Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa
File:                     e4217924-b89f-3a6b-b726-c4acf11988c3.roa (raw, json)
Hash identifier:          ff2k13EDGno2vILJIZbs1I2IkmG2PLr2hmx2TxdE0LA=
Subject key identifier:   E3:3D:79:B5:F0:22:11:8C:96:65:F0:52:71:90:3C:13:C8:90:08:1D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498E649B6BE18BAE7112927460
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     206728
IP address blocks:        108.171.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:9b:6b:e1:8b:ae:71:12:92:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=5f2c20c3-a449-46e5-81ba-8e02e3a5e489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:70:e2:f8:96:f4:65:6f:fa:44:be:33:9f:
                    c0:bf:33:f5:72:50:ef:61:c1:8d:09:e6:60:5c:9d:
                    ef:4a:49:43:ea:b0:4a:83:5c:3b:8e:5c:04:60:2c:
                    3a:b6:f0:5f:15:d5:c5:4f:d7:c2:04:78:30:b7:1c:
                    ab:81:9a:a3:4c:c8:01:0b:1e:e6:f7:3e:f4:92:c4:
                    04:66:41:b4:54:c1:4f:d9:64:23:45:41:5a:15:e3:
                    36:9d:be:e3:5f:24:d0:93:82:23:f6:b2:fd:f9:2f:
                    5c:e0:8b:08:37:7d:e7:7a:ae:88:d2:75:8e:9e:3e:
                    15:6e:82:dd:b6:eb:45:dc:ee:1d:5f:54:1d:3a:e0:
                    69:a1:f1:7d:b4:35:6f:19:7c:08:65:68:ea:4d:51:
                    62:e8:18:ac:7e:0c:e6:75:db:35:44:b7:69:b5:c1:
                    72:f0:2e:40:e9:cd:78:bb:a6:5b:a4:2d:4b:e6:cc:
                    23:ff:d1:21:46:eb:cd:56:09:0d:82:e6:bc:60:89:
                    6c:8f:6d:f1:74:36:cf:c5:2a:f0:7a:4f:ec:fd:b1:
                    12:55:0e:e7:b5:55:ee:c2:07:77:3d:1d:fb:a9:21:
                    c2:1f:0d:b5:e3:77:0a:ce:be:18:0d:c6:ad:6a:b1:
                    69:ba:8f:8b:d1:b0:45:16:f5:33:f3:fb:9b:74:d6:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3D:79:B5:F0:22:11:8C:96:65:F0:52:71:90:3C:13:C8:90:08:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e4217924-b89f-3a6b-b726-c4acf11988c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:65:13:72:13:91:be:ab:35:f6:81:d6:f9:ee:46:e5:7d:88:
         00:ec:a3:f1:6b:21:e7:8e:77:22:9f:4e:6a:1b:21:c7:34:5b:
         13:6f:b0:2a:ba:c9:3d:d3:8c:38:fd:e9:8e:8f:a8:3f:e2:32:
         35:4d:2f:75:28:08:1a:3d:a2:bc:03:87:4a:7a:6a:50:d9:06:
         51:7d:f7:49:06:9a:c5:1a:4b:b2:1e:cb:4a:14:8f:52:ab:f9:
         ec:bf:42:ab:96:3a:d8:82:26:09:30:ad:8e:18:29:30:53:3d:
         a4:4a:19:4b:02:15:cc:bc:65:69:bf:b9:1b:18:0d:b1:78:62:
         fe:f1:fc:65:df:f0:e8:14:68:5a:b7:fe:b0:d8:00:aa:80:a1:
         67:ec:72:41:f3:43:a4:38:13:2a:f1:18:31:22:ba:aa:35:c9:
         dc:55:ad:2e:a2:cd:8b:6c:98:10:c4:36:3e:63:02:58:f3:bc:
         3b:f5:32:d4:25:bb:b4:e1:90:29:b3:c0:94:cb:2b:ae:9d:ae:
         be:64:5f:ef:ff:42:dd:78:84:c7:7a:c2:9f:a5:dd:9a:72:9f:
         13:4d:1e:17:68:3c:42:eb:32:2b:f9:72:8f:d9:74:d5:2a:02:
         a5:e1:91:64:b8:bd:a0:97:f6:31:ea:c6:4a:f3:5a:68:4c:b1:
         f1:dc:fe:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJtr4YuucRKSdGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
NWYyYzIwYzMtYTQ0OS00NmU1LTgxYmEtOGUwMmUzYTVlNDg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWdw4viW9GVv+kS+M5/AvzP1clDvYcGNCeZg
XJ3vSklD6rBKg1w7jlwEYCw6tvBfFdXFT9fCBHgwtxyrgZqjTMgBCx7m9z70ksQE
ZkG0VMFP2WQjRUFaFeM2nb7jXyTQk4Ij9rL9+S9c4IsIN33neq6I0nWOnj4VboLd
tutF3O4dX1QdOuBpofF9tDVvGXwIZWjqTVFi6Bisfgzmdds1RLdptcFy8C5A6c14
u6ZbpC1L5swj/9EhRuvNVgkNgua8YIlsj23xdDbPxSrwek/s/bESVQ7ntVXuwgd3
PR37qSHCHw2143cKzr4YDcatarFpuo+L0bBFFvUz8/ubdNY0swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOM9ebXwIhGMlmXwUnGQPBPIkAgdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTQyMTc5MjQtYjg5Zi0z
YTZiLWI3MjYtYzRhY2YxMTk4OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKsnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdlE3ITkb6rNfaB1vnuRuV9iADso/FrIeeOdyKfTmobIcc0WxNvsCq6
yT3TjDj96Y6PqD/iMjVNL3UoCBo9orwDh0p6alDZBlF990kGmsUaS7Iey0oUj1Kr
+ey/QquWOtiCJgkwrY4YKTBTPaRKGUsCFcy8ZWm/uRsYDbF4Yv7x/GXf8OgUaFq3
/rDYAKqAoWfsckHzQ6Q4EyrxGDEiuqo1ydxVrS6izYtsmBDENj5jAljzvDv1MtQl
u7ThkCmzwJTLK66drr5kX+//Qt14hMd6wp+l3ZpynxNNHhdoPELrMiv5co/ZdNUq
AqXhkWS4vaCX9jHqxkrzWmhMsfHc/rE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:02 2025 by rpki-client