Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa
File:                     88861554-d029-3df4-bb93-b6245c989af7.roa (raw, json)
Hash identifier:          +Cje19TfVwl96xscsNGA2d5Fv41vZiqlxltLD6B68Zo=
Subject key identifier:   A9:B1:67:C0:BB:A6:B6:81:EE:A6:6B:00:00:FF:36:EE:38:85:88:1C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB389649CD4F0AE141AD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.242.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:38:96:49:cd:4f:0a:e1:41:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=596817bd-1192-483d-8e27-711e5d754106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:44:1b:8d:be:61:37:9b:02:17:47:d4:72:
                    ea:d6:28:72:0b:31:77:da:21:e4:6c:1b:1e:ae:71:
                    22:d1:98:56:cc:19:ff:60:81:4c:a6:2e:cb:68:67:
                    42:51:26:bf:90:bb:00:94:12:63:20:df:c6:a9:a0:
                    ed:2f:c6:2b:54:25:c9:24:08:48:06:55:25:1b:c3:
                    8c:34:a5:41:02:7c:e5:64:57:e5:ea:bf:44:30:a7:
                    af:e1:80:fc:56:a7:8f:95:3e:a6:f5:b7:52:fe:07:
                    d8:72:37:f0:22:a9:cb:6c:6a:1d:32:72:dc:17:23:
                    a9:2b:9a:93:fa:bf:0b:de:38:af:af:01:a0:c8:ce:
                    39:92:32:1d:d4:04:f3:42:db:9c:85:ea:39:de:bb:
                    30:63:09:f9:52:b0:47:71:f3:49:42:84:0e:30:25:
                    7a:a6:f3:2a:be:62:c9:a7:83:d3:eb:82:26:24:f7:
                    24:5e:d4:1a:62:26:89:43:3a:8e:dc:16:e4:f7:e1:
                    ed:b9:a1:f1:f8:8a:46:0c:f8:d3:29:d7:f6:f9:7a:
                    c7:49:b4:27:ed:e6:10:04:09:5a:69:15:54:24:fb:
                    64:1f:63:1d:5b:d6:17:dc:2f:55:e6:41:2b:b7:71:
                    23:01:a8:a0:c3:14:21:ec:bb:fe:92:cf:ac:3a:cd:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B1:67:C0:BB:A6:B6:81:EE:A6:6B:00:00:FF:36:EE:38:85:88:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a7:f0:40:5a:7c:4c:9a:28:cc:80:8b:eb:a5:9f:e4:4c:8f:
         e3:1b:c2:0b:b3:7a:b0:00:5a:59:73:12:d6:6f:9a:65:08:02:
         da:ae:6e:01:72:d6:7c:a4:5d:d8:bc:e2:4e:24:bb:5b:7f:ad:
         d7:80:85:00:93:89:d2:96:7a:df:29:4b:28:f3:db:43:3e:42:
         95:df:64:27:34:49:56:88:9e:4a:d7:a4:5b:3b:66:5f:41:20:
         1f:82:67:36:ee:26:1b:58:d0:86:e0:15:c6:06:1b:de:35:65:
         6f:e6:16:cb:0f:a3:ae:5e:b5:a1:8c:29:4e:05:0c:fb:5f:63:
         cd:a7:b8:75:4e:ef:d6:9f:1f:db:d7:8c:1f:9d:43:65:bc:62:
         1b:20:c7:43:50:33:8e:0a:68:6b:f5:c2:15:68:81:07:f3:11:
         2d:00:9e:00:3a:25:76:3f:da:26:16:a7:2a:05:ad:9f:ce:f0:
         d5:5a:1d:3d:4a:86:a5:1c:27:04:13:b7:10:54:5f:91:d4:15:
         3c:10:4b:17:31:80:68:de:50:8f:e0:c7:32:40:f7:dd:c3:3f:
         e4:31:ff:09:9f:fa:b0:88:8d:99:a4:33:ca:d8:29:bc:4b:fe:
         cc:00:ab:b6:5f:88:bd:5e:f2:b3:42:79:56:59:a6:ab:ee:ec:
         01:4b:61:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuziWSc1PCuFBrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NTk2ODE3YmQtMTE5Mi00ODNkLThlMjctNzExZTVkNzU0MTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcVEG42+YTebAhdH1HLq1ihyCzF32iHkbBse
rnEi0ZhWzBn/YIFMpi7LaGdCUSa/kLsAlBJjIN/GqaDtL8YrVCXJJAhIBlUlG8OM
NKVBAnzlZFfl6r9EMKev4YD8VqePlT6m9bdS/gfYcjfwIqnLbGodMnLcFyOpK5qT
+r8L3jivrwGgyM45kjId1ATzQtucheo53rswYwn5UrBHcfNJQoQOMCV6pvMqvmLJ
p4PT64ImJPckXtQaYiaJQzqO3Bbk9+HtuaHx+IpGDPjTKdf2+XrHSbQn7eYQBAla
aRVUJPtkH2MdW9YX3C9V5kErt3EjAaigwxQh7Lv+ks+sOs1APwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKmxZ8C7praB7qZrAAD/Nu44hYgcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODg4NjE1NTQtZDAyOS0z
ZGY0LWJiOTMtYjYyNDVjOTg5YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6n8EBafEyaKMyAi+uln+RMj+MbwguzerAAWllzEtZvmmUIAtqubgFy
1nykXdi84k4ku1t/rdeAhQCTidKWet8pSyjz20M+QpXfZCc0SVaInkrXpFs7Zl9B
IB+CZzbuJhtY0IbgFcYGG941ZW/mFssPo65etaGMKU4FDPtfY82nuHVO79afH9vX
jB+dQ2W8Yhsgx0NQM44KaGv1whVogQfzES0AngA6JXY/2iYWpyoFrZ/O8NVaHT1K
hqUcJwQTtxBUX5HUFTwQSxcxgGjeUI/gxzJA993DP+Qx/wmf+rCIjZmkM8rYKbxL
/swAq7ZfiL1e8rNCeVZZpqvu7AFLYUU=
-----END CERTIFICATE-----
Generated at Thu May 1 07:23:10 2025 by rpki-client