Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa
File:                     b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa (raw, json)
Hash identifier:          KvkurFGa5wxUnXktVXaBwjeBf4KBh8z8yL7Tr/whc0U=
Subject key identifier:   5A:6F:35:8C:CE:6A:B0:EB:AA:ED:7B:B4:68:B2:E9:D6:5E:3F:88:4A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858494CC93B769D62C05334ABFFC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     62610
IP address blocks:        128.1.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:3b:76:9d:62:c0:53:34:ab:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=9414f597-a056-4ee1-85b9-35aee67e849e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3c:a7:8a:71:c9:97:f7:f3:ab:39:4a:88:ea:
                    66:0f:c0:d1:e3:4b:0b:dd:d6:37:3d:64:6e:bb:16:
                    fd:e0:f5:a3:97:7d:a6:27:7e:c2:74:1f:c3:9d:0c:
                    54:73:7a:b9:08:a0:44:0e:dd:20:77:0e:98:14:c8:
                    62:83:f5:2f:40:f4:dc:80:74:27:d6:79:d9:55:30:
                    f7:2b:f3:42:69:18:87:3c:ed:e3:e5:19:22:e6:65:
                    d9:f6:47:09:e1:db:2c:e7:6a:da:ae:c0:8e:9e:f7:
                    e6:c1:09:05:d8:f7:4f:8f:6a:56:06:99:fd:b7:82:
                    34:6f:e7:84:c1:2a:5f:67:14:3c:71:40:2e:83:9d:
                    fc:c2:65:07:e8:f8:1c:25:b5:09:c2:d0:29:19:86:
                    f4:d2:ed:07:3c:fb:c2:e4:8b:64:6b:4b:fe:33:68:
                    f0:6c:a6:1d:78:fe:66:ae:4a:4e:22:2b:c3:28:b4:
                    f7:77:0a:b0:8e:cb:8a:93:d9:fe:ec:a1:da:d5:b9:
                    2a:cd:ba:5a:ba:2e:9f:e8:f7:41:9d:ae:f1:66:02:
                    31:9c:ee:f5:79:c6:5a:a2:93:bc:82:00:70:5d:00:
                    7a:98:49:d6:c4:03:3e:e2:ff:0d:58:6d:38:74:0d:
                    1c:b2:cb:ef:a8:4c:85:0b:2e:c8:a8:8c:e2:c2:43:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6F:35:8C:CE:6A:B0:EB:AA:ED:7B:B4:68:B2:E9:D6:5E:3F:88:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b49ce4bf-3aa0-38e5-9819-64e23913b9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c2:59:c8:9a:d8:d8:ac:16:02:43:03:3c:ea:1f:18:61:18:
         d1:6d:21:b0:a7:fd:59:f5:f5:bd:2c:c5:e7:4c:29:59:3d:52:
         f1:9b:f2:d1:fd:0d:4c:28:69:c1:3c:45:67:68:e3:3c:d9:59:
         de:bd:70:8a:08:b4:8b:df:c2:62:1d:55:9e:08:df:2b:48:28:
         aa:49:d3:96:92:56:48:21:8a:79:39:c1:a0:1c:c1:78:9d:f1:
         c6:24:7b:0a:18:2f:a3:f0:a5:25:5d:86:fa:5f:f5:11:eb:8e:
         f6:58:00:82:71:39:2b:f6:51:7c:d2:43:04:23:73:fc:e3:e1:
         66:8f:3d:17:05:78:dc:3d:ed:b7:67:f1:87:0e:66:07:e4:86:
         22:49:36:8d:9d:f3:5c:08:ed:21:be:73:95:2b:96:45:a6:4a:
         fb:6f:57:8e:07:c7:bb:a1:e4:14:67:39:cb:ba:64:9f:d6:6c:
         ae:16:6f:ed:83:a1:65:8e:0b:70:b5:0d:68:7b:05:21:f6:62:
         c1:e8:fc:d7:5c:39:d3:09:42:0b:81:88:8f:04:8f:64:bf:42:
         1d:a9:80:bb:21:b8:80:56:48:bd:40:4a:e1:63:5b:39:93:9c:
         f0:75:56:42:66:81:f1:2d:78:19:ab:b8:73:d1:e9:95:03:19:
         ad:7d:21:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyTt2nWLAUzSr/8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
OTQxNGY1OTctYTA1Ni00ZWUxLTg1YjktMzVhZWU2N2U4NDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DyninHJl/fzqzlKiOpmD8DR40sL3dY3PWRu
uxb94PWjl32mJ37CdB/DnQxUc3q5CKBEDt0gdw6YFMhig/UvQPTcgHQn1nnZVTD3
K/NCaRiHPO3j5Rki5mXZ9kcJ4dss52rarsCOnvfmwQkF2PdPj2pWBpn9t4I0b+eE
wSpfZxQ8cUAug538wmUH6PgcJbUJwtApGYb00u0HPPvC5Itka0v+M2jwbKYdeP5m
rkpOIivDKLT3dwqwjsuKk9n+7KHa1bkqzbpaui6f6PdBna7xZgIxnO71ecZaopO8
ggBwXQB6mEnWxAM+4v8NWG04dA0cssvvqEyFCy7IqIziwkOeTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpvNYzOarDrqu17tGiy6dZeP4hKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYjQ5Y2U0YmYtM2FhMC0z
OGU1LTk4MTktNjRlMjM5MTNiOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPCWcia2NisFgJDAzzqHxhhGNFtIbCn/Vn19b0sxedMKVk9UvGb8tH9
DUwoacE8RWdo4zzZWd69cIoItIvfwmIdVZ4I3ytIKKpJ05aSVkghink5waAcwXid
8cYkewoYL6PwpSVdhvpf9RHrjvZYAIJxOSv2UXzSQwQjc/zj4WaPPRcFeNw97bdn
8YcOZgfkhiJJNo2d81wI7SG+c5UrlkWmSvtvV44Hx7uh5BRnOcu6ZJ/WbK4Wb+2D
oWWOC3C1DWh7BSH2YsHo/NdcOdMJQguBiI8Ej2S/Qh2pgLshuIBWSL1ASuFjWzmT
nPB1VkJmgfEteBmruHPR6ZUDGa19IVo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:34 2025 by rpki-client