Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa
File:                     50d0d793-6a99-3887-8de8-7232deb74b36.roa (raw, json)
Hash identifier:          KTTFVxd3XQrT2E55GHTLrVUSzxBC/+EslPGGTqTMBvc=
Subject key identifier:   6E:FF:05:A0:14:79:72:47:C4:47:CC:F8:0F:DD:D9:14:15:22:5C:86
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849D85F99B460E4ABE57D873E80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     271
IP address blocks:        207.23.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:99:b4:60:e4:ab:e5:7d:87:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=8b1746ec-bcd5-489f-ba4b-e9ceaa063119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:90:66:57:4e:1c:55:8b:9a:d2:03:29:ea:
                    ef:3c:31:9f:7c:58:18:bd:ab:c0:5b:ff:50:d8:57:
                    fe:e6:40:76:f9:72:fc:41:5f:fb:56:10:39:e0:3c:
                    d6:5f:fb:6a:44:f9:1d:f3:83:0b:4c:3e:8b:68:71:
                    63:65:ff:84:6f:b6:0e:b3:94:91:4e:03:ea:f3:6f:
                    cd:4f:aa:45:93:b6:ab:0e:e3:97:37:7e:29:31:f1:
                    2f:13:62:e4:8e:85:59:ae:c7:97:55:e5:37:4e:c1:
                    c4:b8:69:4e:fe:96:dd:f6:52:ad:0d:4d:e9:8a:85:
                    63:d8:25:a0:f9:ac:c6:a7:33:14:00:82:a4:69:71:
                    6a:67:ec:35:aa:ac:b2:fd:4e:3a:84:69:95:25:93:
                    fb:f1:82:06:f8:11:15:74:d9:f9:c4:bb:7b:89:15:
                    f6:92:e5:ac:a5:02:9c:c3:ba:bc:b4:16:1f:74:5f:
                    23:7c:9c:0a:02:2c:a3:3e:ee:0b:7b:81:81:99:6b:
                    93:09:fd:72:ff:6d:7d:11:26:19:cf:bf:4d:24:0c:
                    39:97:65:cb:28:c4:88:86:42:f6:91:4f:5f:ec:72:
                    d6:e2:98:be:1b:9c:89:a0:4b:14:90:09:46:3f:6e:
                    0b:05:7d:3f:8d:5b:73:ef:3a:3e:2a:ec:e9:1a:84:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FF:05:A0:14:79:72:47:C4:47:CC:F8:0F:DD:D9:14:15:22:5C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/50d0d793-6a99-3887-8de8-7232deb74b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e7:d1:9b:58:6d:f0:67:30:01:b9:8d:9b:0f:4a:cc:cb:05:
         66:2c:4b:94:d7:c3:c2:c4:fd:f2:ff:d1:5a:43:bc:4b:a7:ce:
         a9:23:b7:b2:73:74:71:6f:35:79:7a:ff:0c:91:06:ad:b8:95:
         0a:4d:1e:a6:5e:79:8e:66:1d:d4:0f:17:ff:77:9f:5d:6b:4f:
         8c:bd:0e:7f:91:b5:17:32:39:10:de:8b:b8:18:7f:7d:5f:37:
         10:a9:b7:21:1b:71:34:3a:87:a5:e9:e4:49:4b:3c:dd:00:3c:
         d6:0f:2b:43:12:a2:2d:53:b8:68:5d:e2:51:dc:95:a7:d8:7f:
         75:91:f0:61:26:a5:1a:1d:6d:7e:5e:64:5b:d4:79:f3:e1:da:
         86:d1:8b:2a:27:83:d2:32:bc:76:fd:f1:d0:c0:8c:16:9e:40:
         49:3a:63:2a:dd:b3:66:19:28:1c:c9:f8:b0:c6:53:79:90:50:
         45:2e:3b:a0:06:5d:c2:de:ed:8c:c7:1f:8a:2f:d5:92:1c:10:
         e7:12:bd:03:87:42:e2:b0:14:5e:c1:d1:d4:2e:89:03:95:ea:
         2c:45:21:14:ae:ca:40:de:eb:0c:7d:e5:79:bf:07:23:db:77:
         7a:c4:e4:82:71:b5:d0:9b:fe:ce:f4:07:16:81:74:55:d9:c3:
         f4:6d:af:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5m0YOSr5X2HPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
OGIxNzQ2ZWMtYmNkNS00ODlmLWJhNGItZTljZWFhMDYzMTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjaQZldOHFWLmtIDKervPDGffFgYvavAW/9Q
2Ff+5kB2+XL8QV/7VhA54DzWX/tqRPkd84MLTD6LaHFjZf+Eb7YOs5SRTgPq82/N
T6pFk7arDuOXN34pMfEvE2LkjoVZrseXVeU3TsHEuGlO/pbd9lKtDU3pioVj2CWg
+azGpzMUAIKkaXFqZ+w1qqyy/U46hGmVJZP78YIG+BEVdNn5xLt7iRX2kuWspQKc
w7q8tBYfdF8jfJwKAiyjPu4Le4GBmWuTCf1y/219ESYZz79NJAw5l2XLKMSIhkL2
kU9f7HLW4pi+G5yJoEsUkAlGP24LBX0/jVtz7zo+KuzpGoRBQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG7/BaAUeXJHxEfM+A/d2RQVIlyGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTBkMGQ3OTMtNmE5OS0z
ODg3LThkZTgtNzIzMmRlYjc0YjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLn0ZtYbfBnMAG5jZsPSszLBWYsS5TXw8LE/fL/0VpDvEunzqkjt7Jz
dHFvNXl6/wyRBq24lQpNHqZeeY5mHdQPF/93n11rT4y9Dn+RtRcyORDei7gYf31f
NxCptyEbcTQ6h6Xp5ElLPN0APNYPK0MSoi1TuGhd4lHclafYf3WR8GEmpRodbX5e
ZFvUefPh2obRiyong9IyvHb98dDAjBaeQEk6Yyrds2YZKBzJ+LDGU3mQUEUuO6AG
XcLe7YzHH4ov1ZIcEOcSvQOHQuKwFF7B0dQuiQOV6ixFIRSuykDe6wx95Xm/ByPb
d3rE5IJxtdCb/s70BxaBdFXZw/Rtr/4=
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:49 2025 by rpki-client