Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa
File:                     c50bf71f-42f4-380a-89be-7d4e918b0444.roa (raw, json)
Hash identifier:          4yj2u7FjeQ3dBbbntgsjRwVZSf3d+v4RA5fISA7j+Dk=
Subject key identifier:   5C:57:DD:6A:74:2C:8C:CC:5D:6F:B2:4D:9D:6F:85:BE:9C:86:CD:C4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F15F1ADD601389AA73B00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        209.53.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:15:f1:ad:d6:01:38:9a:a7:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=1610800e-551d-4950-a345-9ddc7aa79b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:b8:68:bb:03:79:92:63:2f:ff:63:05:3a:
                    4a:8e:64:94:ab:5f:41:54:11:f9:d4:2d:74:99:a1:
                    5b:84:25:11:2c:c1:58:63:cb:7a:1b:0f:ec:4c:59:
                    f2:94:9f:28:ae:eb:79:16:c5:76:f1:d0:4a:5a:5a:
                    e0:f2:06:d4:16:b2:7c:a4:c2:27:3c:99:89:93:05:
                    78:f0:37:ce:7d:5d:ea:67:2c:fa:dc:39:44:ee:da:
                    91:8c:92:11:a8:aa:dc:e3:35:cf:21:7e:ec:24:5f:
                    f5:fd:7a:d9:29:5b:00:a5:ee:18:df:f4:96:7b:1f:
                    f7:88:2d:19:bf:82:2d:22:d0:5e:b9:5e:d0:c9:da:
                    2e:d4:ec:0a:45:f0:d8:d2:1e:49:57:7e:ef:19:01:
                    bb:83:a7:03:06:13:96:4e:06:40:19:91:f9:09:05:
                    66:e2:08:b4:02:9a:ec:1b:2f:e6:03:f7:a9:22:88:
                    96:4d:fe:cb:ec:d9:4f:89:77:ab:73:87:91:a9:51:
                    37:56:67:5e:0c:3b:33:55:ab:09:8c:c8:bd:23:8a:
                    3b:35:e5:ec:c4:7a:0e:a6:b9:8b:19:83:50:c8:1c:
                    39:7c:ac:b5:68:fa:e8:92:25:0f:64:84:88:f4:9a:
                    3a:3b:40:18:6d:d1:60:7e:40:7d:a5:ad:56:8d:d3:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:57:DD:6A:74:2C:8C:CC:5D:6F:B2:4D:9D:6F:85:BE:9C:86:CD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:1e:de:30:5e:d3:a5:9e:2a:31:9f:2d:80:0d:3d:81:3e:
         58:e5:22:ae:f4:40:8c:b5:b5:90:bc:22:58:28:83:9e:41:44:
         fa:ea:f2:0a:40:3a:9f:09:98:67:1c:c5:c3:b5:b4:c5:01:e9:
         ef:66:0f:ec:4d:85:23:59:ba:4b:7c:d3:1d:81:88:21:2a:cf:
         f2:54:2f:c4:6d:34:0a:cb:0a:7f:1f:70:c6:c0:df:99:41:e9:
         4b:09:8d:4b:bc:1f:a1:ea:b0:5c:a3:78:c7:2d:55:c2:f0:16:
         38:74:96:9e:20:50:ba:63:4b:fe:69:2e:72:fb:00:86:7c:64:
         59:c9:d6:96:56:d7:23:23:71:0f:b7:95:8b:bb:4b:f2:9c:1d:
         15:be:eb:e0:4d:24:ec:f7:16:cc:07:b1:4a:88:40:c9:2d:50:
         5e:f1:f7:ab:b6:54:ad:78:d6:40:15:66:4f:9c:90:be:75:33:
         20:4a:4c:23:b1:ea:03:f8:d2:2b:e3:2b:be:c6:8a:2c:49:a5:
         08:a5:39:66:2c:f0:a8:7a:02:d0:40:45:03:26:47:4e:45:2a:
         d0:b9:bf:4d:34:f4:a6:56:5f:bf:ea:36:bd:72:fa:b7:da:9d:
         65:d4:c5:d8:9d:6f:70:6b:e8:a1:d0:40:b6:78:14:0e:ea:87:
         54:36:8c:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxXxrdYBOJqnOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk
MTYxMDgwMGUtNTUxZC00OTUwLWEzNDUtOWRkYzdhYTc5YjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9q4aLsDeZJjL/9jBTpKjmSUq19BVBH51C10
maFbhCURLMFYY8t6Gw/sTFnylJ8orut5FsV28dBKWlrg8gbUFrJ8pMInPJmJkwV4
8DfOfV3qZyz63DlE7tqRjJIRqKrc4zXPIX7sJF/1/XrZKVsApe4Y3/SWex/3iC0Z
v4ItItBeuV7Qydou1OwKRfDY0h5JV37vGQG7g6cDBhOWTgZAGZH5CQVm4gi0Aprs
Gy/mA/epIoiWTf7L7NlPiXerc4eRqVE3VmdeDDszVasJjMi9I4o7NeXsxHoOprmL
GYNQyBw5fKy1aProkiUPZISI9Jo6O0AYbdFgfkB9pa1WjdM4fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxX3Wp0LIzMXW+yTZ1vhb6chs3EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzUwYmY3MWYtNDJmNC0z
ODBhLTg5YmUtN2Q0ZTkxOGIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJIaHt4wXtOlnioxny2ADT2BPljlIq70QIy1tZC8Ilgog55BRPrq8gpA
Op8JmGccxcO1tMUB6e9mD+xNhSNZukt80x2BiCEqz/JUL8RtNArLCn8fcMbA35lB
6UsJjUu8H6HqsFyjeMctVcLwFjh0lp4gULpjS/5pLnL7AIZ8ZFnJ1pZW1yMjcQ+3
lYu7S/KcHRW+6+BNJOz3FswHsUqIQMktUF7x96u2VK141kAVZk+ckL51MyBKTCOx
6gP40ivjK77GiixJpQilOWYs8Kh6AtBARQMmR05FKtC5v0009KZWX7/qNr1y+rfa
nWXUxdidb3Br6KHQQLZ4FA7qh1Q2jB8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:20:21 2025 by rpki-client