Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa
File:                     255f27c3-b702-3202-96f5-5f1614a9bd0c.roa (raw, json)
Hash identifier:          UYp/A5Iwu82bGCtP8Ku/KWUSVKntGTkuUiQhXK4H3Nk=
Subject key identifier:   0D:C5:24:AA:7C:63:12:8D:BF:BD:24:49:27:99:7E:33:0E:B8:AB:94
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584A07D523E7ED23A50473A46680
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     19528
IP address blocks:        208.89.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:23:e7:ed:23:a5:04:73:a4:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=3bb8ff9f-07d9-44b8-8bd3-31ce3d52725f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dd:f6:ec:27:0b:52:5f:b7:44:c8:fd:32:8e:
                    13:c2:48:3e:cf:5c:ba:3d:c2:15:ce:9e:7f:eb:5f:
                    ac:8a:a7:bf:c2:cf:c1:79:d0:47:4b:69:74:46:6b:
                    a7:2a:ca:32:9d:41:73:54:42:69:9a:12:32:3c:ac:
                    06:22:c3:96:8c:06:3c:55:aa:6a:53:d0:4b:62:2d:
                    64:3f:5a:2b:72:96:2a:42:b0:67:14:51:42:1f:da:
                    9f:64:a7:a6:88:39:e6:ac:4c:4a:b2:58:6d:b0:aa:
                    1e:5b:fe:9f:0d:34:74:00:f3:15:b4:ea:0c:fa:82:
                    ec:33:50:7e:23:44:63:3b:e7:c5:0c:00:e5:37:10:
                    e0:3a:55:39:45:4c:06:b5:bc:11:5f:f8:32:17:fd:
                    f5:62:c7:38:eb:e3:a3:fb:a4:97:17:a8:ab:7d:3d:
                    60:60:0c:02:31:51:49:a3:db:ac:28:b2:c1:82:d4:
                    47:d1:11:8d:c1:91:6a:cc:15:4d:65:90:d1:79:09:
                    7d:b5:1d:ef:2d:d3:9d:2b:0c:8b:06:1e:d0:8c:66:
                    64:48:a4:e7:90:09:d2:0f:a5:90:3c:2e:a9:57:b7:
                    bd:8e:c8:06:98:6a:e0:b0:bf:1d:ab:b3:cf:1c:a7:
                    f3:67:ec:19:6e:dc:35:02:0c:31:c4:b4:30:e6:c4:
                    6b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:24:AA:7C:63:12:8D:BF:BD:24:49:27:99:7E:33:0E:B8:AB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/255f27c3-b702-3202-96f5-5f1614a9bd0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:64:ba:ed:03:b5:08:bc:23:a2:cc:b5:42:f5:60:66:05:
         a9:35:6b:b4:7e:e2:29:4e:de:7f:ff:24:49:03:6e:40:e1:5a:
         83:72:03:c3:6d:a9:9d:d3:44:8c:55:37:66:06:9d:ba:3f:0f:
         2c:f6:cb:51:16:9b:93:5b:be:57:66:9c:da:58:22:e3:8e:e5:
         1e:9d:43:ec:5b:b7:5a:2f:1a:aa:e1:32:62:2f:4d:4e:35:5a:
         c0:c0:58:0d:c1:6f:f6:55:89:e7:41:af:ba:29:50:ce:6b:1c:
         05:9b:0d:46:7e:c3:27:f6:d4:25:83:57:24:b9:d6:0d:d9:b5:
         68:87:3e:a9:30:9d:a1:30:56:c3:77:75:14:66:8a:b4:14:fb:
         a1:5b:a0:4a:b8:50:b0:fa:68:54:8b:1d:80:4c:92:69:49:7d:
         85:0c:c4:ac:d6:a6:53:1f:7d:2c:49:28:9f:a9:f1:cb:3b:4f:
         37:56:be:98:69:31:ce:e2:a2:53:a9:54:bd:0e:21:a5:ec:55:
         9c:3c:5b:3a:8d:e5:1b:8b:56:e2:ec:6b:44:24:ec:b9:04:a2:
         89:94:ad:82:53:7f:ad:8d:f6:8f:ac:51:8d:f4:fc:65:93:af:
         46:c5:51:7f:c8:50:81:28:71:7e:ea:77:a3:49:19:04:2f:08:
         68:ea:45:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1SPn7SOlBHOkZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQ1ZWRmZjEtMzYwZC00YWUyLWEwNDUtY2NmN2RiYzRi
ZWViMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk
M2JiOGZmOWYtMDdkOS00NGI4LThiZDMtMzFjZTNkNTI3MjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd327CcLUl+3RMj9Mo4Twkg+z1y6PcIVzp5/
61+siqe/ws/BedBHS2l0RmunKsoynUFzVEJpmhIyPKwGIsOWjAY8VapqU9BLYi1k
P1orcpYqQrBnFFFCH9qfZKemiDnmrExKslhtsKoeW/6fDTR0APMVtOoM+oLsM1B+
I0RjO+fFDADlNxDgOlU5RUwGtbwRX/gyF/31Ysc46+Oj+6SXF6irfT1gYAwCMVFJ
o9usKLLBgtRH0RGNwZFqzBVNZZDReQl9tR3vLdOdKwyLBh7QjGZkSKTnkAnSD6WQ
PC6pV7e9jsgGmGrgsL8dq7PPHKfzZ+wZbtw1AgwxxLQw5sRrSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3FJKp8YxKNv70kSSeZfjMOuKuUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVl
ZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3ZGJjNGJlZWIvMjU1ZjI3YzMtYjcwMi0z
MjAyLTk2ZjUtNWYxNjE0YTliZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDQ1ZWRmZjEtMzYwZC00YWUyLWEw
NDUtY2NmN2RiYzRiZWViLzQ0NWVkZmYxLTM2MGQtNGFlMi1hMDQ1LWNjZjdkYmM0
YmVlYi5jcmwwHwYDVR0jBBgwFoAUALfGp0iKEmAtlAFMsF6IiFiwUZ8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVlZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3
ZGJjNGJlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fn0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABr5ZLrtA7UIvCOizLVC9WBmBak1a7R+4ilO3n//JEkDbkDhWoNyA8Nt
qZ3TRIxVN2YGnbo/Dyz2y1EWm5NbvldmnNpYIuOO5R6dQ+xbt1ovGqrhMmIvTU41
WsDAWA3Bb/ZViedBr7opUM5rHAWbDUZ+wyf21CWDVyS51g3ZtWiHPqkwnaEwVsN3
dRRmirQU+6FboEq4ULD6aFSLHYBMkmlJfYUMxKzWplMffSxJKJ+p8cs7TzdWvphp
Mc7iolOpVL0OIaXsVZw8WzqN5RuLVuLsa0Qk7LkEoomUrYJTf62N9o+sUY30/GWT
r0bFUX/IUIEocX7qd6NJGQQvCGjqRRc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:58 2025 by rpki-client