFoXDTI1MDgxOTIyMTkzOFowLzEtMCsGA1UEAxMk
NDc3NGU2MTYtNjVjYi00N2FmLWFiMDgtYjUxNTc2YTdiMTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVBpQHMfDMRQ1uCVPEnXNSu6QLuDEW60qYSZ
HnizLAc3oDbvn3BhuT9FDje/i4/1OIjTDgmhxziP3T3hqMZpPsRbs4M+YP8gy9Dz
Amjr5kwpSkoQZwLpBBg6tBoWddqDUrN1qS3nBrQ/FNxiq3Tec3DeneHuxhPJfZAU
F5Pu465ldSQG6ASvoRV58q0btZCaj0p20oeR3rkdKWvkrdlaCKVcOhfiO+TvZHTN
JGpkgR7qY0svl0fBVduBDfPxkQylNX9ovtE/dgf/aMIzLdZonl/9cDRmRsy/RxIy
uU8mEHOHgIQUHg/9b81G2cTojt/L/L/X1hcfQ5xtd2lfYcR88wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKmMQFRdqdsdK1mudIiPwANDx80LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZmNmNmVhMTYtMDQ4Ny0z
ODBlLWFmNmItM2FmZGVjZGU5YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABCrlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALrhM+Mez+nOvsoAR41FzNduZ7iC3H7DCc+msVnbagwjNELiSxp9F+C2
gx8S6vAtHL4GXyJhQW7ODiHwxjXLy1u86lfxO3QguVP4po8mA4y1uYi38Z1V0GPa
oxRldA2UdcFuX79OtbURd1USqhPazHyuSn4a2YNPXfwfd93KiuuSgJJZqI2YaGSR
ge4U/Ss8KFFmVLz3vm8wFylQZP3CBU4RqKjMTvtmkipwhkYoShgiWMV35vm+BBHW
85buh3aEvj+KytJiL4EW/XqXQ3mb7aa7Oo1UonE8fGM0GCttDP9dhNy3h83YTRdo
X8OlKQtnzivzzeJpubEGqDxqLV+2iOk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:02 2025 by rpki-client