Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/32f48392-9704-3164-bbdf-7267e0cda60f.roa
File:                     32f48392-9704-3164-bbdf-7267e0cda60f.roa (raw, json)
Hash identifier:          qNjdnb5LzURctyXimC/hNnU5ISWpddjRNM21Q2BQd0Q=
Subject key identifier:   F7:4C:AE:09:32:2C:47:66:C9:B6:7F:4A:67:CA:47:CC:10:D1:3F:A7
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BABBE41940C80DE3A59A50
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/32f48392-9704-3164-bbdf-7267e0cda60f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        209.107.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:bb:e4:19:40:c8:0d:e3:a5:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b498b606-d592-4d42-ac02-0f8ecfa7e56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:48:84:8b:c3:23:38:ad:11:02:9e:6a:38:
                    70:d2:3e:d1:2e:9e:99:72:42:20:75:90:fc:d1:1e:
                    21:c2:40:af:18:6f:81:ab:de:80:29:0c:3e:90:65:
                    05:fe:b6:8e:c4:0a:76:6e:44:37:83:84:c0:89:05:
                    64:f9:33:6e:12:b8:34:0c:a9:3a:9c:47:77:6a:d8:
                    e6:26:42:75:14:82:f8:2b:03:14:50:7b:1a:5f:e7:
                    f3:b2:8f:c4:84:33:43:ae:8a:10:fb:0e:f7:1d:c3:
                    e5:3f:b6:e7:fa:05:fe:89:b1:38:03:38:29:48:f0:
                    e0:d9:f6:bb:83:6f:bd:31:fb:87:1d:ad:9c:43:55:
                    f4:a3:75:44:2a:65:ac:a4:bf:18:74:4d:45:43:6b:
                    ee:51:0c:57:1e:4a:2c:d9:cc:22:ed:1f:9e:89:35:
                    8a:b4:d6:2d:aa:40:8f:3f:d3:9d:ae:5d:14:a9:a1:
                    0d:75:4c:96:ad:9d:24:3f:3f:69:d2:13:25:5b:ee:
                    37:39:85:35:31:f9:e3:0e:fd:86:0f:f0:c1:db:d8:
                    08:e3:3c:83:78:94:c1:95:e7:e1:10:ed:50:12:12:
                    8b:07:36:86:44:f1:7a:ac:c2:17:68:10:1f:c7:34:
                    3c:5a:1e:f1:37:85:64:90:79:ed:bb:9a:fc:6b:e5:
                    cf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:AE:09:32:2C:47:66:C9:B6:7F:4A:67:CA:47:CC:10:D1:3F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/32f48392-9704-3164-bbdf-7267e0cda60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:0d:34:ba:4a:56:61:12:5c:2c:07:6c:6d:d1:70:85:c4:
         bf:be:98:3d:d4:48:6c:6c:82:61:72:d2:ce:95:b7:e7:ea:49:
         ed:dd:88:4c:1b:f4:3c:20:a7:94:1e:25:90:4b:71:18:bd:81:
         01:0b:97:7e:0e:73:23:01:0e:19:27:e0:6b:93:40:53:1b:a0:
         4c:18:d2:32:86:70:73:ab:18:4f:d5:39:fc:a0:2d:45:2b:4c:
         15:e2:82:ec:b2:ca:2b:31:1b:3a:b4:d4:19:fc:c5:93:a2:dd:
         61:8b:39:2b:9c:48:36:99:4a:0f:ec:39:ac:39:80:b5:18:f9:
         be:b0:4f:6c:f2:d4:f2:e7:ce:40:8b:34:b0:9a:43:53:52:5d:
         5e:4b:b8:86:de:72:f4:dc:e0:42:05:d6:0b:b7:aa:69:c0:e2:
         5e:16:ce:30:ff:d9:8e:29:d2:1e:76:5c:98:fc:2f:09:b6:8b:
         e5:54:51:33:44:f7:97:65:6b:d0:b9:d6:75:1c:44:95:7b:8d:
         38:6c:ef:1f:ec:b7:e1:0d:aa:29:a5:9a:30:4c:1c:cc:69:25:
         c9:3a:2a:2e:b7:84:9b:b1:b8:de:42:ae:15:df:e8:3a:f9:35:
         74:45:70:b6:10:e3:27:7f:7d:bd:12:d2:2b:2d:2d:e4:d8:c9:
         9a:59:8e:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurvkGUDIDeOlmlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YjQ5OGI2MDYtZDU5Mi00ZDQyLWFjMDItMGY4ZWNmYTdlNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYJIhIvDIzitEQKeajhw0j7RLp6ZckIgdZD8
0R4hwkCvGG+Bq96AKQw+kGUF/raOxAp2bkQ3g4TAiQVk+TNuErg0DKk6nEd3atjm
JkJ1FIL4KwMUUHsaX+fzso/EhDNDrooQ+w73HcPlP7bn+gX+ibE4AzgpSPDg2fa7
g2+9MfuHHa2cQ1X0o3VEKmWspL8YdE1FQ2vuUQxXHkos2cwi7R+eiTWKtNYtqkCP
P9Odrl0UqaENdUyWrZ0kPz9p0hMlW+43OYU1MfnjDv2GD/DB29gI4zyDeJTBlefh
EO1QEhKLBzaGRPF6rMIXaBAfxzQ8Wh7xN4VkkHntu5r8a+XPaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdMrgkyLEdmybZ/SmfKR8wQ0T+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvMzJmNDgzOTItOTcwNC0z
MTY0LWJiZGYtNzI2N2UwY2RhNjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Wu6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFltDTS6SlZhElwsB2xt0XCFxL++mD3USGxsgmFy0s6Vt+fqSe3diEwb
9Dwgp5QeJZBLcRi9gQELl34OcyMBDhkn4GuTQFMboEwY0jKGcHOrGE/VOfygLUUr
TBXiguyyyisxGzq01Bn8xZOi3WGLOSucSDaZSg/sOaw5gLUY+b6wT2zy1PLnzkCL
NLCaQ1NSXV5LuIbecvTc4EIF1gu3qmnA4l4WzjD/2Y4p0h52XJj8Lwm2i+VUUTNE
95dla9C51nUcRJV7jThs7x/st+ENqimlmjBMHMxpJck6Ki63hJuxuN5CrhXf6Dr5
NXRFcLYQ4yd/fb0S0istLeTYyZpZjgk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:32 2025 by rpki-client