Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa
File:                     48814ae4-6f1e-38ef-886c-c325b8f17548.roa (raw, json)
Hash identifier:          561yiGwvIMRF0pYm1HDYl+AXdnpdX6UILnM6jSH/jd8=
Subject key identifier:   DE:31:AC:89:AF:1E:49:1B:15:FC:86:2D:63:66:98:25:45:D3:DC:6D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F18FFE3804A660A5FA968
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        207.34.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:18:ff:e3:80:4a:66:0a:5f:a9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=49b9f021-78b8-438e-af8a-d479dc92699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:85:91:e4:6b:0e:0d:04:ea:0f:85:a6:2a:99:
                    64:fe:9f:4c:fb:4e:ce:9d:06:8e:c5:64:56:ab:3b:
                    e5:8a:3f:4e:32:23:b5:e1:46:fa:f4:f9:9e:7e:ef:
                    a0:fd:df:1e:c8:9b:59:db:8b:77:05:fd:98:3f:a6:
                    a2:21:00:d6:b5:e8:6b:ae:82:d7:1f:b1:4c:f6:fb:
                    8e:6e:9e:db:c0:4d:9c:30:66:5a:82:84:f0:86:be:
                    1c:0e:4c:6b:2d:66:b9:71:4e:9e:af:3f:b1:62:17:
                    3f:3e:61:13:69:74:7c:82:e9:81:64:67:48:14:93:
                    c8:69:2a:10:46:11:97:e9:62:73:d1:95:66:7b:f5:
                    9e:e3:ab:1b:ef:1f:d4:aa:ee:bf:d2:e2:16:fd:a4:
                    db:a8:c3:6c:a3:3b:e5:23:5e:b6:3d:cf:fe:3d:d4:
                    72:07:5f:50:57:f7:d6:f4:43:1a:30:99:83:5d:cc:
                    45:0d:a8:bd:2a:a5:62:fe:2f:72:1e:2a:9e:5b:b3:
                    c1:5b:99:43:f2:a1:96:03:a1:81:06:2a:56:24:0d:
                    30:dd:60:43:4b:7d:79:a6:58:f0:23:ed:e9:2f:a1:
                    fc:6d:d9:1b:a0:7c:a4:b9:f2:46:d3:73:91:59:2a:
                    57:13:16:0d:53:e1:fc:ed:e5:44:16:b7:55:4b:8c:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:31:AC:89:AF:1E:49:1B:15:FC:86:2D:63:66:98:25:45:D3:DC:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/48814ae4-6f1e-38ef-886c-c325b8f17548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:12:c8:6c:2c:99:46:ee:ba:f3:de:17:d3:3d:ff:15:44:fd:
         b2:86:63:2e:d4:45:65:82:04:f3:ab:ce:db:71:7a:62:6b:0b:
         14:cd:1c:44:33:e8:e4:f8:8e:49:5c:8f:1b:19:3a:36:82:7c:
         a8:71:f4:56:ba:37:a3:a9:ca:61:5f:5e:31:0c:74:85:f9:15:
         55:f6:b0:1a:ae:bb:bd:18:a4:44:45:89:2f:05:d1:d5:76:7f:
         46:f4:fe:9b:d7:6a:ae:f7:14:66:8c:f2:3a:d2:56:e8:6c:27:
         4d:97:7f:30:b5:49:0d:c3:c0:d7:99:fa:e9:82:24:a4:9b:bc:
         c7:41:fb:01:0c:15:0a:09:15:a2:09:a0:a5:22:54:fc:e2:66:
         b9:c9:c7:57:12:db:2c:85:fb:56:4f:fe:4e:4f:87:1a:ca:0a:
         7b:af:62:83:36:0d:f3:92:02:ac:5c:4e:31:a9:13:38:7f:c3:
         53:41:22:86:e5:2a:9a:57:d2:40:dd:2c:e6:01:f4:f4:7d:b2:
         50:bf:6e:cd:72:5e:26:61:b4:df:79:a2:c1:f6:1a:f0:4d:93:
         d5:ea:1c:b8:2e:ed:b0:e1:73:95:a1:92:38:13:c7:b7:c6:3f:
         5a:56:23:3b:a7:f1:da:0e:6d:5a:a0:fd:c0:85:eb:75:c5:8d:
         71:de:30:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxj/44BKZgpfqWgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk
NDliOWYwMjEtNzhiOC00MzhlLWFmOGEtZDQ3OWRjOTI2OTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIWR5GsODQTqD4WmKplk/p9M+07OnQaOxWRW
qzvlij9OMiO14Ub69Pmefu+g/d8eyJtZ24t3Bf2YP6aiIQDWtehrroLXH7FM9vuO
bp7bwE2cMGZagoTwhr4cDkxrLWa5cU6erz+xYhc/PmETaXR8gumBZGdIFJPIaSoQ
RhGX6WJz0ZVme/We46sb7x/Uqu6/0uIW/aTbqMNsozvlI162Pc/+PdRyB19QV/fW
9EMaMJmDXcxFDai9KqVi/i9yHiqeW7PBW5lD8qGWA6GBBipWJA0w3WBDS315pljw
I+3pL6H8bdkboHykufJG03ORWSpXExYNU+H87eVEFrdVS4yVKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4xrImvHkkbFfyGLWNmmCVF09xtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDg4MTRhZTQtNmYxZS0z
OGVmLTg4NmMtYzMyNWI4ZjE3NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyLdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwSyGwsmUbuuvPeF9M9/xVE/bKGYy7URWWCBPOrzttxemJrCxTNHEQz
6OT4jklcjxsZOjaCfKhx9Fa6N6OpymFfXjEMdIX5FVX2sBquu70YpERFiS8F0dV2
f0b0/pvXaq73FGaM8jrSVuhsJ02XfzC1SQ3DwNeZ+umCJKSbvMdB+wEMFQoJFaIJ
oKUiVPziZrnJx1cS2yyF+1ZP/k5PhxrKCnuvYoM2DfOSAqxcTjGpEzh/w1NBIobl
KppX0kDdLOYB9PR9slC/bs1yXiZhtN95osH2GvBNk9XqHLgu7bDhc5WhkjgTx7fG
P1pWIzun8doObVqg/cCF63XFjXHeMOk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:47:18 2025 by rpki-client