Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa
File:                     f8690b69-feea-3870-a431-f819071fa236.roa (raw, json)
Hash identifier:          zGj7w27oOoweXqTYC7G2DIVHgj3B/kAjbObANmOuIG0=
Subject key identifier:   37:28:80:C1:FC:5B:A9:97:42:66:85:17:D0:20:19:4E:86:7C:F5:4A
Certificate issuer:       /CN=355b6459-d3e6-4569-b278-aef1a714f5bf
Certificate serial:       010D0C9F4328584992949E14DA12A64708326F00
Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     1708
IP address blocks:        204.63.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9e:14:da:12:a6:47:08:32:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=a6a21793-8892-4c82-8b10-92d324784367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:fd:38:c0:b9:11:02:97:8f:46:35:0e:f7:
                    e4:3b:76:38:bd:bb:02:67:94:1f:54:aa:2a:72:ce:
                    8c:93:d5:b7:1e:51:31:5f:85:70:be:6a:05:e7:da:
                    7f:37:e4:a4:56:96:16:cc:83:f4:17:02:51:b2:fa:
                    22:6f:68:fe:cb:3a:2f:47:79:31:d3:65:9b:ab:9f:
                    7b:77:34:0c:af:08:9c:7b:18:eb:44:22:98:07:c3:
                    70:ad:57:a2:6f:dc:11:f1:39:90:ac:36:08:38:c8:
                    5b:da:f6:f7:1c:85:92:ac:bb:26:79:4a:5a:49:19:
                    6c:44:67:49:61:be:a6:28:b0:25:59:39:f1:65:88:
                    eb:ed:90:16:e3:28:c5:f9:80:2e:65:ce:35:fd:70:
                    a0:b9:dd:59:b3:8b:30:96:01:e7:c0:e5:bb:38:15:
                    5b:ac:de:44:65:7d:e4:8b:bd:b5:3d:e2:a1:74:70:
                    49:c6:5a:4b:37:6b:fa:3a:f1:5d:d9:70:db:6f:13:
                    14:ee:31:6c:9f:e1:5a:17:bf:48:ae:47:65:1f:87:
                    a6:41:31:3a:25:c5:6c:f2:51:53:8e:57:30:c6:1c:
                    a9:c5:61:b1:07:e5:0a:77:b4:fa:cd:c7:7c:3a:8d:
                    45:a4:2f:64:7b:ab:3c:58:50:c3:0e:88:7f:da:a6:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:28:80:C1:FC:5B:A9:97:42:66:85:17:D0:20:19:4E:86:7C:F5:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl

            X509v3 Authority Key Identifier:
                keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:a5:ab:be:12:57:36:b9:13:7a:9e:e6:ae:41:de:fd:a2:
         5b:75:47:50:1f:d3:ce:3b:70:98:42:7a:ed:2a:9a:68:65:42:
         da:ba:b7:4b:de:87:ea:40:86:4f:9e:a3:e4:bc:3b:46:93:9f:
         a0:33:a7:1e:9a:19:af:ac:5c:d7:c6:06:bd:ab:ec:7d:81:a4:
         d8:cf:64:4c:ed:00:09:00:8a:1c:4c:b6:1e:64:da:9d:81:be:
         cc:b3:d1:85:7a:40:d7:c2:e6:25:ea:91:ba:70:0e:35:24:14:
         59:38:75:d7:fc:78:b7:aa:74:8e:9c:cf:af:0e:25:4b:cf:c4:
         cb:b3:8e:4d:3c:09:5d:3a:85:8b:d5:51:6e:73:92:e3:0d:60:
         e6:67:b0:c5:a3:d7:df:9a:ba:c8:c4:f2:40:fb:0a:11:b5:5c:
         d2:86:dd:e5:59:5a:f9:c6:7c:0d:83:02:6b:e4:fb:78:5a:b6:
         cc:65:a9:58:7c:3f:d7:be:7c:8e:4f:60:2d:1b:32:43:1b:ef:
         63:2a:d7:46:3d:80:78:b4:b2:83:27:c0:d0:64:4b:f7:8e:72:
         84:79:19:da:15:fd:21:dc:6b:20:f0:2f:b5:6e:ba:d6:34:81:
         d6:61:aa:74:b9:d4:1e:3b:8d:87:34:3d:14:e4:a0:a6:c6:0c:
         d8:e7:e2:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJ4U2hKmRwgybwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzU1YjY0NTktZDNlNi00NTY5LWIyNzgtYWVmMWE3MTRm
NWJmMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
YTZhMjE3OTMtODg5Mi00YzgyLThiMTAtOTJkMzI0Nzg0MzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspX9OMC5EQKXj0Y1DvfkO3Y4vbsCZ5QfVKoq
cs6Mk9W3HlExX4VwvmoF59p/N+SkVpYWzIP0FwJRsvoib2j+yzovR3kx02Wbq597
dzQMrwicexjrRCKYB8NwrVeib9wR8TmQrDYIOMhb2vb3HIWSrLsmeUpaSRlsRGdJ
Yb6mKLAlWTnxZYjr7ZAW4yjF+YAuZc41/XCgud1Zs4swlgHnwOW7OBVbrN5EZX3k
i721PeKhdHBJxlpLN2v6OvFd2XDbbxMU7jFsn+FaF79IrkdlH4emQTE6JcVs8lFT
jlcwxhypxWGxB+UKd7T6zcd8Oo1FpC9ke6s8WFDDDoh/2qbymQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcogMH8W6mXQmaFF9AgGU6GfPVKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNTVi
NjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYxYTcxNGY1YmYvZjg2OTBiNjktZmVlYS0z
ODcwLWE0MzEtZjgxOTA3MWZhMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzU1YjY0NTktZDNlNi00NTY5LWIy
NzgtYWVmMWE3MTRmNWJmLzM1NWI2NDU5LWQzZTYtNDU2OS1iMjc4LWFlZjFhNzE0
ZjViZi5jcmwwHwYDVR0jBBgwFoAUyqsRcpuAwoivyZCDHeuMBEYEGMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zNTViNjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYx
YTcxNGY1YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD+FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxVpau+Elc2uRN6nuauQd79olt1R1Af0847cJhCeu0qmmhlQtq6t0ve
h+pAhk+eo+S8O0aTn6Azpx6aGa+sXNfGBr2r7H2BpNjPZEztAAkAihxMth5k2p2B
vsyz0YV6QNfC5iXqkbpwDjUkFFk4ddf8eLeqdI6cz68OJUvPxMuzjk08CV06hYvV
UW5zkuMNYOZnsMWj19+ausjE8kD7ChG1XNKG3eVZWvnGfA2DAmvk+3hatsxlqVh8
P9e+fI5PYC0bMkMb72Mq10Y9gHi0soMnwNBkS/eOcoR5GdoV/SHcayDwL7VuutY0
gdZhqnS51B47jYc0PRTkoKbGDNjn4mw=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:11:06 2025 by rpki-client