Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4c80f6b0-45ca-31ec-94a4-fbdb545a32b5.roa
File:                     4c80f6b0-45ca-31ec-94a4-fbdb545a32b5.roa (raw, json)
Hash identifier:          nbkk/ymeL5FQVsZNI3oDPiptQrxCtG9XlI4GBeayt6s=
Subject key identifier:   B6:A1:52:93:92:8A:35:DA:45:53:79:CE:09:82:BE:0F:3B:D7:F5:A7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A7A4B472DEADD9D13DF1EC600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4c80f6b0-45ca-31ec-94a4-fbdb545a32b5.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     64267
IP address blocks:        24.235.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:47:2d:ea:dd:9d:13:df:1e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=b8956225-db1a-4728-8728-1f7e6f8351ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dd:25:2b:85:83:36:be:c4:d1:8f:7e:47:67:
                    8b:be:d8:52:84:5a:be:d8:f3:68:ea:1b:7f:88:d5:
                    73:86:86:ea:0c:85:2e:ae:6e:3b:c8:5e:a9:a9:64:
                    f0:a1:e7:1e:7e:68:94:f5:bf:83:5c:24:5b:a2:b2:
                    d5:86:5f:ab:97:0d:0c:60:6c:8f:63:8b:90:11:c4:
                    62:2c:07:3f:83:e3:fc:cb:19:51:20:27:59:eb:13:
                    7b:07:74:64:27:fe:ac:aa:86:fc:7e:50:90:e6:6e:
                    cb:73:6e:2a:b3:70:a5:9b:7b:0b:8f:80:7d:9a:c3:
                    fc:c5:28:ab:b5:9a:cd:59:e1:13:3f:47:71:a2:df:
                    85:33:06:8d:e1:4a:7c:ca:16:e9:d0:bc:7e:ac:89:
                    df:85:62:71:dd:3f:84:92:35:44:d7:75:17:58:0e:
                    e8:37:e2:e3:ae:c2:28:75:e9:16:f3:1d:17:f7:c3:
                    c6:b4:97:37:7b:7e:74:0d:4f:92:f7:a4:5c:21:23:
                    7e:a8:36:51:6c:41:04:91:02:c7:c8:0a:6c:bf:6e:
                    80:a6:f7:b7:86:6c:f8:34:e8:a0:ae:fc:8b:a0:6d:
                    57:69:e1:9e:6e:01:14:f0:5d:f0:fb:60:5e:95:f1:
                    e5:08:d9:1c:ee:08:ae:a7:d6:88:d3:de:0e:82:33:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A1:52:93:92:8A:35:DA:45:53:79:CE:09:82:BE:0F:3B:D7:F5:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4c80f6b0-45ca-31ec-94a4-fbdb545a32b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.235.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:9e:7c:59:c7:65:b4:9a:b5:6e:af:df:26:47:fb:75:b1:9e:
         3c:d5:25:bb:cd:1b:d1:81:ad:a2:d1:ab:e8:96:8c:22:79:c1:
         4d:f2:9d:3e:97:64:95:1b:5d:ff:79:ad:ed:92:78:a0:b8:62:
         67:5f:b0:3d:5b:cb:14:d7:d8:e6:78:33:ef:b7:d8:57:10:7c:
         b8:e4:e8:a0:9f:d4:3e:b0:7a:29:71:35:6b:b4:ad:e7:ce:d8:
         56:61:87:ea:db:20:71:55:54:2a:51:fe:2f:97:49:17:7d:72:
         ed:45:12:b5:fa:02:1f:b6:76:aa:dc:f9:5a:fe:b7:6b:e8:4d:
         e9:3b:76:88:33:ce:02:51:d5:b7:25:53:d8:13:82:b4:60:42:
         f5:48:2a:2a:91:ed:9b:45:c7:ed:4d:66:70:09:fc:d3:fe:ce:
         1a:23:a7:66:64:38:4e:dd:f5:86:ea:26:d3:f6:fa:db:90:5e:
         5a:4c:86:d4:a9:16:98:ec:a5:b6:f3:e2:33:dd:3e:11:0e:9a:
         7f:22:16:63:6d:2c:58:d6:87:e1:b7:05:14:fe:f9:c7:50:43:
         d7:34:76:0e:c6:ce:9c:1d:91:bd:0e:57:1c:7f:bf:8c:b8:0f:
         57:3e:8d:47:e4:51:c3:37:bc:df:68:41:14:dd:6e:bc:99:dc:
         ba:87:4b:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0ct6t2dE98exgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
Yjg5NTYyMjUtZGIxYS00NzI4LTg3MjgtMWY3ZTZmODM1MWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit0lK4WDNr7E0Y9+R2eLvthShFq+2PNo6ht/
iNVzhobqDIUurm47yF6pqWTwoecefmiU9b+DXCRborLVhl+rlw0MYGyPY4uQEcRi
LAc/g+P8yxlRICdZ6xN7B3RkJ/6sqob8flCQ5m7Lc24qs3Clm3sLj4B9msP8xSir
tZrNWeETP0dxot+FMwaN4Up8yhbp0Lx+rInfhWJx3T+EkjVE13UXWA7oN+LjrsIo
dekW8x0X98PGtJc3e350DU+S96RcISN+qDZRbEEEkQLHyApsv26Apve3hmz4NOig
rvyLoG1XaeGebgEU8F3w+2BelfHlCNkc7giup9aI094OgjNZDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLahUpOSijXaRVN5zgmCvg871/WnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNGM4MGY2YjAtNDVjYS0z
MWVjLTk0YTQtZmJkYjU0NWEzMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGOsMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM6efFnHZbSatW6v3yZH+3WxnjzVJbvNG9GBraLRq+iWjCJ5wU3ynT6X
ZJUbXf95re2SeKC4YmdfsD1byxTX2OZ4M++32FcQfLjk6KCf1D6weilxNWu0refO
2FZhh+rbIHFVVCpR/i+XSRd9cu1FErX6Ah+2dqrc+Vr+t2voTek7dogzzgJR1bcl
U9gTgrRgQvVIKiqR7ZtFx+1NZnAJ/NP+zhojp2ZkOE7d9YbqJtP2+tuQXlpMhtSp
Fpjspbbz4jPdPhEOmn8iFmNtLFjWh+G3BRT++cdQQ9c0dg7Gzpwdkb0OVxx/v4y4
D1c+jUfkUcM3vN9oQRTdbryZ3LqHSws=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:57 2025 by rpki-client