Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2e655ea9-6118-3fc7-8ee6-8f8082a3070c.roa
File:                     2e655ea9-6118-3fc7-8ee6-8f8082a3070c.roa (raw, json)
Hash identifier:          fHOoVCeEwXNQ2Y42hP01JDxfYjisr7g7Dr0MJrXytfQ=
Subject key identifier:   2C:23:94:24:80:A6:94:D7:4B:CA:C7:5F:37:0F:8A:4A:88:A7:11:D6
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858499F249D70D593326967539280
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2e655ea9-6118-3fc7-8ee6-8f8082a3070c.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     33635
IP address blocks:        66.36.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9d:70:d5:93:32:69:67:53:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=98cb7a08-5332-440c-be01-2e6d9aea6611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:d7:52:05:2a:62:2b:89:b2:7d:f7:5c:d2:
                    db:07:25:1b:4f:73:29:f3:b7:f0:e4:23:bc:95:3a:
                    0f:2a:90:34:af:33:00:81:82:b5:47:52:5b:6b:0a:
                    93:22:73:1f:da:8f:6a:78:08:8c:fa:00:46:13:0e:
                    ab:91:58:5c:2a:0b:97:c2:a2:ef:d3:6d:f1:c2:9f:
                    66:47:7c:71:59:89:95:d5:34:84:f7:5e:12:24:b4:
                    fe:b8:06:5e:39:1d:b9:3d:4c:ff:52:7e:55:4a:99:
                    4d:b7:e9:6a:03:70:78:e2:b2:9c:1c:c4:9b:84:85:
                    1a:76:2d:4d:5e:2a:75:fc:cb:5d:21:b9:e6:eb:14:
                    23:27:f8:f5:49:b0:13:6b:d9:70:53:f7:16:62:11:
                    ca:de:a5:af:ad:ee:f8:e6:e9:6d:c0:5c:3d:20:22:
                    65:1e:98:d7:9f:e8:86:05:29:a9:04:1c:8a:54:b7:
                    13:f7:40:f9:dc:09:de:3d:cd:91:9e:49:5f:4f:7e:
                    40:b6:15:59:93:71:26:eb:6f:5b:4c:ff:93:f4:ff:
                    35:ff:98:a3:a9:1e:9e:31:40:61:f2:9c:01:5d:0c:
                    2c:f0:79:57:45:06:ae:b6:f6:0c:de:b6:25:97:75:
                    7c:c7:44:2f:27:9f:80:46:a4:bf:3a:c9:9d:b1:b2:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:23:94:24:80:A6:94:D7:4B:CA:C7:5F:37:0F:8A:4A:88:A7:11:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2e655ea9-6118-3fc7-8ee6-8f8082a3070c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.36.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:17:7c:82:58:50:c2:6b:ba:de:aa:c2:14:18:30:6c:43:54:
         db:9c:b9:88:a1:d2:90:3e:53:b0:43:3f:b5:6e:3a:6b:0a:15:
         97:f5:78:e9:fd:b7:38:c0:8b:b6:1d:10:44:05:7e:18:83:c0:
         3f:9f:66:35:aa:96:65:bd:88:f4:0b:d1:f4:73:ff:13:51:d0:
         55:a1:cd:b9:d0:c3:48:70:8f:44:90:e4:dd:09:16:7b:d9:f1:
         75:73:47:07:94:c0:9f:5c:ef:45:c5:07:0d:a8:23:cf:b0:2c:
         e6:be:7c:19:39:c9:93:97:7e:42:96:a5:ad:27:94:6b:85:0e:
         ff:8c:e1:e4:64:0b:cb:a1:a3:46:11:22:1a:5e:df:7c:25:61:
         46:81:84:a0:39:bf:29:8e:4e:e4:1b:fe:07:89:35:fc:8e:fc:
         c3:06:3c:88:9d:82:da:72:1e:cc:5b:79:17:b8:a2:e5:38:46:
         8e:17:66:29:c2:06:6a:7f:e5:46:2e:c0:82:10:38:22:0a:72:
         10:26:46:92:7f:51:38:7f:15:96:e8:79:c1:47:c7:40:8f:6c:
         37:18:52:38:b3:75:88:f1:13:16:0c:41:f6:e7:4c:66:81:f1:
         7f:61:df:66:fd:68:4a:d4:60:38:fe:c7:c8:0d:d9:d7:c9:3a:
         d6:f9:d9:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJ1w1ZMyaWdTkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDFmYzE4MTUtMzRlZi00MjRkLTgyNTgtNTA2ZjhiNDg2
ZTM1MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
OThjYjdhMDgtNTMzMi00NDBjLWJlMDEtMmU2ZDlhZWE2NjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4DXUgUqYiuJsn33XNLbByUbT3Mp87fw5CO8
lToPKpA0rzMAgYK1R1JbawqTInMf2o9qeAiM+gBGEw6rkVhcKguXwqLv023xwp9m
R3xxWYmV1TSE914SJLT+uAZeOR25PUz/Un5VSplNt+lqA3B44rKcHMSbhIUadi1N
Xip1/MtdIbnm6xQjJ/j1SbATa9lwU/cWYhHK3qWvre745ultwFw9ICJlHpjXn+iG
BSmpBByKVLcT90D53AnePc2RnklfT35AthVZk3Em629bTP+T9P81/5ijqR6eMUBh
8pwBXQws8HlXRQautvYM3rYll3V8x0QvJ5+ARqS/OsmdsbIf3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwjlCSAppTXS8rHXzcPikqIpxHWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMWZj
MTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0ODZlMzUvMmU2NTVlYTktNjExOC0z
ZmM3LThlZTYtOGY4MDgyYTMwNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDFmYzE4MTUtMzRlZi00MjRkLTgy
NTgtNTA2ZjhiNDg2ZTM1LzAxZmMxODE1LTM0ZWYtNDI0ZC04MjU4LTUwNmY4YjQ4
NmUzNS5jcmwwHwYDVR0jBBgwFoAUUaJ7qddOmwRfZds/wwhmgYTMQJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZm
OGI0ODZlMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiR8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGcXfIJYUMJrut6qwhQYMGxDVNucuYih0pA+U7BDP7VuOmsKFZf1eOn9
tzjAi7YdEEQFfhiDwD+fZjWqlmW9iPQL0fRz/xNR0FWhzbnQw0hwj0SQ5N0JFnvZ
8XVzRweUwJ9c70XFBw2oI8+wLOa+fBk5yZOXfkKWpa0nlGuFDv+M4eRkC8uho0YR
Ihpe33wlYUaBhKA5vymOTuQb/geJNfyO/MMGPIidgtpyHsxbeRe4ouU4Ro4XZinC
Bmp/5UYuwIIQOCIKchAmRpJ/UTh/FZboecFHx0CPbDcYUjizdYjxExYMQfbnTGaB
8X9h32b9aErUYDj+x8gN2dfJOtb52Rg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:34:12 2025 by rpki-client