Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa
File:                     b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa (raw, json)
Hash identifier:          LbQkZdn7yJoZg38wyQBh5mznPSqkUL4tcXYqAFdJ3Fs=
Subject key identifier:   60:24:6F:00:E9:B5:60:31:84:31:79:35:52:F5:11:64:C8:EC:0D:7B
Certificate issuer:       /CN=0e7c2507-d7b8-4812-a32c-3921f99fe3de
Certificate serial:       010D0C9F432858494469375898808F555C04A710
Authority key identifier: 59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     399849
IP address blocks:        208.99.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:37:58:98:80:8f:55:5c:04:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e7c2507-d7b8-4812-a32c-3921f99fe3de
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=c43c6b32-5946-4ee5-b187-ed1c956b92fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:c0:95:33:4b:61:3d:e0:8b:8d:dc:83:07:
                    9c:de:07:69:6b:18:01:e1:76:81:60:2c:c4:1a:f0:
                    94:b7:a3:dd:63:cd:d8:69:24:49:79:6a:ac:40:a9:
                    bd:ec:51:bf:b5:18:8e:b0:89:73:40:3d:06:32:fd:
                    1b:6e:df:5c:6e:c7:1d:6d:32:78:83:7e:5e:0a:0c:
                    cc:30:97:d2:53:a5:21:55:03:06:65:01:94:98:b1:
                    62:a9:1f:a4:5d:d4:6a:e9:f2:6b:36:57:a4:07:87:
                    8c:25:4c:20:75:cf:96:87:76:3d:fd:17:a9:36:90:
                    67:44:8c:8c:a9:9b:21:0b:0e:8d:36:f6:49:32:b7:
                    91:da:90:0d:df:6a:bf:fa:14:42:e1:cc:bc:cc:2c:
                    d7:db:95:77:54:ea:bf:26:3c:09:66:80:c2:f1:4f:
                    a7:6f:10:d9:b1:18:08:95:fe:61:8e:32:6b:52:df:
                    2d:2c:7d:d6:6d:fb:dd:06:66:cc:81:e0:65:5b:04:
                    b0:fa:16:ab:98:0d:6d:e4:61:22:0c:5f:d2:8f:87:
                    bc:73:42:b6:47:73:e7:1b:36:b8:5b:9c:72:a5:97:
                    99:ba:4e:97:7a:14:fb:78:0b:27:8b:8f:d9:b3:ed:
                    6f:9e:fd:0d:79:2e:13:d2:1c:2c:72:f3:43:36:d5:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:24:6F:00:E9:B5:60:31:84:31:79:35:52:F5:11:64:C8:EC:0D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.crl

            X509v3 Authority Key Identifier:
                keyid:59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:ed:0e:ae:7f:79:1d:a8:27:fc:59:f9:f7:3a:45:66:8f:
         b1:09:f6:08:7a:2e:35:54:71:55:a4:b2:dc:18:15:97:86:fa:
         e3:8a:52:13:ae:9c:66:87:0a:9a:82:80:38:55:96:c0:e1:81:
         3d:f2:bc:bf:75:2f:fe:4a:52:0c:e2:24:60:dc:7a:0d:7f:84:
         07:54:c8:82:65:5e:11:3d:10:f9:73:71:4b:40:17:f8:e4:f4:
         4b:1a:8e:1b:aa:bc:a9:66:cf:3c:2a:7c:2e:2d:dd:6b:9e:14:
         df:4b:c1:85:2f:b6:eb:1e:40:17:6b:09:29:f4:3a:c8:ad:86:
         46:d1:b3:9b:de:1d:76:78:56:28:37:3d:35:49:fc:e6:33:9c:
         3a:9e:ce:fe:f7:57:b8:73:b5:98:21:60:f3:2b:b1:56:6f:ad:
         49:0d:c1:62:51:b9:b6:3b:c0:b9:ee:6d:05:29:79:2e:27:67:
         3e:25:3e:b9:78:da:28:a4:4a:7e:fb:a8:d2:08:fd:ce:d9:f1:
         85:af:c9:43:ff:9e:07:5a:bf:05:75:e5:de:f1:a3:2d:f7:55:
         7a:0b:c5:34:93:b6:2d:12:aa:ee:93:32:2c:fd:e0:51:70:10:
         ae:43:b0:bf:31:22:f0:b9:b8:fe:64:b2:ca:e8:52:aa:2a:d8:
         85:39:7d:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTdYmICPVVwEpxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU3YzI1MDctZDdiOC00ODEyLWEzMmMtMzkyMWY5OWZl
M2RlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
YzQzYzZiMzItNTk0Ni00ZWU1LWIxODctZWQxYzk1NmI5MmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BDAlTNLYT3gi43cgwec3gdpaxgB4XaBYCzE
GvCUt6PdY83YaSRJeWqsQKm97FG/tRiOsIlzQD0GMv0bbt9cbscdbTJ4g35eCgzM
MJfSU6UhVQMGZQGUmLFiqR+kXdRq6fJrNlekB4eMJUwgdc+Wh3Y9/RepNpBnRIyM
qZshCw6NNvZJMreR2pAN32q/+hRC4cy8zCzX25V3VOq/JjwJZoDC8U+nbxDZsRgI
lf5hjjJrUt8tLH3WbfvdBmbMgeBlWwSw+harmA1t5GEiDF/Sj4e8c0K2R3PnGza4
W5xypZeZuk6XehT7eAsni4/Zs+1vnv0NeS4T0hwscvNDNtUGjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAkbwDptWAxhDF5NVL1EWTI7A17MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZTdj
MjUwNy1kN2I4LTQ4MTItYTMyYy0zOTIxZjk5ZmUzZGUvYjQyMzhhNDAtZDRlOS0z
YjYyLThiMmYtODU5NWEyY2JkYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGU3YzI1MDctZDdiOC00ODEyLWEz
MmMtMzkyMWY5OWZlM2RlLzBlN2MyNTA3LWQ3YjgtNDgxMi1hMzJjLTM5MjFmOTlm
ZTNkZS5jcmwwHwYDVR0jBBgwFoAUWZNlckvHweJQOCH3DsjaIJz8Ee8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZTdjMjUwNy1kN2I4LTQ4MTItYTMyYy0zOTIx
Zjk5ZmUzZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GM2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH4k7Q6uf3kdqCf8Wfn3OkVmj7EJ9gh6LjVUcVWkstwYFZeG+uOKUhOu
nGaHCpqCgDhVlsDhgT3yvL91L/5KUgziJGDceg1/hAdUyIJlXhE9EPlzcUtAF/jk
9EsajhuqvKlmzzwqfC4t3WueFN9LwYUvtuseQBdrCSn0OsithkbRs5veHXZ4Vig3
PTVJ/OYznDqezv73V7hztZghYPMrsVZvrUkNwWJRubY7wLnubQUpeS4nZz4lPrl4
2iikSn77qNII/c7Z8YWvyUP/ngdavwV15d7xoy33VXoLxTSTti0Squ6TMiz94FFw
EK5DsL8xIvC5uP5kssroUqoq2IU5fc4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:33 2025 by rpki-client