Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7f2e1472-1d48-3721-a61d-f406ce685243.roa
File:                     7f2e1472-1d48-3721-a61d-f406ce685243.roa (raw, json)
Hash identifier:          QnhuGa47+LP9qwAkAzXHBEhkYCBs7V5aA2snb9cap/I=
Subject key identifier:   8D:56:F8:90:1B:94:F9:72:82:56:33:98:DD:06:26:9A:C2:93:2A:96
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829E935345AA0FA82EB5980
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7f2e1472-1d48-3721-a61d-f406ce685243.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e9:35:34:5a:a0:fa:82:eb:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=06382bc7-cf26-4ff7-b71b-01a1d0046d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:51:6f:5a:64:47:b1:78:cb:15:76:1c:0f:
                    69:68:84:43:f2:8c:e2:b8:62:13:b9:e7:64:7f:a9:
                    38:a0:d5:96:d7:fd:33:73:f3:f7:0f:7f:05:34:4f:
                    4f:1e:73:a2:8c:83:32:a2:d3:e4:fa:f8:80:3f:b2:
                    0a:1c:e4:b3:df:4b:55:b5:24:2c:32:63:01:07:d1:
                    42:1e:2f:8a:fb:62:1f:8c:98:89:de:eb:8c:25:11:
                    76:cb:0a:aa:b0:17:e2:92:53:29:b4:2f:56:aa:e2:
                    2f:39:d9:61:fc:e1:de:72:b3:ee:10:54:4b:77:eb:
                    64:51:c0:c7:34:82:69:d7:99:3c:73:fa:ee:be:30:
                    5a:da:4f:8f:1a:e3:89:69:6c:ea:7f:47:05:8d:54:
                    7e:56:09:8c:2b:54:75:5e:0e:f3:06:03:7c:ca:84:
                    8d:7e:8a:da:1f:35:bf:24:48:d4:ce:ea:f4:86:fd:
                    e5:b1:80:66:f9:f7:aa:e3:95:8c:fd:a2:27:88:ed:
                    d4:c6:62:db:4d:c8:76:61:95:9b:71:f8:05:44:49:
                    5a:f0:f2:dc:df:bc:7c:8d:ba:f0:26:90:eb:42:ca:
                    ad:13:5d:99:93:af:26:43:df:b0:8f:3c:9e:c0:50:
                    2e:f3:1c:d7:c5:c4:55:a0:63:60:37:bd:b6:da:e8:
                    7a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:56:F8:90:1B:94:F9:72:82:56:33:98:DD:06:26:9A:C2:93:2A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/7f2e1472-1d48-3721-a61d-f406ce685243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:c4:08:c3:f3:0f:e9:96:77:c9:67:d1:d0:a5:21:db:58:
         f3:e6:eb:c4:41:8f:84:73:47:07:80:3a:35:fb:26:12:0f:b6:
         07:d7:91:7a:4b:51:38:db:93:ac:26:d4:d0:d5:65:62:8c:c7:
         71:68:20:b4:77:c5:4f:a8:1f:ac:ab:bc:fa:6d:38:ae:89:52:
         2b:3c:d6:0d:c5:b1:e9:05:45:f3:78:a1:65:ff:1b:fc:77:9e:
         5f:0c:10:1f:99:56:8b:6f:8d:7b:2f:73:9d:67:97:62:53:aa:
         8d:7a:2a:36:29:f5:80:bc:5b:1b:f1:8b:66:1c:44:24:2f:c1:
         6d:ea:79:7a:df:87:2a:0d:d6:9d:41:9d:2f:3e:35:a8:1b:77:
         4f:0a:2f:c1:7a:4c:c5:f6:f7:cd:df:b4:1d:da:7a:57:9e:24:
         db:88:e1:e4:76:cc:7f:75:96:81:56:cc:3b:89:d8:02:f1:4c:
         86:93:3f:23:16:2e:43:7d:e7:ab:02:1b:e4:28:8d:e4:b6:ad:
         a0:5a:9f:43:db:10:28:e8:ad:b9:45:11:19:27:9e:67:f1:d8:
         74:23:91:c8:4e:1f:96:83:0f:d3:df:65:60:a9:17:fd:7a:68:
         87:11:57:31:6a:fc:57:bf:1e:ec:b8:9e:88:32:80:38:d5:e0:
         00:92:17:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKek1NFqg+oLrWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
MDYzODJiYzctY2YyNi00ZmY3LWI3MWItMDFhMWQwMDQ2ZDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXlRb1pkR7F4yxV2HA9paIRD8oziuGITuedk
f6k4oNWW1/0zc/P3D38FNE9PHnOijIMyotPk+viAP7IKHOSz30tVtSQsMmMBB9FC
Hi+K+2IfjJiJ3uuMJRF2ywqqsBfiklMptC9WquIvOdlh/OHecrPuEFRLd+tkUcDH
NIJp15k8c/ruvjBa2k+PGuOJaWzqf0cFjVR+VgmMK1R1Xg7zBgN8yoSNforaHzW/
JEjUzur0hv3lsYBm+feq45WM/aIniO3UxmLbTch2YZWbcfgFREla8PLc37x8jbrw
JpDrQsqtE12Zk68mQ9+wjzyewFAu8xzXxcRVoGNgN7222uh6FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI1W+JAblPlyglYzmN0GJprCkyqWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvN2YyZTE0NzItMWQ0OC0z
NzIxLWE2MWQtZjQwNmNlNjg1MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqdvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALqxAjD8w/plnfJZ9HQpSHbWPPm68RBj4RzRweAOjX7JhIPtgfXkXpL
UTjbk6wm1NDVZWKMx3FoILR3xU+oH6yrvPptOK6JUis81g3FsekFRfN4oWX/G/x3
nl8MEB+ZVotvjXsvc51nl2JTqo16KjYp9YC8Wxvxi2YcRCQvwW3qeXrfhyoN1p1B
nS8+Nagbd08KL8F6TMX2983ftB3aeleeJNuI4eR2zH91loFWzDuJ2ALxTIaTPyMW
LkN956sCG+QojeS2raBan0PbECjorblFERknnmfx2HQjkchOH5aDD9PfZWCpF/16
aIcRVzFq/Fe/Huy4nogygDjV4ACSF6s=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:23:19 2025 by rpki-client