Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/941a69b6-928b-3428-90c7-2003c80230cb.roa
File:                     941a69b6-928b-3428-90c7-2003c80230cb.roa (raw, json)
Hash identifier:          /CEqIZNp+3KBbevwmKrs2Lnmywd9XiLUaIDzodK8xhg=
Subject key identifier:   37:7F:D3:51:BD:29:8C:3E:38:93:E5:91:ED:D2:CA:B0:4B:0B:B3:E6
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584940397C1C347FD4BC2FB95500
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/941a69b6-928b-3428-90c7-2003c80230cb.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     399734
IP address blocks:        8.46.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7c:1c:34:7f:d4:bc:2f:b9:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=75b7ef81-d3b6-4b62-abfd-7761d983f9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:86:4c:e0:24:23:93:2f:08:0f:a9:b4:ba:
                    74:bf:9d:50:14:6a:84:3b:9b:7c:31:75:0e:35:bf:
                    17:12:2f:c5:d9:92:c5:f0:e5:17:9d:23:66:af:ae:
                    43:2e:90:04:8e:f2:1c:47:d6:10:1e:fc:99:f6:94:
                    1b:c1:b5:5b:80:26:e1:f4:4c:dd:8c:53:7c:60:28:
                    ba:55:d7:4a:03:20:b2:67:90:dc:98:f3:1f:e5:45:
                    69:73:49:f2:61:2c:b2:f5:7e:37:a8:fa:fa:69:3d:
                    2c:1a:30:c3:0e:34:a4:ae:65:94:9a:50:10:6a:14:
                    bf:65:d3:bc:93:65:bb:30:c0:a9:4a:80:fe:23:b6:
                    88:7d:cf:d3:a1:14:fa:2f:09:d2:1b:c3:30:30:e8:
                    3e:90:f7:f8:87:ba:53:c7:9b:b5:55:24:2b:ed:e0:
                    ec:53:bc:05:40:59:f7:fe:cb:ca:5b:fc:50:91:63:
                    7a:6d:af:cf:35:83:fb:4b:35:d7:01:9b:a4:12:86:
                    14:65:de:17:7a:cb:db:5f:d0:ab:72:1c:53:04:3a:
                    41:57:26:47:59:a0:39:7b:0f:47:b5:1b:e3:fc:f8:
                    ed:6e:a3:43:1b:27:8e:eb:08:07:13:fc:55:ff:9e:
                    d0:92:e0:f1:f9:73:fe:56:37:50:58:70:14:c3:e9:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7F:D3:51:BD:29:8C:3E:38:93:E5:91:ED:D2:CA:B0:4B:0B:B3:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/941a69b6-928b-3428-90c7-2003c80230cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.46.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:20:a5:9d:d4:27:d2:53:55:e1:7e:59:2e:2f:f0:af:98:
         52:0d:5c:f3:01:d0:53:9a:9c:4b:a9:8e:eb:64:fe:48:df:27:
         9e:c5:ea:c2:6e:c9:d3:83:31:d4:f9:ba:34:94:02:1c:b7:d7:
         90:cb:bd:42:4e:48:52:b7:31:4f:74:59:78:b5:e1:3a:a2:c3:
         4a:ea:5a:a1:7b:d3:b0:db:7c:cc:4b:74:32:c7:34:ce:3a:07:
         ce:e1:1b:c7:35:3c:57:dd:b7:09:96:eb:36:60:44:aa:33:56:
         56:b0:68:ee:09:75:2e:65:ce:51:e7:30:91:a3:be:0b:81:af:
         f7:d8:3f:28:76:88:12:2d:c5:2e:84:05:bd:7d:96:b0:b3:39:
         4e:f4:37:c2:2f:2c:12:df:e8:f4:53:09:fd:f4:20:86:3a:82:
         53:3c:d4:56:77:e6:2e:3e:47:53:2f:cd:d4:f3:66:8d:14:6f:
         66:d9:6a:9e:75:f1:aa:51:5a:90:a9:ff:91:38:8c:db:06:b1:
         19:19:e5:0b:b7:bb:68:b6:22:e4:e1:fb:da:0e:99:8d:56:40:
         b5:33:49:5c:59:8d:bf:de:d0:0e:47:28:eb:55:2d:46:a8:3f:
         d5:e9:aa:24:2f:81:ad:b7:49:cf:1b:b7:dd:08:3a:76:a1:b8:
         df:16:6a:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXwcNH/UvC+5VQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NzViN2VmODEtZDNiNi00YjYyLWFiZmQtNzc2MWQ5ODNmOWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowKGTOAkI5MvCA+ptLp0v51QFGqEO5t8MXUO
Nb8XEi/F2ZLF8OUXnSNmr65DLpAEjvIcR9YQHvyZ9pQbwbVbgCbh9EzdjFN8YCi6
VddKAyCyZ5DcmPMf5UVpc0nyYSyy9X43qPr6aT0sGjDDDjSkrmWUmlAQahS/ZdO8
k2W7MMCpSoD+I7aIfc/ToRT6LwnSG8MwMOg+kPf4h7pTx5u1VSQr7eDsU7wFQFn3
/svKW/xQkWN6ba/PNYP7SzXXAZukEoYUZd4XesvbX9CrchxTBDpBVyZHWaA5ew9H
tRvj/PjtbqNDGyeO6wgHE/xV/57QkuDx+XP+VjdQWHAUw+kknQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDd/01G9KYw+OJPlke3SyrBLC7PmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTQxYTY5YjYtOTI4Yi0z
NDI4LTkwYzctMjAwM2M4MDIzMGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACC73MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKF+IKWd1CfSU1XhflkuL/CvmFINXPMB0FOanEupjutk/kjfJ57F6sJu
ydODMdT5ujSUAhy315DLvUJOSFK3MU90WXi14Tqiw0rqWqF707DbfMxLdDLHNM46
B87hG8c1PFfdtwmW6zZgRKozVlawaO4JdS5lzlHnMJGjvguBr/fYPyh2iBItxS6E
Bb19lrCzOU70N8IvLBLf6PRTCf30IIY6glM81FZ35i4+R1MvzdTzZo0Ub2bZap51
8apRWpCp/5E4jNsGsRkZ5Qu3u2i2IuTh+9oOmY1WQLUzSVxZjb/e0A5HKOtVLUao
P9XpqiQvga23Sc8bt90IOnahuN8Wak8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:47 2025 by rpki-client