Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/36ee82dc-71cc-3e2a-942f-235bf18f4c5a.roa
File:                     36ee82dc-71cc-3e2a-942f-235bf18f4c5a.roa (raw, json)
Hash identifier:          BXcTHMdyCSU1jzqsoMsJn4M/KoQZMCIxSKYqSsY8dxE=
Subject key identifier:   4B:17:72:73:5F:63:42:B7:14:5C:8D:B7:3C:62:21:0A:70:40:25:5C
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F432858492B02D68F51B4E7FF5266E700
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/36ee82dc-71cc-3e2a-942f-235bf18f4c5a.roa
Signing time:             Wed 12 Mar 2025 22:39:18 +0000
ROA not before:           Wed 12 Mar 2025 22:39:18 +0000
ROA not after:            Tue 10 Jun 2025 22:39:18 +0000
asID:                     214640
IP address blocks:        207.2.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2b:02:d6:8f:51:b4:e7:ff:52:66:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Mar 12 22:39:18 2025 GMT
            Not After : Jun 10 22:39:18 2025 GMT
        Subject: CN=5dea8ef4-9d63-4208-976b-2000af8f9a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:45:51:3a:09:64:47:9c:cb:30:3e:8c:77:06:
                    b1:d7:b0:3d:0d:11:2c:73:7b:fa:e0:40:0a:8f:2a:
                    32:84:70:7d:53:e4:44:b8:64:1a:a0:e0:10:0a:42:
                    35:1f:9b:3e:a3:5f:59:30:06:a0:85:18:8d:7e:16:
                    b9:43:38:22:0e:b8:2b:3d:64:e4:b3:50:0a:0a:05:
                    dc:3f:f6:b5:25:fc:06:17:28:0a:88:71:77:db:0e:
                    da:77:e2:2d:62:16:e8:ac:47:f4:3d:00:2e:02:93:
                    cd:18:d9:e0:f8:47:0f:53:db:49:8e:13:c1:e5:e7:
                    05:0a:09:c4:dc:31:4e:88:ad:af:16:9b:ff:95:72:
                    19:db:75:5b:e3:08:4e:b4:b3:1f:9e:25:3c:56:90:
                    9b:db:2c:77:0f:3d:11:e4:3e:0a:f1:f5:5e:98:8f:
                    d4:1e:24:aa:53:e6:aa:97:1f:bc:5c:a9:f5:94:9c:
                    b7:40:1b:5e:ac:97:d9:20:d0:f7:d6:89:58:aa:cd:
                    42:7d:cf:fa:f5:90:75:8f:20:a3:4c:ca:72:a9:2f:
                    0b:b8:36:2b:b4:e4:6e:39:4f:4f:5b:96:7a:63:ef:
                    57:5a:5e:2d:9a:3a:10:13:5d:0b:27:6b:b6:b6:bb:
                    17:ed:c7:c3:46:23:11:0c:28:e6:1f:c1:3b:6b:8a:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:17:72:73:5F:63:42:B7:14:5C:8D:B7:3C:62:21:0A:70:40:25:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/36ee82dc-71cc-3e2a-942f-235bf18f4c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:e2:e9:6b:4d:21:93:10:3f:30:13:c9:24:09:ca:23:52:
         52:02:b6:40:3d:8d:1c:c0:b6:df:3b:48:8b:08:b9:26:9c:79:
         d5:c2:2a:e1:f7:fd:2e:12:d4:00:95:f7:33:71:78:f1:bd:df:
         a8:18:bd:69:31:28:a1:0d:fa:7a:83:e6:70:10:44:28:6a:01:
         a9:83:20:bb:64:e4:e5:71:8f:c5:51:b7:77:53:93:cd:e6:2d:
         ae:d1:34:1a:02:e4:4f:41:ab:72:6e:f9:91:ad:1a:f3:14:37:
         4a:e0:3c:5a:b7:d3:bc:a3:ea:55:8a:e3:60:a8:40:55:52:4d:
         6d:3e:b2:ad:73:f8:fc:4c:2c:86:23:cc:e2:1c:90:4b:3d:26:
         32:7d:e5:1c:c2:b7:3e:23:ae:25:1d:e7:08:d2:bb:a3:64:96:
         80:86:80:39:1c:7a:5a:bf:d7:28:7f:3b:b6:4b:f0:8c:5f:ec:
         90:0b:92:d3:d9:3c:79:72:32:89:93:2e:06:2c:21:7f:a8:3d:
         29:97:3d:d9:63:14:a4:8e:88:29:87:3d:1b:18:26:03:63:50:
         0b:8f:c5:d6:da:34:bc:b8:c4:d5:59:41:30:d0:a4:bb:e3:1d:
         fb:c2:a3:e4:32:63:ca:15:7c:ce:8f:30:53:52:4a:f4:1f:b1:
         8a:75:d6:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkrAtaPUbTn/1Jm5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdhNjM0MWItNWE1ZS00YWMwLWE3NjAtNWE1NDE5MGFm
OTEzMB4XDTI1MDMxMjIyMzkxOFoXDTI1MDYxMDIyMzkxOFowLzEtMCsGA1UEAxMk
NWRlYThlZjQtOWQ2My00MjA4LTk3NmItMjAwMGFmOGY5YTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kVROglkR5zLMD6Mdwax17A9DREsc3v64EAK
jyoyhHB9U+REuGQaoOAQCkI1H5s+o19ZMAaghRiNfha5QzgiDrgrPWTks1AKCgXc
P/a1JfwGFygKiHF32w7ad+ItYhborEf0PQAuApPNGNng+EcPU9tJjhPB5ecFCgnE
3DFOiK2vFpv/lXIZ23Vb4whOtLMfniU8VpCb2yx3Dz0R5D4K8fVemI/UHiSqU+aq
lx+8XKn1lJy3QBterJfZIND31olYqs1Cfc/69ZB1jyCjTMpyqS8LuDYrtORuOU9P
W5Z6Y+9XWl4tmjoQE10LJ2u2trsX7cfDRiMRDCjmH8E7a4rgrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEsXcnNfY0K3FFyNtzxiIQpwQCVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2
MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkwYWY5MTMvMzZlZTgyZGMtNzFjYy0z
ZTJhLTk0MmYtMjM1YmYxOGY0YzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTdhNjM0MWItNWE1ZS00YWMwLWE3
NjAtNWE1NDE5MGFmOTEzL2U3YTYzNDFiLTVhNWUtNGFjMC1hNzYwLTVhNTQxOTBh
ZjkxMy5jcmwwHwYDVR0jBBgwFoAUMaKt48OVDcaXQR4vjLH8a7eDJcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0
MTkwYWY5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsT4ulrTSGTED8wE8kkCcojUlICtkA9jRzAtt87SIsIuSacedXCKuH3
/S4S1ACV9zNxePG936gYvWkxKKEN+nqD5nAQRChqAamDILtk5OVxj8VRt3dTk83m
La7RNBoC5E9Bq3Ju+ZGtGvMUN0rgPFq307yj6lWK42CoQFVSTW0+sq1z+PxMLIYj
zOIckEs9JjJ95RzCtz4jriUd5wjSu6NkloCGgDkcelq/1yh/O7ZL8Ixf7JALktPZ
PHlyMomTLgYsIX+oPSmXPdljFKSOiCmHPRsYJgNjUAuPxdbaNLy4xNVZQTDQpLvj
HfvCo+QyY8oVfM6PMFNSSvQfsYp11n4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:33:09 2025 by rpki-client