Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/e1d0b812-da0e-35b4-b87e-f6fae9fb7b44.roa
File:                     e1d0b812-da0e-35b4-b87e-f6fae9fb7b44.roa (raw, json)
Hash identifier:          aW6hVC1gAOuMe+6VDEWkWC6KLD+lUQKdx7fvXtCqWh8=
Subject key identifier:   0E:9D:ED:EA:A2:8E:BC:2B:E1:29:44:DB:2C:92:9C:B7:4C:73:1C:6D
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584A00DAC5DB438941B194A1E240
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/e1d0b812-da0e-35b4-b87e-f6fae9fb7b44.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     17055
IP address blocks:        198.60.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c5:db:43:89:41:b1:94:a1:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e35f1b9f-54ad-45b2-953e-91742594239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:1c:19:0e:c5:04:67:f9:a0:41:9b:1d:eb:
                    8b:45:79:bd:78:fe:9e:b6:d9:fa:46:78:9a:a1:da:
                    a5:fd:cb:82:07:52:fa:52:68:5d:95:9a:21:ee:f6:
                    b5:7b:a0:32:aa:b2:cd:e2:a9:ed:29:f8:c9:40:04:
                    d0:72:f7:f2:3f:60:38:0d:7c:0c:af:6a:34:7c:cf:
                    c1:93:31:2d:f5:2d:25:40:54:d2:cf:55:c3:33:fd:
                    6f:98:de:6a:1b:ee:c8:4a:dd:72:0f:23:e0:70:ad:
                    91:56:20:55:2f:58:d5:4b:85:fe:cd:fb:e5:a1:59:
                    d3:66:78:89:c9:c6:94:65:33:dc:c4:0e:9a:d1:48:
                    b7:3d:28:95:1b:ea:ea:32:16:d4:3c:79:ab:ee:92:
                    39:ba:ea:53:77:fa:f1:85:b4:cc:12:d2:07:b3:4c:
                    f4:50:cd:ce:dd:89:3f:cd:07:80:26:83:6b:f2:ca:
                    f5:1d:d6:c3:06:34:97:0e:57:a0:cf:68:44:16:2d:
                    bf:7e:67:d6:5c:af:27:66:14:d8:56:19:57:77:a5:
                    35:f3:d8:0b:b0:ea:ad:a0:a3:47:a4:bf:62:a9:7a:
                    db:63:44:42:a2:0b:d7:61:c0:fc:a2:70:b0:6f:a3:
                    d0:7e:30:83:4c:85:98:ed:37:df:5b:64:dc:5e:9c:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9D:ED:EA:A2:8E:BC:2B:E1:29:44:DB:2C:92:9C:B7:4C:73:1C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/e1d0b812-da0e-35b4-b87e-f6fae9fb7b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:42:a5:75:44:79:26:d2:1f:1b:d5:e2:4b:bf:07:e8:e4:dd:
         4a:c3:14:af:08:6d:d3:63:9c:17:c9:28:4f:94:85:a4:58:5b:
         80:4b:4d:95:7c:f2:60:70:c1:bb:15:1f:f1:57:d9:9c:c0:6a:
         11:a1:37:d5:88:6b:60:c7:13:55:c2:9a:73:d5:a5:15:99:24:
         58:98:1a:75:78:77:40:49:a9:0d:07:99:d5:b3:ff:6f:14:42:
         cf:6d:48:1a:2f:ef:f0:94:da:4a:14:d6:03:7c:8f:a7:e3:a6:
         83:e3:6b:dd:92:13:c9:0a:e6:a6:c6:16:de:7d:ac:65:0e:46:
         3b:5a:a3:6c:d2:87:b5:66:72:3b:48:0c:38:85:7f:4e:85:bc:
         2c:d0:46:81:99:8e:e3:4f:88:13:5d:0a:bd:a8:92:02:d3:14:
         5e:b1:3f:3a:b7:d3:fd:48:40:53:28:4b:51:7d:ec:e7:3e:65:
         0e:b1:6f:a4:13:41:fd:41:d7:ea:25:0a:78:25:d8:73:9e:53:
         15:45:53:fd:63:54:93:10:c3:8c:d1:57:c9:90:3c:56:eb:04:
         ad:bc:5c:3d:ce:b5:72:a9:9d:4f:6e:50:66:0d:43:58:62:d1:
         51:7b:bd:ac:29:29:b8:18:a6:d7:c6:ba:df:52:1f:89:fa:72:
         3f:ff:86:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2sXbQ4lBsZSh4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx
NTNmMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZTM1ZjFiOWYtNTRhZC00NWIyLTk1M2UtOTE3NDI1OTQyMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMIcGQ7FBGf5oEGbHeuLRXm9eP6ettn6Rnia
odql/cuCB1L6UmhdlZoh7va1e6AyqrLN4qntKfjJQATQcvfyP2A4DXwMr2o0fM/B
kzEt9S0lQFTSz1XDM/1vmN5qG+7ISt1yDyPgcK2RViBVL1jVS4X+zfvloVnTZniJ
ycaUZTPcxA6a0Ui3PSiVG+rqMhbUPHmr7pI5uupTd/rxhbTMEtIHs0z0UM3O3Yk/
zQeAJoNr8sr1HdbDBjSXDlegz2hEFi2/fmfWXK8nZhTYVhlXd6U189gLsOqtoKNH
pL9iqXrbY0RCogvXYcD8onCwb6PQfjCDTIWY7TffW2TcXpy6IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6d7eqijrwr4SlE2yySnLdMcxxtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0
OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvZTFkMGI4MTItZGEwZS0z
NWI0LWI4N2UtZjZmYWU5ZmI3YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk
YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh
MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4
YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxjwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdCpXVEeSbSHxvV4ku/B+jk3UrDFK8IbdNjnBfJKE+UhaRYW4BLTZV8
8mBwwbsVH/FX2ZzAahGhN9WIa2DHE1XCmnPVpRWZJFiYGnV4d0BJqQ0HmdWz/28U
Qs9tSBov7/CU2koU1gN8j6fjpoPja92SE8kK5qbGFt59rGUORjtao2zSh7VmcjtI
DDiFf06FvCzQRoGZjuNPiBNdCr2okgLTFF6xPzq30/1IQFMoS1F97Oc+ZQ6xb6QT
Qf1B1+olCngl2HOeUxVFU/1jVJMQw4zRV8mQPFbrBK28XD3OtXKpnU9uUGYNQ1hi
0VF7vawpKbgYptfGut9SH4n6cj//hl8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:57 2025 by rpki-client