Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa
File:                     7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa (raw, json)
Hash identifier:          5rE7MMPKWr27LLI+SvSwL3xgycJeViRGmuebcHKiNw0=
Subject key identifier:   74:C4:C8:7D:07:52:0E:F0:EF:37:33:20:DE:4A:97:A3:9C:93:AC:93
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849ED4FD1246A5830C34A0FE4C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     271
IP address blocks:        207.23.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d1:24:6a:58:30:c3:4a:0f:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=df380b4b-3da6-4c27-9b0d-1d778a78206c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b5:5d:49:52:15:4e:b2:1c:1f:13:bb:9a:ee:
                    6a:30:b0:f7:fc:b6:62:23:a4:47:92:aa:a1:e4:a8:
                    c9:c4:c8:95:20:99:f0:bd:64:a9:77:30:13:25:79:
                    44:95:c1:9e:60:dc:11:ac:4a:a8:37:f7:d4:43:2f:
                    87:94:da:c2:b7:44:d4:a5:ca:de:a8:6a:7e:37:cd:
                    e5:58:6b:58:0b:60:38:f0:a3:8d:39:35:73:57:dc:
                    24:fe:44:cd:a6:a4:4d:b0:3a:5d:81:c0:6f:c3:b2:
                    02:b8:c9:b3:89:30:b5:77:3f:53:32:0a:fa:51:a9:
                    21:a2:e3:05:17:43:88:b4:34:84:43:1f:48:2a:5c:
                    2d:40:a5:db:56:44:65:de:69:58:bf:ed:90:ae:e5:
                    e4:33:6f:38:b2:29:a5:e4:40:32:2e:f4:d6:37:cb:
                    b2:e2:ff:77:e8:61:ee:af:75:e6:1c:1a:00:00:f3:
                    3f:d7:4d:e5:6d:12:eb:2b:d0:42:21:8a:be:3b:c1:
                    ef:72:f7:15:f6:94:7e:45:e5:84:b2:61:28:bd:42:
                    0c:c2:ba:ef:32:8f:88:8a:91:f3:5d:1e:8e:eb:61:
                    d5:49:3d:6c:ef:03:0f:d5:59:cb:a0:4e:3e:1d:3e:
                    e2:b9:d3:ca:2a:0d:2a:25:2b:f9:99:c5:41:b2:8f:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C4:C8:7D:07:52:0E:F0:EF:37:33:20:DE:4A:97:A3:9C:93:AC:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7c82ade7-1689-3d7f-82d3-8dd6684e4ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ba:15:01:76:4a:72:d0:c6:f9:3d:9b:7c:e5:d5:e3:c1:fe:
         15:01:53:94:ab:7e:a8:0b:88:dd:bb:34:50:63:9a:e4:b7:5b:
         fa:d7:cc:1f:16:48:23:26:15:81:48:a5:4e:43:07:bc:b2:4c:
         e8:6e:92:b2:56:e0:7d:9d:7a:53:e4:79:ad:53:55:01:00:38:
         01:48:bd:f0:a7:7b:49:0f:84:46:d0:2b:ba:81:76:bc:c9:9e:
         d0:22:12:a6:b3:12:b8:ad:bb:de:b0:28:b6:73:33:4f:00:8f:
         89:ef:36:91:70:e5:c1:32:0a:4c:ba:60:8b:49:04:ee:4b:fb:
         fd:47:44:64:ab:94:5c:00:b8:a6:b7:bd:44:4b:7c:8a:d3:a8:
         35:31:0f:a5:82:d0:64:bd:a8:07:d3:9b:f4:86:99:36:08:ef:
         e5:0f:44:50:85:6a:63:e2:82:af:34:45:18:91:38:92:f8:4a:
         9b:e9:e4:4e:fb:96:c4:c8:68:1a:03:ab:5e:43:57:47:4d:62:
         0a:fd:8e:b4:51:a1:2e:71:3d:21:90:2e:88:e8:83:67:11:87:
         01:15:9c:72:84:e5:d5:46:8b:36:e4:8e:ca:44:de:ba:de:3c:
         78:53:ea:64:8e:35:fd:ff:8f:76:b5:de:f5:ac:70:97:76:05:
         78:25:ea:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9Ekalgww0oP5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
ZGYzODBiNGItM2RhNi00YzI3LTliMGQtMWQ3NzhhNzgyMDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bVdSVIVTrIcHxO7mu5qMLD3/LZiI6RHkqqh
5KjJxMiVIJnwvWSpdzATJXlElcGeYNwRrEqoN/fUQy+HlNrCt0TUpcreqGp+N83l
WGtYC2A48KONOTVzV9wk/kTNpqRNsDpdgcBvw7ICuMmziTC1dz9TMgr6UakhouMF
F0OItDSEQx9IKlwtQKXbVkRl3mlYv+2QruXkM284siml5EAyLvTWN8uy4v936GHu
r3XmHBoAAPM/103lbRLrK9BCIYq+O8HvcvcV9pR+ReWEsmEovUIMwrrvMo+IipHz
XR6O62HVST1s7wMP1VnLoE4+HT7iudPKKg0qJSv5mcVBso8nFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTEyH0HUg7w7zczIN5Kl6Ock6yTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvN2M4MmFkZTctMTY4OS0z
ZDdmLTgyZDMtOGRkNjY4NGU0Y2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxf7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK26FQF2SnLQxvk9m3zl1ePB/hUBU5SrfqgLiN27NFBjmuS3W/rXzB8W
SCMmFYFIpU5DB7yyTOhukrJW4H2delPkea1TVQEAOAFIvfCne0kPhEbQK7qBdrzJ
ntAiEqazEritu96wKLZzM08Aj4nvNpFw5cEyCky6YItJBO5L+/1HRGSrlFwAuKa3
vURLfIrTqDUxD6WC0GS9qAfTm/SGmTYI7+UPRFCFamPigq80RRiROJL4Spvp5E77
lsTIaBoDq15DV0dNYgr9jrRRoS5xPSGQLojog2cRhwEVnHKE5dVGizbkjspE3rre
PHhT6mSONf3/j3a13vWscJd2BXgl6uY=
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:41 2025 by rpki-client