Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
File:                     f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa (raw, json)
Hash identifier:          SceSZBGTgmjE272nUzU+an4pnKca7ALycyc0yrcZyiU=
Subject key identifier:   51:33:AE:0D:BD:C0:BD:A6:A9:98:A8:06:12:E5:6B:87:78:CB:DE:E2
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584A23C00CECE8F323B92E26A000
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16604
IP address blocks:        209.124.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0c:ec:e8:f3:23:b9:2e:26:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=e2f8357f-77c1-42f7-b2fd-03c6dec0dd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:93:08:a9:d4:ca:1c:7b:ff:02:73:46:c8:
                    7a:ae:e6:6b:66:2b:26:1f:46:90:8b:14:92:7a:32:
                    a2:7e:f9:be:cb:e2:82:cf:ee:0f:4b:8b:f2:1b:53:
                    69:ec:5a:f1:19:c8:4d:79:a6:c1:be:d8:ab:e6:1a:
                    f3:9e:2a:e8:a5:50:ef:c3:b8:90:fe:7e:70:c8:cc:
                    5b:a7:37:f3:50:b0:d1:e7:df:71:57:61:1a:47:0d:
                    3f:2d:6b:1b:eb:e3:d8:74:88:ee:1e:4c:67:6d:b7:
                    d8:33:94:d3:9e:70:09:80:80:c0:89:ed:eb:60:01:
                    94:6e:0d:bb:12:f8:69:83:21:8f:cd:59:46:c0:1c:
                    ab:6f:cc:cf:c1:c3:27:ea:c6:d0:cc:cb:77:48:64:
                    0d:3e:4a:6d:68:21:1a:32:8e:62:9c:c0:3d:e8:12:
                    cb:4c:5c:96:d7:d6:9c:51:7f:2e:06:91:8e:b0:63:
                    12:80:53:d5:a3:7a:24:8e:d9:f7:06:99:d5:40:8d:
                    d2:d8:5b:56:fb:cf:d1:f2:2c:1b:e7:ad:85:85:24:
                    de:e4:f0:ee:15:cb:26:02:d9:39:13:77:34:b5:35:
                    b4:d6:eb:e6:7f:f6:3d:16:71:80:2b:ed:ba:22:ea:
                    99:ec:2e:6a:d3:ec:4e:8d:91:39:6f:a2:f1:3d:0c:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:33:AE:0D:BD:C0:BD:A6:A9:98:A8:06:12:E5:6B:87:78:CB:DE:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:47:ca:fe:b2:06:06:ba:5a:a6:dd:e0:5e:0d:a2:da:8d:
         23:5a:64:51:8c:c2:92:46:58:58:aa:46:98:7e:e8:bf:9e:39:
         fe:90:e8:0c:65:8d:8a:b3:68:6f:25:77:f2:72:dc:da:32:c5:
         70:5a:53:a9:17:9f:4d:8c:84:29:fb:13:43:be:9c:2b:c4:6c:
         32:5b:e9:12:94:e9:ec:b6:cc:56:a6:37:0b:f1:2b:4e:67:1b:
         10:d7:4d:0a:45:6b:f8:30:04:01:45:bb:90:fb:1b:90:0a:32:
         4b:4e:81:f7:d3:0b:26:07:19:f7:b9:5f:91:be:8b:12:b6:94:
         fa:be:78:ea:75:eb:33:e1:09:b1:b2:25:eb:46:a4:a2:d0:02:
         97:fa:5c:48:2a:65:bf:59:65:45:44:15:1f:f0:3d:b1:3c:2b:
         bf:54:55:09:dd:d4:c0:65:da:72:b6:d0:ca:58:92:f2:0c:c0:
         57:3f:28:2b:de:c3:52:c7:fe:e2:45:22:dd:7f:be:e0:ba:58:
         b2:de:1f:47:54:fc:e5:6f:18:b0:d4:f1:b7:32:0b:b9:3e:0c:
         35:83:a5:44:9c:1c:e4:a9:8c:66:47:57:e4:38:0a:6b:53:01:
         ce:74:fb:08:c7:d0:ca:16:d9:54:a0:8c:ce:08:5f:ad:09:60:
         60:89:30:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAzs6PMjuS4moAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2
ZGJlMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
ZTJmODM1N2YtNzdjMS00MmY3LWIyZmQtMDNjNmRlYzBkZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQOTCKnUyhx7/wJzRsh6ruZrZismH0aQixSS
ejKifvm+y+KCz+4PS4vyG1Np7FrxGchNeabBvtir5hrzniropVDvw7iQ/n5wyMxb
pzfzULDR599xV2EaRw0/LWsb6+PYdIjuHkxnbbfYM5TTnnAJgIDAie3rYAGUbg27
EvhpgyGPzVlGwByrb8zPwcMn6sbQzMt3SGQNPkptaCEaMo5inMA96BLLTFyW19ac
UX8uBpGOsGMSgFPVo3okjtn3BpnVQI3S2FtW+8/R8iwb562FhSTe5PDuFcsmAtk5
E3c0tTW01uvmf/Y9FnGAK+26IuqZ7C5q0+xOjZE5b6LxPQzaWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEzrg29wL2mqZioBhLla4d4y97iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3
ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvZjQ0ZDFmYzEtN2I3Ny0z
MTU2LTkyMTQtNGEyYTA1OWMyYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm
OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz
NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi
Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFs9R8r+sgYGulqm3eBeDaLajSNaZFGMwpJGWFiqRph+6L+eOf6Q6Axl
jYqzaG8ld/Jy3NoyxXBaU6kXn02MhCn7E0O+nCvEbDJb6RKU6ey2zFamNwvxK05n
GxDXTQpFa/gwBAFFu5D7G5AKMktOgffTCyYHGfe5X5G+ixK2lPq+eOp16zPhCbGy
JetGpKLQApf6XEgqZb9ZZUVEFR/wPbE8K79UVQnd1MBl2nK20MpYkvIMwFc/KCve
w1LH/uJFIt1/vuC6WLLeH0dU/OVvGLDU8bcyC7k+DDWDpUScHOSpjGZHV+Q4CmtT
Ac50+wjH0MoW2VSgjM4IX60JYGCJMJM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:17:50 2025 by rpki-client