Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9305f154-5dfa-3f7d-9be8-843f892701fe.roa
File:                     9305f154-5dfa-3f7d-9be8-843f892701fe.roa (raw, json)
Hash identifier:          4DELH9TU8NxDgPaVsC1x3dbUFz+9kUokEYzcYTgtDaE=
Subject key identifier:   27:EA:AA:A2:3C:B8:4F:54:47:4D:A4:F3:E7:8D:E3:57:98:DD:BD:1D
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F432858494469479EA95DC7D61DBF63C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9305f154-5dfa-3f7d-9be8-843f892701fe.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        24.53.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:47:9e:a9:5d:c7:d6:1d:bf:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=1a7a292c-35ab-4adc-be12-98152c65f5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:45:df:1d:43:7f:67:db:7d:5c:f4:76:f1:
                    e8:c0:52:46:32:8c:b8:1c:3f:10:d7:ef:4a:a2:62:
                    48:49:d5:65:f4:1c:58:6e:11:4d:bc:dc:37:be:a0:
                    4c:4a:6e:80:88:84:56:32:84:2f:9b:af:ec:57:4b:
                    e1:fa:63:a8:eb:fb:c0:28:a3:f5:46:34:ab:0e:c6:
                    3d:66:8c:ed:e7:0d:66:6c:2f:c5:b1:f3:f6:ac:1d:
                    93:0a:cf:90:1f:f8:f4:8d:73:4e:2a:f3:99:22:c2:
                    7e:2a:7d:8f:a2:34:d0:cd:37:da:99:db:8c:fa:6b:
                    f0:a4:52:26:b1:f8:63:5a:f8:ad:f1:7a:d9:e8:38:
                    1c:68:83:1e:3d:14:2e:04:b8:4a:5f:e4:7e:39:02:
                    85:c6:37:3f:be:a0:3e:2d:87:b1:2a:54:e4:1c:c3:
                    f3:c5:54:ba:40:29:ef:a6:42:5f:57:b4:86:b9:14:
                    cb:19:7d:ef:c7:da:10:64:4f:3e:a2:0e:8e:d0:77:
                    a5:3d:ca:bf:05:92:aa:c2:5b:e0:c5:42:b2:5c:0a:
                    25:e5:a6:fd:88:46:99:f7:d1:05:cb:1e:e9:eb:d8:
                    aa:52:4d:4c:89:69:59:ac:73:f2:74:89:01:2e:ef:
                    40:e3:30:bc:98:3c:a5:46:e5:b0:c5:fb:3e:94:7f:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:AA:A2:3C:B8:4F:54:47:4D:A4:F3:E7:8D:E3:57:98:DD:BD:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9305f154-5dfa-3f7d-9be8-843f892701fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:79:a1:1e:58:23:03:16:67:82:90:53:72:e5:5a:e1:21:dd:
         6f:f3:42:f2:3c:b5:ab:8f:12:4a:48:79:0c:0a:2b:ba:4c:39:
         bf:55:15:d0:64:fd:8d:13:b6:71:d5:b3:15:fb:ab:42:b7:12:
         2a:18:2e:05:43:8b:01:83:7b:a1:c0:f4:0d:34:15:15:32:af:
         38:e6:52:9b:79:65:f0:da:6a:5b:02:e4:99:fb:4f:1e:db:f5:
         3c:56:ee:eb:ad:b5:5c:26:2c:a8:29:82:98:c3:fa:80:a5:93:
         76:e0:31:eb:a2:ee:db:f7:34:37:51:17:33:ff:cb:11:7c:ec:
         a9:5e:a1:eb:86:80:a6:49:67:58:cf:5b:3e:a6:3e:3c:24:4f:
         c6:d8:61:d9:60:1c:7e:05:94:65:1b:35:90:94:46:8e:bf:61:
         0f:89:84:8a:7f:1f:48:4a:a5:cb:1b:7b:c6:0a:47:e1:3d:c1:
         88:2a:0f:72:27:15:2e:71:db:29:78:d9:c2:e5:9d:fd:98:5c:
         14:ab:56:88:4e:54:b4:80:87:5c:ea:ac:e4:f4:d3:4d:c0:36:
         5b:71:cb:d9:ea:0b:7e:83:9c:30:b9:92:84:05:8d:d8:72:8e:
         95:7a:33:4d:71:24:12:02:44:ec:c2:82:33:15:1f:b7:3f:d0:
         0b:b5:cf:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUeeqV3H1h2/Y8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
MWE3YTI5MmMtMzVhYi00YWRjLWJlMTItOTgxNTJjNjVmNWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY1F3x1Df2fbfVz0dvHowFJGMoy4HD8Q1+9K
omJISdVl9BxYbhFNvNw3vqBMSm6AiIRWMoQvm6/sV0vh+mOo6/vAKKP1RjSrDsY9
Zozt5w1mbC/FsfP2rB2TCs+QH/j0jXNOKvOZIsJ+Kn2PojTQzTfamduM+mvwpFIm
sfhjWvit8XrZ6DgcaIMePRQuBLhKX+R+OQKFxjc/vqA+LYexKlTkHMPzxVS6QCnv
pkJfV7SGuRTLGX3vx9oQZE8+og6O0HelPcq/BZKqwlvgxUKyXAol5ab9iEaZ99EF
yx7p69iqUk1MiWlZrHPydIkBLu9A4zC8mDylRuWwxfs+lH+1NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfqqqI8uE9UR02k8+eN41eY3b0dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvOTMwNWYxNTQtNWRmYS0z
ZjdkLTliZTgtODQzZjg5MjcwMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJ5oR5YIwMWZ4KQU3LlWuEh3W/zQvI8tauPEkpIeQwKK7pMOb9VFdBk
/Y0TtnHVsxX7q0K3EioYLgVDiwGDe6HA9A00FRUyrzjmUpt5ZfDaalsC5Jn7Tx7b
9TxW7uuttVwmLKgpgpjD+oClk3bgMeui7tv3NDdRFzP/yxF87KleoeuGgKZJZ1jP
Wz6mPjwkT8bYYdlgHH4FlGUbNZCURo6/YQ+JhIp/H0hKpcsbe8YKR+E9wYgqD3In
FS5x2yl42cLlnf2YXBSrVohOVLSAh1zqrOT0003ANltxy9nqC36DnDC5koQFjdhy
jpV6M01xJBICROzCgjMVH7c/0Au1zzw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:04 2025 by rpki-client