Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa
File:                     7d3a6f69-a7a5-360a-9bae-570514940a1f.roa (raw, json)
Hash identifier:          VoMRctiZj95AOPk+lTuxFSy8/xF90t4McKuiBnfCzOE=
Subject key identifier:   7B:61:B1:EF:32:05:A1:0B:4A:D4:45:6F:90:C6:65:71:29:5B:07:95
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F432858495ABEE120998C21BE62866740
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        170.200.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e1:20:99:8c:21:be:62:86:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=cfe102c3-85a9-4958-a271-6dfa94a231ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:7c:27:a8:74:ff:ff:17:60:6b:6b:29:53:
                    c4:5c:fa:d6:d5:1f:a4:b7:3c:28:f8:16:e1:a7:8c:
                    8d:6d:9f:21:67:ad:e3:20:a0:c0:23:ee:29:f7:56:
                    3b:f4:50:56:a4:1e:50:61:af:2c:f4:ff:4f:17:7e:
                    80:c0:4d:e2:33:a9:ca:37:b2:40:a3:e4:16:66:c1:
                    ce:96:47:63:35:f4:48:08:1e:8a:d0:ea:ba:2f:15:
                    db:35:59:b2:b9:3d:f6:ed:60:1e:8e:5f:87:6e:cd:
                    8d:64:78:c0:84:ef:ed:77:e3:05:fb:cd:a6:7d:f3:
                    80:ca:dd:7e:32:90:f9:e5:37:8b:e8:ea:35:4e:f5:
                    9f:b5:96:d9:2c:4a:7d:99:e1:8b:9c:2d:94:67:7d:
                    36:28:ea:c8:d1:c7:a6:6e:91:30:a9:f2:8c:2c:ef:
                    71:87:60:58:56:e7:17:11:ad:f6:d2:f3:90:b9:d7:
                    7b:8b:93:9f:c2:00:83:3b:40:cc:31:86:b7:18:fa:
                    81:1e:53:48:ee:2c:5c:e5:d2:13:db:7b:24:68:6b:
                    ba:fd:16:d4:b8:6c:99:aa:7f:8e:2b:00:04:41:01:
                    26:b3:43:23:53:80:47:5f:71:82:d6:b9:80:e9:c7:
                    e9:ec:be:f9:5a:38:3c:3a:65:94:bd:18:90:8d:fd:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:61:B1:EF:32:05:A1:0B:4A:D4:45:6F:90:C6:65:71:29:5B:07:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/7d3a6f69-a7a5-360a-9bae-570514940a1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:44:d7:88:ff:46:14:0a:28:51:56:73:45:e0:2d:a2:f9:c1:
         93:e7:53:ca:32:89:93:6a:33:85:d4:4b:06:f9:ef:72:cc:6e:
         75:09:e5:85:e9:b6:ee:c5:99:34:cb:73:11:8b:f5:74:59:cf:
         03:92:40:ef:1b:c6:14:f1:44:18:4d:bc:c7:03:60:6e:96:06:
         cb:11:2a:03:07:d4:f3:88:c0:99:4d:ae:16:7b:fe:64:26:a8:
         36:ec:4f:7b:a6:81:10:40:c4:78:77:83:8f:b1:a5:49:f9:ca:
         21:c6:a7:92:fc:6d:d3:12:4f:61:65:d4:57:05:5f:61:f8:5d:
         a7:bc:ba:81:cb:23:33:cc:ed:21:f4:7f:fe:2a:a2:8c:49:01:
         d5:81:2b:75:b7:ee:3c:11:12:3e:16:7a:8a:36:23:67:80:3f:
         d3:b3:fd:d7:28:cc:77:0d:bd:b3:fb:52:a4:0f:ad:cd:ac:63:
         a9:dd:9d:6c:d8:29:8a:49:84:97:86:cf:a6:f9:76:c7:88:96:
         78:6f:23:c4:67:36:5b:9a:55:79:64:18:50:d0:2e:c4:06:7d:
         f3:c5:e6:aa:03:50:fa:8b:4a:6d:02:c6:20:d0:c8:8d:c7:11:
         5b:a6:fe:e2:1f:94:9d:0f:09:c4:86:e8:44:1e:37:d0:70:f8:
         81:ce:2e:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuEgmYwhvmKGZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk
MGJkMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
Y2ZlMTAyYzMtODVhOS00OTU4LWEyNzEtNmRmYTk0YTIzMWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhet8J6h0//8XYGtrKVPEXPrW1R+ktzwo+Bbh
p4yNbZ8hZ63jIKDAI+4p91Y79FBWpB5QYa8s9P9PF36AwE3iM6nKN7JAo+QWZsHO
lkdjNfRICB6K0Oq6LxXbNVmyuT327WAejl+Hbs2NZHjAhO/td+MF+82mffOAyt1+
MpD55TeL6Oo1TvWftZbZLEp9meGLnC2UZ302KOrI0cembpEwqfKMLO9xh2BYVucX
Ea320vOQudd7i5OfwgCDO0DMMYa3GPqBHlNI7ixc5dIT23skaGu6/RbUuGyZqn+O
KwAEQQEms0MjU4BHX3GC1rmA6cfp7L75Wjg8OmWUvRiQjf3qtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHthse8yBaELStRFb5DGZXEpWweVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk
NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvN2QzYTZmNjktYTdhNS0z
NjBhLTliYWUtNTcwNTE0OTQwYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw
Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi
ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj
NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVE14j/RhQKKFFWc0XgLaL5wZPnU8oyiZNqM4XUSwb573LMbnUJ5YXp
tu7FmTTLcxGL9XRZzwOSQO8bxhTxRBhNvMcDYG6WBssRKgMH1POIwJlNrhZ7/mQm
qDbsT3umgRBAxHh3g4+xpUn5yiHGp5L8bdMST2Fl1FcFX2H4Xae8uoHLIzPM7SH0
f/4qooxJAdWBK3W37jwREj4Weoo2I2eAP9Oz/dcozHcNvbP7UqQPrc2sY6ndnWzY
KYpJhJeGz6b5dseIlnhvI8RnNluaVXlkGFDQLsQGffPF5qoDUPqLSm0CxiDQyI3H
EVum/uIflJ0PCcSG6EQeN9Bw+IHOLnc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:18:26 2025 by rpki-client