Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa
File:                     05b48221-53bb-3652-a3a5-bd42c683e784.roa (raw, json)
Hash identifier:          ib7d85kS0pIRDjnwSX8m7OrAXg9+bSS3nCHx/3nzVS8=
Subject key identifier:   79:23:38:82:9D:43:E3:16:A6:F0:E7:BC:52:7F:FA:E6:2F:E5:34:E7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA8EAFE9BEC98A0D567C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.242.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:8e:af:e9:be:c9:8a:0d:56:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0fd0dbae-f825-4da8-8b41-7b59661a8b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:7b:f8:10:ab:6f:20:87:c8:b4:ae:8d:5e:
                    18:10:65:ed:fe:a5:65:0f:bf:2a:29:4c:22:7f:45:
                    72:f6:2d:94:d6:9a:a9:3f:a2:5c:d6:45:ca:65:50:
                    2b:9f:91:0d:69:5c:4b:4e:8b:99:b6:9a:7a:9c:b0:
                    76:22:48:70:02:7a:4c:13:21:79:bd:26:6a:0d:46:
                    15:7a:05:2a:79:d6:35:ea:cd:fe:6b:27:2b:99:68:
                    3c:63:64:3b:19:24:bf:be:99:1d:cc:82:f1:8c:9d:
                    50:21:c4:5b:80:b5:4c:15:05:38:7c:65:de:e3:6c:
                    71:66:3b:f0:1f:bd:31:c2:03:1c:a0:5f:e1:1b:99:
                    af:a0:6a:88:b2:48:69:af:ca:18:c4:c5:0e:11:ae:
                    2d:89:63:f7:bc:bb:2e:10:47:d2:0b:7c:34:d8:42:
                    59:1a:9f:cb:f7:f5:ce:ed:f3:2d:fd:70:76:26:2b:
                    56:a2:c0:cc:98:61:2e:49:8e:33:9f:5b:d0:1f:57:
                    7f:2d:e2:48:dc:11:e4:53:79:fd:f4:3a:cb:ce:6f:
                    b3:de:85:12:32:67:59:63:b6:55:56:e5:fa:f9:9a:
                    ce:2c:44:4b:3e:8a:85:90:bc:41:39:b1:43:d5:45:
                    b0:b2:36:89:bb:04:f6:ec:b8:d0:ea:d9:18:2d:eb:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:23:38:82:9D:43:E3:16:A6:F0:E7:BC:52:7F:FA:E6:2F:E5:34:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:2a:a0:17:fc:50:6e:b3:da:64:7e:76:fd:8c:9e:93:f6:
         fb:f5:1e:a6:f8:c1:d8:eb:88:27:70:fc:35:c9:36:d1:17:72:
         3f:07:a8:4c:58:bd:24:ad:e2:2b:7d:74:a6:e3:38:62:23:f4:
         30:3d:ff:af:a6:1a:4e:2c:ed:38:28:28:46:df:34:37:26:3e:
         49:ab:0f:a3:f0:ff:12:64:a9:f9:57:e9:c1:ab:11:4c:70:b3:
         76:a1:e5:0a:95:dc:45:90:d6:a2:7f:ae:d9:4f:b7:1e:0d:fc:
         3d:6f:2a:5d:99:50:22:57:33:67:a3:1b:43:b7:77:62:35:3a:
         bd:b4:3a:c5:23:60:48:14:34:7a:25:59:61:15:3b:28:62:c7:
         9b:ac:f4:75:ba:b9:22:04:e5:df:2a:fb:b4:66:25:97:91:1b:
         a7:6b:e9:f7:f1:77:5f:03:e5:25:85:4e:83:25:69:07:26:83:
         cd:9f:a5:6c:76:e3:16:72:d2:60:6b:fa:f6:fd:2b:57:42:2c:
         9a:72:91:d6:c7:13:e3:ca:6f:ab:50:73:59:f1:b8:f4:c2:7e:
         96:ed:02:64:40:df:26:5d:b2:2d:57:5d:5b:56:55:2e:c0:73:
         71:39:d3:8f:40:a5:97:b4:a4:f0:53:a1:ad:69:c1:14:47:92:
         fe:ae:81:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuo6v6b7Jig1WfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MGZkMGRiYWUtZjgyNS00ZGE4LThiNDEtN2I1OTY2MWE4YjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qV7+BCrbyCHyLSujV4YEGXt/qVlD78qKUwi
f0Vy9i2U1pqpP6Jc1kXKZVArn5ENaVxLTouZtpp6nLB2IkhwAnpMEyF5vSZqDUYV
egUqedY16s3+aycrmWg8Y2Q7GSS/vpkdzILxjJ1QIcRbgLVMFQU4fGXe42xxZjvw
H70xwgMcoF/hG5mvoGqIskhpr8oYxMUOEa4tiWP3vLsuEEfSC3w02EJZGp/L9/XO
7fMt/XB2JitWosDMmGEuSY4zn1vQH1d/LeJI3BHkU3n99DrLzm+z3oUSMmdZY7ZV
VuX6+ZrOLERLPoqFkLxBObFD1UWwsjaJuwT27LjQ6tkYLeuscwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkjOIKdQ+MWpvDnvFJ/+uYv5TTnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDViNDgyMjEtNTNiYi0z
NjUyLWEzYTUtYmQ0MmM2ODNlNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbsKqAX/FBus9pkfnb9jJ6T9vv1Hqb4wdjriCdw/DXJNtEXcj8HqExY
vSSt4it9dKbjOGIj9DA9/6+mGk4s7TgoKEbfNDcmPkmrD6Pw/xJkqflX6cGrEUxw
s3ah5QqV3EWQ1qJ/rtlPtx4N/D1vKl2ZUCJXM2ejG0O3d2I1Or20OsUjYEgUNHol
WWEVOyhix5us9HW6uSIE5d8q+7RmJZeRG6dr6ffxd18D5SWFToMlaQcmg82fpWx2
4xZy0mBr+vb9K1dCLJpykdbHE+PKb6tQc1nxuPTCfpbtAmRA3yZdsi1XXVtWVS7A
c3E5049ApZe0pPBToa1pwRRHkv6ugTY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:18:40 2025 by rpki-client