Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/d6136437-2c3d-3410-ac87-344049aebb3b.roa
File:                     d6136437-2c3d-3410-ac87-344049aebb3b.roa (raw, json)
Hash identifier:          zSiuA8msyVIyepHPkSppHt0cbUFC7i+mJiAOUY7D+pY=
Subject key identifier:   52:4F:F4:8C:F8:A0:4F:F6:0E:3D:0D:BB:CA:EC:41:DF:AB:8F:3F:7C
Certificate issuer:       /CN=adbe894e-fc78-4889-85f3-6253e78715e5
Certificate serial:       010D0C9F43285849A61F3EFC69DFA291F0C4C8C0
Authority key identifier: B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/d6136437-2c3d-3410-ac87-344049aebb3b.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     62744
IP address blocks:        204.8.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3e:fc:69:df:a2:91:f0:c4:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe894e-fc78-4889-85f3-6253e78715e5
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=12b89e96-ceab-45c1-a8e5-b75c08453801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:80:be:5f:b8:eb:bf:d4:48:f9:50:18:a1:
                    4d:0a:5d:5f:4d:ca:14:48:d4:c2:92:f5:65:3e:69:
                    4c:e8:cd:9b:46:b5:33:7b:1f:bf:04:53:7b:df:53:
                    9e:67:dd:7e:24:6b:b8:30:51:93:a9:8e:7b:12:2c:
                    90:34:9a:65:b5:00:98:4b:61:d4:eb:14:a3:57:db:
                    b7:d1:3f:b3:5d:23:88:1a:d4:a2:ef:97:fe:7d:d7:
                    10:55:b8:a1:27:2c:28:2c:fe:bc:1d:c5:46:67:1b:
                    cf:78:8a:e3:37:9a:36:96:8a:40:4e:ab:d8:a6:22:
                    86:90:8e:66:8f:0d:dd:c1:8c:69:1a:05:fb:78:31:
                    f6:4d:0e:e9:3c:85:aa:bc:ad:f9:ae:25:a7:6e:e6:
                    18:d7:0a:de:5c:2e:db:bb:e7:00:a4:ae:2b:02:8b:
                    27:1d:37:00:76:eb:4e:80:51:f7:27:0c:ea:53:cf:
                    ae:07:ac:57:cf:6d:df:ed:9a:73:7b:73:b7:9d:b6:
                    76:74:fe:2c:bf:0b:08:d6:fe:89:41:75:d7:66:fc:
                    de:96:1f:d4:4f:f2:8f:75:d7:9c:f4:35:32:8e:ad:
                    e2:0b:66:4a:a8:51:fb:bb:45:12:58:e8:70:b3:25:
                    0d:ac:ec:80:4c:f8:61:27:70:4f:8c:fc:c8:30:1a:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4F:F4:8C:F8:A0:4F:F6:0E:3D:0D:BB:CA:EC:41:DF:AB:8F:3F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/d6136437-2c3d-3410-ac87-344049aebb3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:39:b0:3e:3c:a5:47:8c:2a:b6:f7:87:61:41:08:5f:40:
         56:cd:c5:a0:8c:83:51:d9:60:15:ce:36:93:f3:56:26:d9:2c:
         81:06:42:39:2a:02:42:d4:b4:7f:1e:f5:5f:e8:38:8d:5b:12:
         0b:14:08:a7:d6:f0:a0:cc:5d:07:88:00:fb:79:2e:cb:75:4d:
         51:38:5c:80:92:78:16:2c:d6:c2:17:bb:ef:0a:84:db:7a:c4:
         4f:1c:26:26:4b:39:f2:96:7d:18:4f:ca:da:40:d8:6d:17:8c:
         6e:f2:24:b5:a5:33:5f:35:8a:65:76:22:ac:00:c4:74:60:86:
         35:be:01:36:92:56:fd:cd:3a:64:a4:3e:a4:eb:93:39:72:48:
         23:1c:eb:98:b9:22:9f:01:4a:1f:38:e0:01:c7:13:3a:e7:61:
         04:5f:fa:c9:d3:be:7d:16:6d:ae:2c:62:57:69:f6:19:5f:6e:
         91:71:5b:fe:cc:2d:4f:14:08:83:a7:25:85:b7:cc:51:30:23:
         73:d8:50:e4:4e:d9:a6:e4:84:cf:df:86:3a:d8:45:ca:b7:58:
         79:3c:36:ad:60:05:ee:34:e8:d9:74:a3:ec:42:ec:9f:56:89:
         c1:1c:c0:e2:72:95:64:65:a0:5e:92:f9:a3:c1:84:cd:a5:15:
         2b:5f:d3:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz78ad+ikfDEyMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRiZTg5NGUtZmM3OC00ODg5LTg1ZjMtNjI1M2U3ODcx
NWU1MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
MTJiODllOTYtY2VhYi00NWMxLWE4ZTUtYjc1YzA4NDUzODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwuAvl+467/USPlQGKFNCl1fTcoUSNTCkvVl
PmlM6M2bRrUzex+/BFN731OeZ91+JGu4MFGTqY57EiyQNJpltQCYS2HU6xSjV9u3
0T+zXSOIGtSi75f+fdcQVbihJywoLP68HcVGZxvPeIrjN5o2lopATqvYpiKGkI5m
jw3dwYxpGgX7eDH2TQ7pPIWqvK35riWnbuYY1wreXC7bu+cApK4rAosnHTcAdutO
gFH3JwzqU8+uB6xXz23f7Zpze3O3nbZ2dP4svwsI1v6JQXXXZvzelh/UT/KPddec
9DUyjq3iC2ZKqFH7u0USWOhwsyUNrOyATPhhJ3BPjPzIMBpTiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJP9Iz4oE/2Dj0Nu8rsQd+rjz98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZGJl
ODk0ZS1mYzc4LTQ4ODktODVmMy02MjUzZTc4NzE1ZTUvZDYxMzY0MzctMmMzZC0z
NDEwLWFjODctMzQ0MDQ5YWViYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWRiZTg5NGUtZmM3OC00ODg5LTg1
ZjMtNjI1M2U3ODcxNWU1L2FkYmU4OTRlLWZjNzgtNDg4OS04NWYzLTYyNTNlNzg3
MTVlNS5jcmwwHwYDVR0jBBgwFoAUtlPnz2linLO8yzUILTMGOecKrUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZGJlODk0ZS1mYzc4LTQ4ODktODVmMy02MjUz
ZTc4NzE1ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAhiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyiObA+PKVHjCq294dhQQhfQFbNxaCMg1HZYBXONpPzVibZLIEGQjkq
AkLUtH8e9V/oOI1bEgsUCKfW8KDMXQeIAPt5Lst1TVE4XICSeBYs1sIXu+8KhNt6
xE8cJiZLOfKWfRhPytpA2G0XjG7yJLWlM181imV2IqwAxHRghjW+ATaSVv3NOmSk
PqTrkzlySCMc65i5Ip8BSh844AHHEzrnYQRf+snTvn0Wba4sYldp9hlfbpFxW/7M
LU8UCIOnJYW3zFEwI3PYUORO2abkhM/fhjrYRcq3WHk8Nq1gBe406Nl0o+xC7J9W
icEcwOJylWRloF6S+aPBhM2lFStf03A=
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:46:39 2025 by rpki-client