Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa
File:                     90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa (raw, json)
Hash identifier:          Em6GhZOzkvHVybTvxbAXyn2l2An/MkaWYc/r+qh5PsI=
Subject key identifier:   58:31:C8:54:20:5C:FB:D2:00:BF:B1:7D:02:9C:87:28:F3:5D:8B:B3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584981D455A5F66BD3D46ECCC1D4
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     211440
IP address blocks:        203.17.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:55:a5:f6:6b:d3:d4:6e:cc:c1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=d8ca0ff7-29b1-4508-bc3e-a5e6b7c21823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:9c:76:da:31:2f:66:2a:cc:66:67:a2:cb:
                    99:18:0c:c5:45:b3:89:8c:f2:4a:1f:19:e1:27:c4:
                    e6:64:23:f1:08:d3:2e:44:f1:75:47:7b:14:b8:9a:
                    82:66:9b:eb:90:06:0d:32:34:ee:ab:19:19:76:bf:
                    2b:47:0e:a0:11:83:64:8a:bf:e8:1c:7c:5e:9a:6d:
                    eb:75:21:fc:ac:3f:50:ac:81:62:16:0c:90:b6:a9:
                    8c:09:7e:5f:32:ba:1d:98:2e:55:14:e8:e4:52:55:
                    11:10:57:bb:72:48:52:69:ae:c2:de:bd:15:09:a4:
                    9d:25:68:a1:16:b6:19:10:fb:8c:b3:bc:48:76:2e:
                    81:3b:bf:af:fc:a6:ef:5c:39:5e:d2:18:49:87:7c:
                    66:44:37:11:ed:ce:b9:72:fd:76:37:f7:01:88:4a:
                    5d:50:b7:84:12:cb:02:1a:89:0a:fe:48:e0:cb:30:
                    b2:22:8b:9b:6a:f8:43:3f:47:95:48:5d:e4:f4:f8:
                    a4:af:12:e0:a4:e3:60:aa:7f:10:37:ed:d1:6b:ae:
                    76:f6:1d:2b:c3:2b:79:59:04:06:9a:ed:ce:17:7b:
                    ba:cf:df:58:f3:e7:2d:ba:12:64:b2:17:04:27:c0:
                    07:fd:d4:c5:69:06:fc:86:10:f1:a9:cb:e0:7f:8e:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:C8:54:20:5C:FB:D2:00:BF:B1:7D:02:9C:87:28:F3:5D:8B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/90c34aea-cb20-3723-8d5a-2a619d6f5dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.17.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:53:18:9c:6e:90:2c:e5:f3:1a:93:04:b9:16:f7:54:77:
         5c:d4:ad:4e:3b:5d:35:a2:cd:6e:c6:54:0e:2e:22:ca:98:e1:
         ce:a8:73:d8:dd:4b:17:cb:18:a1:6e:e9:c1:c9:bd:d5:e5:24:
         e3:78:f9:03:85:d2:f9:ce:2c:70:34:2d:f6:58:07:bd:fd:17:
         19:f7:db:0e:7f:cd:4c:2a:0d:fd:6a:51:86:54:58:f8:33:5d:
         e9:3d:93:f1:87:d3:f2:fa:f2:29:27:9c:a0:9c:33:b3:33:0b:
         89:ad:2b:9d:76:0e:7a:88:20:41:e0:40:18:8c:8d:ce:ac:cc:
         2e:ca:9b:9e:e8:b9:ba:67:48:eb:3a:7d:a1:a5:9a:28:c4:de:
         21:f1:c4:08:cc:39:cc:ef:fe:bd:01:04:c8:01:cd:7b:24:64:
         5e:20:67:d8:b2:0e:85:50:19:65:f9:d6:f8:5c:fd:d2:79:9c:
         6a:81:42:7f:0c:4b:23:bb:c6:79:b5:7a:07:48:6b:3c:4d:8b:
         92:9a:1b:66:af:7d:55:6c:66:8d:79:de:76:a4:4f:7e:3f:3d:
         71:b5:fa:67:9e:f8:9c:26:9c:0f:ad:d7:cc:09:33:58:86:f2:
         9b:a1:fa:0c:67:61:75:2b:2d:7b:84:ab:f6:02:3f:7f:f5:e1:
         c5:2d:ef:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1FWl9mvT1G7MwdQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk
ZDhjYTBmZjctMjliMS00NTA4LWJjM2UtYTVlNmI3YzIxODIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdOcdtoxL2YqzGZnosuZGAzFRbOJjPJKHxnh
J8TmZCPxCNMuRPF1R3sUuJqCZpvrkAYNMjTuqxkZdr8rRw6gEYNkir/oHHxemm3r
dSH8rD9QrIFiFgyQtqmMCX5fMrodmC5VFOjkUlUREFe7ckhSaa7C3r0VCaSdJWih
FrYZEPuMs7xIdi6BO7+v/KbvXDle0hhJh3xmRDcR7c65cv12N/cBiEpdULeEEssC
GokK/kjgyzCyIoubavhDP0eVSF3k9PikrxLgpONgqn8QN+3Ra6529h0rwyt5WQQG
mu3OF3u6z99Y8+ctuhJkshcEJ8AH/dTFaQb8hhDxqcvgf44u/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgxyFQgXPvSAL+xfQKchyjzXYuzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOTBjMzRhZWEtY2IyMC0z
NzIzLThkNWEtMmE2MTlkNmY1ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyxF7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA64UxicbpAs5fMakwS5FvdUd1zUrU47XTWizW7GVA4uIsqY4c6oc9jd
SxfLGKFu6cHJvdXlJON4+QOF0vnOLHA0LfZYB739Fxn32w5/zUwqDf1qUYZUWPgz
Xek9k/GH0/L68iknnKCcM7MzC4mtK512DnqIIEHgQBiMjc6szC7Km57oubpnSOs6
faGlmijE3iHxxAjMOczv/r0BBMgBzXskZF4gZ9iyDoVQGWX51vhc/dJ5nGqBQn8M
SyO7xnm1egdIazxNi5KaG2avfVVsZo153nakT34/PXG1+mee+JwmnA+t18wJM1iG
8puh+gxnYXUrLXuEq/YCP3/14cUt7+I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:43:58 2025 by rpki-client