Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa
File:                     804ef55f-16ef-36d7-851a-f40ec93a302c.roa (raw, json)
Hash identifier:          pUYvnO3Br7remV5+aYLlZrczH3ji6gC0aE5Gqitut3w=
Subject key identifier:   A0:14:E2:E4:C1:46:34:74:67:A0:81:D6:9A:D2:BF:24:3F:39:96:82
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584964843D53F7651C9D097FD020
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     61317
IP address blocks:        216.24.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:3d:53:f7:65:1c:9d:09:7f:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=f8f1aa81-1dce-4dc5-9a8a-0440aabe712a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:e1:e0:d8:99:ac:eb:e5:d3:2d:c2:bd:6a:
                    fa:20:b5:04:1a:4c:01:b6:8e:6f:0a:d4:17:7f:a6:
                    e0:8b:20:37:25:db:9f:05:ce:9d:3b:8d:86:6d:de:
                    43:d2:3d:b9:28:bd:eb:3f:c8:5d:9b:c7:47:ff:ee:
                    3e:2e:4e:5a:d1:4f:53:28:e0:80:e0:a0:46:74:97:
                    78:4b:97:5f:2a:a3:93:e3:db:14:0a:9a:0e:34:66:
                    09:1f:a4:01:5f:a4:ad:ba:c0:8e:41:ea:73:1f:14:
                    25:79:34:4c:88:85:38:e3:78:35:54:21:9e:d9:c8:
                    56:6e:54:2d:7c:3c:74:a9:77:15:4a:d9:a1:97:9b:
                    11:ee:d3:db:40:a7:95:6d:0e:5d:ee:67:ed:96:42:
                    4e:d0:00:79:70:74:e1:aa:4a:04:40:09:a1:4c:50:
                    2a:34:77:87:4b:ae:c3:ad:69:e9:01:4d:b3:dd:75:
                    87:4d:87:0f:73:82:3b:cd:8a:e2:b7:e2:97:a6:ca:
                    aa:c2:fe:39:c3:10:6b:72:2d:af:af:07:9b:be:ac:
                    e3:13:41:1f:00:6b:55:2d:73:59:16:5c:9b:cc:ef:
                    e1:4c:fb:a3:f1:2e:e4:f1:12:99:02:3b:3a:6e:aa:
                    4b:13:b0:8b:4b:92:54:f1:41:b7:b4:6b:49:69:89:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:14:E2:E4:C1:46:34:74:67:A0:81:D6:9A:D2:BF:24:3F:39:96:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/804ef55f-16ef-36d7-851a-f40ec93a302c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:7d:b7:18:76:7f:33:65:b2:e7:95:73:61:29:fa:c0:55:
         d1:ee:29:a4:ab:b9:84:75:93:9e:56:5a:39:4c:1b:db:bb:80:
         d7:a9:3b:33:59:76:c2:11:12:7f:95:c4:70:12:8f:48:3b:41:
         47:28:ce:01:f1:fa:7c:21:63:e0:5b:2e:a5:dc:98:74:c9:5a:
         e7:19:75:9d:c7:c1:62:1f:4e:20:7f:25:1d:17:14:0a:93:d5:
         76:64:e7:b4:17:a1:87:6b:09:e6:8e:2b:74:ef:1e:be:8c:7c:
         48:a6:d4:ec:bd:02:be:8e:bb:8b:45:94:ba:54:69:da:b4:08:
         2b:0c:19:b9:b9:65:39:48:72:51:fb:cd:ef:c6:07:ff:01:0d:
         5a:3b:e0:4c:40:ae:a5:af:33:02:84:04:a1:22:87:5a:62:a0:
         e4:a3:65:1d:dc:f4:a2:ec:91:63:d1:f6:bf:9b:82:3a:b4:c8:
         d0:ef:0a:59:58:5a:3a:c4:65:a6:47:c7:26:28:1f:5a:42:c5:
         86:22:98:c1:1e:2c:69:f2:6d:aa:a0:9f:c5:54:62:b0:47:25:
         f2:7d:38:d5:e8:15:73:d8:5a:8d:aa:51:21:03:af:e4:e7:1e:
         aa:fb:2a:21:73:68:63:75:cd:dd:c4:d3:eb:b5:39:7c:cd:f5:
         c9:14:b4:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhD1T92UcnQl/0CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
ZjhmMWFhODEtMWRjZS00ZGM1LTlhOGEtMDQ0MGFhYmU3MTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi87h4NiZrOvl0y3CvWr6ILUEGkwBto5vCtQX
f6bgiyA3JdufBc6dO42Gbd5D0j25KL3rP8hdm8dH/+4+Lk5a0U9TKOCA4KBGdJd4
S5dfKqOT49sUCpoONGYJH6QBX6StusCOQepzHxQleTRMiIU443g1VCGe2chWblQt
fDx0qXcVStmhl5sR7tPbQKeVbQ5d7mftlkJO0AB5cHThqkoEQAmhTFAqNHeHS67D
rWnpAU2z3XWHTYcPc4I7zYrit+KXpsqqwv45wxBrci2vrwebvqzjE0EfAGtVLXNZ
FlybzO/hTPuj8S7k8RKZAjs6bqpLE7CLS5JU8UG3tGtJaYlNtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAU4uTBRjR0Z6CB1prSvyQ/OZaCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvODA0ZWY1NWYtMTZlZi0z
NmQ3LTg1MWEtZjQwZWM5M2EzMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BjTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6nfbcYdn8zZbLnlXNhKfrAVdHuKaSruYR1k55WWjlMG9u7gNepOzNZ
dsIREn+VxHASj0g7QUcozgHx+nwhY+BbLqXcmHTJWucZdZ3HwWIfTiB/JR0XFAqT
1XZk57QXoYdrCeaOK3TvHr6MfEim1Oy9Ar6Ou4tFlLpUadq0CCsMGbm5ZTlIclH7
ze/GB/8BDVo74ExArqWvMwKEBKEih1pioOSjZR3c9KLskWPR9r+bgjq0yNDvCllY
WjrEZaZHxyYoH1pCxYYimMEeLGnybaqgn8VUYrBHJfJ9ONXoFXPYWo2qUSEDr+Tn
Hqr7KiFzaGN1zd3E0+u1OXzN9ckUtIw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:16 2025 by rpki-client