Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14130434-b088-35e7-a313-36fe5974c1bc.roa
File:                     14130434-b088-35e7-a313-36fe5974c1bc.roa (raw, json)
Hash identifier:          ADRqurA5AeSlh9ARGmDLwrBOTaNyvX8UYM1Ywt/A9JA=
Subject key identifier:   FA:C5:E3:10:8A:7E:12:DF:BB:48:66:36:69:09:05:9D:A5:A6:26:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA90FB87CD2783EB56D840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14130434-b088-35e7-a313-36fe5974c1bc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.242.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:90:fb:87:cd:27:83:eb:56:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9d3305d4-a647-4980-9325-ff4938a1b836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3f:a7:a6:1a:fc:30:24:72:98:d7:9d:80:45:
                    28:49:66:84:db:93:b1:d9:48:8f:b7:9e:1d:ba:5b:
                    1e:8a:a3:ff:7d:bd:06:73:66:0d:0f:9a:c0:bd:5d:
                    89:c8:50:46:a8:7c:fd:e8:9a:40:ad:0b:2a:bd:7b:
                    40:10:0c:0c:43:71:c2:8a:e2:71:01:91:78:f1:fa:
                    9b:8c:0f:f7:87:98:3e:b4:78:e9:e5:f8:2e:3b:97:
                    8d:9c:bf:a8:92:ff:61:73:90:ee:e3:d3:fb:dd:d1:
                    cf:0e:e8:3d:27:29:f5:f3:d2:d8:6f:f3:bc:19:ef:
                    5a:25:a6:c9:a7:6d:87:d6:8b:92:eb:a7:82:85:f6:
                    95:18:1f:b3:b3:07:e3:44:2a:69:84:c4:d2:97:1e:
                    87:2d:b5:eb:c4:3e:2e:ff:d2:db:9a:af:f2:51:9b:
                    0e:64:7d:06:8d:fc:b9:b0:5d:e9:bd:20:0d:c8:17:
                    50:17:91:c0:05:3d:cd:b3:42:b3:97:49:71:3e:da:
                    a9:73:3b:22:09:2d:03:46:51:32:dc:8d:a8:92:20:
                    3a:44:36:2e:d3:87:ad:90:97:46:2c:37:c6:49:3c:
                    3c:1f:01:85:4d:2d:c4:c5:e9:af:bb:bd:0c:86:8f:
                    d9:7f:a4:35:da:a4:47:77:4e:42:46:ad:fd:ce:96:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C5:E3:10:8A:7E:12:DF:BB:48:66:36:69:09:05:9D:A5:A6:26:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14130434-b088-35e7-a313-36fe5974c1bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:2a:be:77:5d:ef:fa:e2:52:d8:59:2a:c6:84:b1:85:78:
         75:63:0d:c7:98:fc:2a:da:42:20:fc:fa:22:43:9c:87:43:32:
         32:e5:85:2c:08:b3:7a:27:29:e7:d0:ca:0d:0f:81:71:92:f8:
         5f:aa:e2:d6:bc:33:a2:40:d1:b7:04:df:88:2e:01:9a:a3:68:
         0a:71:ba:cd:c7:3c:c1:2a:99:94:89:97:13:a5:3a:d0:e8:68:
         fc:30:db:f0:2c:db:b1:b7:45:b9:fd:a6:7f:af:e6:38:4e:a3:
         f8:c1:ed:ac:b2:04:fc:c7:36:de:0a:38:29:85:88:24:be:b3:
         10:cd:ff:7c:12:ea:b1:92:59:30:e1:0b:2f:0a:aa:60:48:07:
         00:48:c5:f9:22:41:0c:d3:09:14:1b:29:50:e5:d3:b5:a4:1f:
         d0:c7:ce:bd:ed:1c:9f:8b:c9:d1:b2:c8:d6:fd:4d:e3:e6:3d:
         20:e5:7e:b5:9c:f3:88:74:eb:e3:07:64:37:38:7d:53:da:c9:
         7e:f3:85:b0:d6:8f:6d:0d:c8:43:b0:f3:6c:54:6a:ec:44:8e:
         2f:1b:e9:b5:cb:43:40:94:b9:db:a1:23:82:f8:89:1c:47:a4:
         a7:f8:4a:07:11:0c:ba:d5:e1:23:98:2e:6d:3f:f8:03:73:86:
         b6:24:58:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupD7h80ng+tW2EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
OWQzMzA1ZDQtYTY0Ny00OTgwLTkzMjUtZmY0OTM4YTFiODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD+nphr8MCRymNedgEUoSWaE25Ox2UiPt54d
ulseiqP/fb0Gc2YND5rAvV2JyFBGqHz96JpArQsqvXtAEAwMQ3HCiuJxAZF48fqb
jA/3h5g+tHjp5fguO5eNnL+okv9hc5Du49P73dHPDug9Jyn189LYb/O8Ge9aJabJ
p22H1ouS66eChfaVGB+zswfjRCpphMTSlx6HLbXrxD4u/9Lbmq/yUZsOZH0Gjfy5
sF3pvSANyBdQF5HABT3Ns0Kzl0lxPtqpczsiCS0DRlEy3I2okiA6RDYu04etkJdG
LDfGSTw8HwGFTS3Exemvu70Mho/Zf6Q12qRHd05CRq39zpbvyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrF4xCKfhLfu0hmNmkJBZ2lpiYIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTQxMzA0MzQtYjA4OC0z
NWU3LWEzMTMtMzZmZTU5NzRjMWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGepKr53Xe/64lLYWSrGhLGFeHVjDceY/CraQiD8+iJDnIdDMjLlhSwI
s3onKefQyg0PgXGS+F+q4ta8M6JA0bcE34guAZqjaApxus3HPMEqmZSJlxOlOtDo
aPww2/As27G3Rbn9pn+v5jhOo/jB7ayyBPzHNt4KOCmFiCS+sxDN/3wS6rGSWTDh
Cy8KqmBIBwBIxfkiQQzTCRQbKVDl07WkH9DHzr3tHJ+LydGyyNb9TePmPSDlfrWc
84h06+MHZDc4fVPayX7zhbDWj20NyEOw82xUauxEji8b6bXLQ0CUuduhI4L4iRxH
pKf4SgcRDLrV4SOYLm0/+ANzhrYkWME=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:39 2025 by rpki-client