Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa
File:                     59401f7c-af88-37e4-b7e8-44bc381ea339.roa (raw, json)
Hash identifier:          x3EK3CfeddYypyqH8AMgheN+APYQudZtoh2N8qGIFF8=
Subject key identifier:   17:F6:EB:0E:2D:CC:AA:60:5D:46:C5:A0:51:32:8A:E1:41:04:D8:02
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849ABB4A3D62BFD3719C41F6A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     64267
IP address blocks:        152.44.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a3:d6:2b:fd:37:19:c4:1f:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=c9d6ec3c-9591-4d79-a1ae-8c7fe7b3f514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:7a:99:54:62:fe:07:53:81:16:a0:b3:cd:
                    b4:06:c4:2d:c1:ce:fd:aa:01:95:3f:c6:31:c9:1c:
                    11:ec:28:51:ac:f6:4f:dc:3f:f7:22:41:30:a3:34:
                    12:ad:4f:8a:61:c0:4f:ed:9d:4a:34:b8:d7:c2:d3:
                    4a:21:a6:04:93:41:83:e8:b2:fd:76:b2:54:b5:66:
                    f7:8e:0f:6b:d8:fa:a6:25:01:4b:8e:2f:16:cd:14:
                    a5:09:a7:df:a9:ff:e2:cd:18:47:0c:c0:f8:dc:4e:
                    c8:e3:0b:36:fe:4f:46:8d:28:13:3a:9d:91:3f:7c:
                    7b:b4:a2:62:dc:53:c0:60:98:5f:d1:d1:c9:a5:16:
                    a3:c2:45:a0:44:84:e8:16:09:4d:f9:09:e2:4d:b4:
                    43:eb:00:5e:c0:32:ef:8c:0e:f9:a2:87:7b:49:6d:
                    c5:7e:b8:89:10:05:57:77:eb:d2:de:39:83:6f:e7:
                    23:d3:16:97:ab:90:73:ad:b7:cd:ad:bc:06:9a:24:
                    51:22:64:84:31:6c:d4:15:44:69:87:55:f9:b9:a8:
                    c8:c6:43:3e:a1:84:cb:a1:8b:8d:0b:e5:65:10:a6:
                    6b:f7:da:ee:e2:86:d6:0c:0a:cb:a7:cb:13:2f:74:
                    d1:ed:78:2e:05:f7:56:48:3a:73:24:7b:54:1c:61:
                    6c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F6:EB:0E:2D:CC:AA:60:5D:46:C5:A0:51:32:8A:E1:41:04:D8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/59401f7c-af88-37e4-b7e8-44bc381ea339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:13:00:60:ab:15:92:88:d4:27:c4:fe:19:5d:f9:6d:c8:
         ac:11:69:6f:3f:c7:94:19:e1:34:ac:79:22:b8:e1:76:61:24:
         65:81:d7:97:ea:ec:e6:25:a0:51:4e:09:31:c1:42:06:9d:d2:
         34:5e:e5:67:6d:34:01:82:de:7b:3c:92:1d:a4:c4:6c:41:af:
         33:4d:94:08:fa:de:24:4e:aa:bc:94:3c:2a:ac:62:a6:4a:b5:
         59:7f:e7:d2:d1:66:78:7e:7b:dd:c5:e8:c4:49:e0:96:d8:d0:
         b6:0b:d3:ad:2a:4e:b1:87:9d:cd:e8:7f:57:53:cb:9a:e9:f0:
         e2:77:4e:72:83:88:20:84:e4:d4:fe:69:bb:94:c0:72:cd:8a:
         aa:b5:69:b7:9f:4e:f1:72:73:27:a0:78:4c:f7:af:11:2f:95:
         34:a3:26:e6:c9:cf:45:ba:cc:8a:6e:06:50:2f:e7:8e:c7:94:
         b9:6f:ee:d4:7b:72:15:45:46:d3:ec:92:01:bd:4d:c7:4c:3e:
         c6:c4:7a:e8:ce:3d:10:2f:89:8a:8c:d4:3e:4b:40:5c:f2:a9:
         d8:68:15:ce:2a:58:9b:6b:61:cb:be:b3:e7:3f:cf:76:a1:a3:
         73:56:1b:6e:58:41:bc:0b:c7:0e:95:0b:ed:c0:41:a7:cf:e5:
         0f:31:21:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKPWK/03GcQfaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
YzlkNmVjM2MtOTU5MS00ZDc5LWExYWUtOGM3ZmU3YjNmNTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF16mVRi/gdTgRags820BsQtwc79qgGVP8Yx
yRwR7ChRrPZP3D/3IkEwozQSrU+KYcBP7Z1KNLjXwtNKIaYEk0GD6LL9drJUtWb3
jg9r2PqmJQFLji8WzRSlCaffqf/izRhHDMD43E7I4ws2/k9GjSgTOp2RP3x7tKJi
3FPAYJhf0dHJpRajwkWgRIToFglN+QniTbRD6wBewDLvjA75ood7SW3FfriJEAVX
d+vS3jmDb+cj0xaXq5BzrbfNrbwGmiRRImSEMWzUFURph1X5uajIxkM+oYTLoYuN
C+VlEKZr99ru4obWDArLp8sTL3TR7XguBfdWSDpzJHtUHGFsiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBf26w4tzKpgXUbFoFEyiuFBBNgCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNTk0MDFmN2MtYWY4OC0z
N2U0LWI3ZTgtNDRiYzM4MWVhMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCxoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGrEwBgqxWSiNQnxP4ZXfltyKwRaW8/x5QZ4TSseSK44XZhJGWB15fq
7OYloFFOCTHBQgad0jRe5WdtNAGC3ns8kh2kxGxBrzNNlAj63iROqryUPCqsYqZK
tVl/59LRZnh+e93F6MRJ4JbY0LYL060qTrGHnc3of1dTy5rp8OJ3TnKDiCCE5NT+
abuUwHLNiqq1abefTvFycyegeEz3rxEvlTSjJubJz0W6zIpuBlAv547HlLlv7tR7
chVFRtPskgG9TcdMPsbEeujOPRAviYqM1D5LQFzyqdhoFc4qWJtrYcu+s+c/z3ah
o3NWG25YQbwLxw6VC+3AQafP5Q8xIcI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:32 2025 by rpki-client