Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad618db7-6404-3c03-a61a-40f206f400f6.roa
File:                     ad618db7-6404-3c03-a61a-40f206f400f6.roa (raw, json)
Hash identifier:          xapja4SYZSLuHf7f+9sryZYP46D9CPO0+tWTZhVxtwg=
Subject key identifier:   27:97:17:67:7E:9F:1E:25:FD:34:8B:22:E6:7E:64:9F:6F:B3:CA:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498769D5F531BCFB8EA929C180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad618db7-6404-3c03-a61a-40f206f400f6.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        209.47.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:d5:f5:31:bc:fb:8e:a9:29:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=c0c27667-d609-40ba-aea7-9d4759b3051f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:ce:e7:bb:16:77:fb:fd:ee:77:4f:1f:4e:
                    8d:a5:f7:e2:f8:95:cd:28:8f:ea:b8:6d:21:3d:e0:
                    b8:cb:8e:35:5d:ab:6f:0f:da:1a:5b:56:54:78:f1:
                    f5:a4:27:b9:a7:c9:87:c6:12:1e:60:e4:86:42:c5:
                    63:da:03:d3:99:72:08:43:24:c2:5d:07:22:34:7f:
                    01:72:e3:99:24:03:42:33:59:2b:c7:a2:20:97:a0:
                    ba:76:fd:b4:52:b9:29:82:c5:65:29:a8:a8:5b:15:
                    1e:df:4b:d9:4f:bb:d2:27:eb:04:77:73:34:b8:c2:
                    d3:d3:4d:5f:f5:c9:05:ee:9b:03:1d:e2:13:10:4d:
                    9b:c6:b0:d0:b7:a7:37:56:9d:ed:dd:dd:d2:c3:37:
                    ee:37:4b:51:2d:ff:86:9f:b3:51:c6:74:e7:69:0c:
                    c2:e6:39:03:43:3c:5e:68:ad:d3:f0:61:65:f2:b1:
                    74:da:a8:09:e1:33:49:4a:b2:93:26:da:5a:e7:fa:
                    58:38:2f:10:2c:c7:f6:bd:13:17:6a:f2:b2:3a:b8:
                    73:dc:e2:94:62:82:f1:45:21:c9:d0:23:55:61:62:
                    a4:c5:dd:c1:64:06:b5:01:fd:93:50:5c:75:5d:10:
                    b9:ab:7b:ae:fb:99:34:a5:3c:dd:a9:63:26:f9:10:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:97:17:67:7E:9F:1E:25:FD:34:8B:22:E6:7E:64:9F:6F:B3:CA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad618db7-6404-3c03-a61a-40f206f400f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.47.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:56:e0:a9:b7:1d:fc:2a:38:d2:7c:5d:2b:4f:b0:22:8f:
         77:10:a5:3b:d2:a2:f8:2a:b5:1a:4a:36:bd:42:cf:ac:a2:e5:
         c0:84:bf:c7:ba:ac:c4:d3:c6:da:67:60:3e:ec:de:3d:08:0f:
         f8:e9:73:77:92:c4:30:54:15:bb:ba:79:56:6e:06:3e:ff:5a:
         28:f8:95:cb:d9:0c:6f:d1:ef:01:a1:6e:d4:19:86:4f:65:fd:
         9d:24:4a:4c:4b:a4:58:e0:8e:50:e9:3c:08:2b:1b:11:6a:0d:
         d1:47:ec:91:80:f4:5d:e2:d5:1f:c3:c8:55:d4:16:aa:b1:36:
         9e:f8:89:e9:b9:e9:e1:c8:be:d3:a3:24:18:10:7b:59:78:ae:
         1e:54:53:26:f8:db:c9:41:b6:36:81:04:5e:88:de:18:16:39:
         e1:4e:e4:5d:0e:db:76:32:ff:44:c1:10:34:e4:52:fd:26:64:
         7d:d0:c4:b0:dc:d6:3f:2d:de:7a:78:f7:da:95:f1:59:ab:fa:
         27:20:3e:c9:d5:31:b5:90:44:9c:fe:74:6a:44:70:40:05:c2:
         13:09:6d:a9:56:5f:cc:ce:b0:f5:cc:62:7a:83:fa:91:13:a7:
         14:26:b4:35:5d:a5:85:c9:93:1d:09:34:66:d2:b8:57:dc:64:
         5a:74:26:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHadX1Mbz7jqkpwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
YzBjMjc2NjctZDYwOS00MGJhLWFlYTctOWQ0NzU5YjMwNTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qjO57sWd/v97ndPH06Npffi+JXNKI/quG0h
PeC4y441XatvD9oaW1ZUePH1pCe5p8mHxhIeYOSGQsVj2gPTmXIIQyTCXQciNH8B
cuOZJANCM1krx6Igl6C6dv20UrkpgsVlKaioWxUe30vZT7vSJ+sEd3M0uMLT001f
9ckF7psDHeITEE2bxrDQt6c3Vp3t3d3SwzfuN0tRLf+Gn7NRxnTnaQzC5jkDQzxe
aK3T8GFl8rF02qgJ4TNJSrKTJtpa5/pYOC8QLMf2vRMXavKyOrhz3OKUYoLxRSHJ
0CNVYWKkxd3BZAa1Af2TUFx1XRC5q3uu+5k0pTzdqWMm+RC9FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCeXF2d+nx4l/TSLIuZ+ZJ9vs8qQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWQ2MThkYjctNjQwNC0z
YzAzLWE2MWEtNDBmMjA2ZjQwMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0S/8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKfVuCptx38KjjSfF0rT7Aij3cQpTvSovgqtRpKNr1Cz6yi5cCEv8e6
rMTTxtpnYD7s3j0ID/jpc3eSxDBUFbu6eVZuBj7/Wij4lcvZDG/R7wGhbtQZhk9l
/Z0kSkxLpFjgjlDpPAgrGxFqDdFH7JGA9F3i1R/DyFXUFqqxNp74iem56eHIvtOj
JBgQe1l4rh5UUyb428lBtjaBBF6I3hgWOeFO5F0O23Yy/0TBEDTkUv0mZH3QxLDc
1j8t3np499qV8Vmr+icgPsnVMbWQRJz+dGpEcEAFwhMJbalWX8zOsPXMYnqD+pET
pxQmtDVdpYXJkx0JNGbSuFfcZFp0Jmo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:24 2025 by rpki-client