Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/17f8c02f-636f-350b-8098-c65c470dc123.roa
File:                     17f8c02f-636f-350b-8098-c65c470dc123.roa (raw, json)
Hash identifier:          wHBwSZXljKOr3ppjW0DqNZDqtQe7LJhzW6SaMZlwVCw=
Subject key identifier:   30:63:CE:7C:04:09:50:08:C7:A7:F1:DB:0B:2A:30:97:66:29:05:7F
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F43285849D4352CC54918892F9D36ED00
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/17f8c02f-636f-350b-8098-c65c470dc123.roa
Signing time:             Mon 12 May 2025 13:12:20 +0000
ROA not before:           Mon 12 May 2025 13:12:20 +0000
ROA not after:            Sun 10 Aug 2025 13:12:20 +0000
asID:                     62610
IP address blocks:        198.1.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:35:2c:c5:49:18:89:2f:9d:36:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: May 12 13:12:20 2025 GMT
            Not After : Aug 10 13:12:20 2025 GMT
        Subject: CN=58efcf6c-386d-48c9-a3ea-c291b15eba54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:79:42:77:bf:c0:b4:06:cc:43:a1:df:70:
                    68:78:84:90:32:a2:0c:43:21:ef:dc:90:03:f3:97:
                    fb:df:34:6d:40:69:8e:6d:58:b5:24:60:fc:41:46:
                    c0:f8:cc:fd:37:da:ca:54:df:04:f0:b2:ca:db:9a:
                    d3:92:fc:bb:37:7f:cf:f1:12:91:46:30:35:dc:b4:
                    e7:23:3d:16:10:4a:23:35:c4:5a:9a:27:68:1b:2b:
                    8c:e2:04:67:cb:c2:b5:3d:74:6d:8b:53:e5:b8:e6:
                    0e:e0:4a:c4:23:54:f9:af:6b:e3:3f:b4:9b:19:ad:
                    a4:91:44:1a:7b:e7:e1:f9:36:8e:42:b4:7f:4a:7f:
                    5d:a4:fd:57:06:b2:55:d4:6c:b0:dd:21:84:5b:17:
                    a9:75:70:df:f6:9d:5c:28:82:69:d6:06:92:70:3b:
                    96:11:e5:dd:d3:eb:59:f1:0a:0c:2d:81:b8:20:e9:
                    36:bc:b4:98:5b:dd:50:95:75:06:d7:58:07:c5:ef:
                    06:62:d5:c8:6c:74:2d:79:0a:8c:f5:d3:2f:3d:cd:
                    73:b8:b4:6d:70:bc:c6:b4:88:f2:d7:eb:f6:0d:e1:
                    24:ae:75:92:d8:76:7e:5c:04:17:1f:1b:cf:c7:ec:
                    61:67:97:83:2b:13:25:d3:d7:79:a1:b0:57:c9:ce:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:63:CE:7C:04:09:50:08:C7:A7:F1:DB:0B:2A:30:97:66:29:05:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/17f8c02f-636f-350b-8098-c65c470dc123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:86:b5:4f:00:af:ce:20:4a:db:05:11:01:47:a4:63:26:
         34:3a:55:cb:ab:ff:16:9d:b4:38:cb:6c:f2:a0:f4:99:6b:1c:
         8a:91:86:d0:bb:e1:81:33:26:2a:b5:27:a1:69:7c:80:d8:23:
         5b:31:fc:3c:b2:74:98:08:cc:dd:3f:36:82:46:ef:82:30:f5:
         5f:7c:2c:44:27:c2:9d:d0:cd:25:da:ab:0b:30:8a:ce:c2:ef:
         76:45:02:bc:06:56:68:50:eb:91:c3:6a:14:ba:cc:54:ed:23:
         06:24:df:ed:56:d3:41:08:de:60:27:f3:e4:ee:3c:74:67:5a:
         1d:f3:60:53:28:09:71:9a:d7:9f:7c:29:e0:41:a1:b5:ac:e4:
         02:ee:e1:5f:c7:67:90:4a:17:0e:f0:7c:5b:77:ca:15:e4:7e:
         1f:e0:18:0e:65:5b:c4:a7:22:bd:08:8e:74:20:08:f8:e4:5a:
         ac:af:1f:6a:6f:78:8e:72:97:55:93:e3:8c:c9:a4:54:37:ed:
         5b:44:cc:f0:88:89:93:db:d3:27:81:4c:a4:ae:8e:f7:1a:db:
         da:d0:cc:ce:70:ad:16:57:5c:f4:b4:79:0c:66:5a:9b:54:d3:
         66:1b:04:32:50:34:70:a9:ca:04:9e:2c:91:0d:94:99:86:3c:
         ea:16:31:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUNSzFSRiJL5027QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MDUxMjEzMTIyMFoXDTI1MDgxMDEzMTIyMFowLzEtMCsGA1UEAxMk
NThlZmNmNmMtMzg2ZC00OGM5LWEzZWEtYzI5MWIxNWViYTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJN5Qne/wLQGzEOh33BoeISQMqIMQyHv3JAD
85f73zRtQGmObVi1JGD8QUbA+Mz9N9rKVN8E8LLK25rTkvy7N3/P8RKRRjA13LTn
Iz0WEEojNcRamidoGyuM4gRny8K1PXRti1PluOYO4ErEI1T5r2vjP7SbGa2kkUQa
e+fh+TaOQrR/Sn9dpP1XBrJV1Gyw3SGEWxepdXDf9p1cKIJp1gaScDuWEeXd0+tZ
8QoMLYG4IOk2vLSYW91QlXUG11gHxe8GYtXIbHQteQqM9dMvPc1zuLRtcLzGtIjy
1+v2DeEkrnWS2HZ+XAQXHxvPx+xhZ5eDKxMl09d5obBXyc6QjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBjznwECVAIx6fx2wsqMJdmKQV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMTdmOGMwMmYtNjM2Zi0z
NTBiLTgwOTgtYzY1YzQ3MGRjMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgH0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSKhrVPAK/OIErbBREBR6RjJjQ6Vcur/xadtDjLbPKg9JlrHIqRhtC7
4YEzJiq1J6FpfIDYI1sx/DyydJgIzN0/NoJG74Iw9V98LEQnwp3QzSXaqwswis7C
73ZFArwGVmhQ65HDahS6zFTtIwYk3+1W00EI3mAn8+TuPHRnWh3zYFMoCXGa1598
KeBBobWs5ALu4V/HZ5BKFw7wfFt3yhXkfh/gGA5lW8SnIr0IjnQgCPjkWqyvH2pv
eI5yl1WT44zJpFQ37VtEzPCIiZPb0yeBTKSujvca29rQzM5wrRZXXPS0eQxmWptU
02YbBDJQNHCpygSeLJENlJmGPOoWMWA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:57:56 2025 by rpki-client