Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8210486a-7564-3314-bd7c-92fb559e2ba4.roa
File:                     8210486a-7564-3314-bd7c-92fb559e2ba4.roa (raw, json)
Hash identifier:          PgGqfsoTJe8KLApwB1ymssljdX/XzAihWndXqcWcqyw=
Subject key identifier:   2C:53:4B:90:39:EB:CB:82:D6:93:86:DE:FB:B2:21:32:FA:D9:0B:C3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343DA68D3892D3D4E7E4E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8210486a-7564-3314-bd7c-92fb559e2ba4.roa
Signing time:             Sun 09 Mar 2025 10:20:46 +0000
ROA not before:           Sun 09 Mar 2025 10:20:46 +0000
ROA not after:            Sat 07 Jun 2025 10:20:46 +0000
asID:                     21552
IP address blocks:        204.101.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:3d:a6:8d:38:92:d3:d4:e7:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:46 2025 GMT
            Not After : Jun  7 10:20:46 2025 GMT
        Subject: CN=daf5e00e-27a5-4c26-ac8b-3c48a3319598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:15:36:36:60:5e:6e:8e:64:de:32:5a:25:
                    57:d1:e2:c7:e4:84:09:a0:a4:02:c7:9d:e9:19:63:
                    e7:e9:c5:d6:86:cf:63:57:c0:38:2a:b2:46:1b:df:
                    91:c2:36:4b:af:53:21:a2:7f:78:65:51:b6:3d:ae:
                    ae:e0:93:ec:cb:05:e4:cf:d1:7f:19:1c:76:7a:3c:
                    17:4e:19:81:64:c5:bc:2e:25:6a:b6:fc:35:86:af:
                    22:39:01:9c:93:f3:4e:29:6d:21:70:5c:6d:fc:eb:
                    4f:e7:e9:67:c5:74:e5:c8:5d:97:0d:1f:40:58:a6:
                    c2:87:3d:86:28:9f:c4:c0:62:66:69:2e:b9:b8:f6:
                    ec:be:94:2a:88:81:fa:0e:56:a1:c0:ee:6f:62:b3:
                    c9:de:c4:0f:fc:47:00:3a:f7:69:68:ed:4a:2f:18:
                    17:1d:07:ae:d2:09:cf:c2:ec:81:ee:ef:b8:4e:f3:
                    e3:68:ae:a6:5e:66:25:33:59:7c:78:25:03:07:5e:
                    cd:94:b0:39:82:82:fc:c5:62:89:ee:f0:86:78:0d:
                    b0:82:b7:fc:7e:94:99:ac:b2:fb:18:45:38:7a:54:
                    c8:c6:65:d3:b5:8d:7b:6d:53:a8:09:f0:8f:49:81:
                    f9:43:bc:80:1a:c1:ed:04:88:9e:e2:c7:73:f3:ca:
                    f7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:53:4B:90:39:EB:CB:82:D6:93:86:DE:FB:B2:21:32:FA:D9:0B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8210486a-7564-3314-bd7c-92fb559e2ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:db:7d:0c:19:7b:09:1d:35:76:66:47:cc:5e:b6:13:28:
         54:44:0c:51:85:03:42:ba:4c:29:39:c4:a8:eb:ef:2e:10:02:
         ea:23:4f:88:3b:11:73:6f:94:a7:47:43:0e:66:e8:e6:03:55:
         94:1e:8b:fe:d9:b4:27:ef:8b:f6:9f:dc:29:dc:13:0e:25:d4:
         36:8b:2f:17:a0:83:2b:17:13:e4:58:a0:4e:21:2d:f5:f9:94:
         74:2c:f0:9a:fb:30:0b:59:a7:58:0b:dd:d5:99:28:8e:a7:e2:
         18:fc:74:a0:b9:4e:dc:cd:d4:ad:fc:1b:b2:85:76:3a:5a:a9:
         03:b8:53:fe:28:7a:8a:39:41:b7:61:f3:60:e0:36:fe:a8:b8:
         91:4d:f9:7f:1b:c1:75:72:f7:04:fe:92:e1:59:cb:b8:27:fb:
         37:a4:e4:e8:87:99:a1:ea:b5:76:ad:46:a6:b1:18:26:cf:7f:
         be:56:8b:9d:22:1c:fd:4f:79:dc:db:4c:5c:03:b4:cd:19:13:
         88:45:19:32:4f:39:ad:7a:cc:a2:97:37:b0:3a:c7:90:c1:e6:
         04:ec:88:f6:25:25:09:c3:69:db:11:64:8c:6c:33:e2:94:6f:
         51:b8:a4:e0:c3:12:53:dd:90:cd:d4:de:f3:17:18:f2:3c:19:
         00:58:a5:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhND2mjTiS09Tn5OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA0NloXDTI1MDYwNzEwMjA0NlowLzEtMCsGA1UEAxMk
ZGFmNWUwMGUtMjdhNS00YzI2LWFjOGItM2M0OGEzMzE5NTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRQVNjZgXm6OZN4yWiVX0eLH5IQJoKQCx53p
GWPn6cXWhs9jV8A4KrJGG9+RwjZLr1Mhon94ZVG2Pa6u4JPsywXkz9F/GRx2ejwX
ThmBZMW8LiVqtvw1hq8iOQGck/NOKW0hcFxt/OtP5+lnxXTlyF2XDR9AWKbChz2G
KJ/EwGJmaS65uPbsvpQqiIH6DlahwO5vYrPJ3sQP/EcAOvdpaO1KLxgXHQeu0gnP
wuyB7u+4TvPjaK6mXmYlM1l8eCUDB17NlLA5goL8xWKJ7vCGeA2wgrf8fpSZrLL7
GEU4elTIxmXTtY17bVOoCfCPSYH5Q7yAGsHtBIie4sdz88r3lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxTS5A568uC1pOG3vuyITL62QvDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODIxMDQ4NmEtNzU2NC0z
MzE0LWJkN2MtOTJmYjU1OWUyYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGUsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABX0230MGXsJHTV2ZkfMXrYTKFREDFGFA0K6TCk5xKjr7y4QAuojT4g7
EXNvlKdHQw5m6OYDVZQei/7ZtCfvi/af3CncEw4l1DaLLxeggysXE+RYoE4hLfX5
lHQs8Jr7MAtZp1gL3dWZKI6n4hj8dKC5TtzN1K38G7KFdjpaqQO4U/4oeoo5Qbdh
82DgNv6ouJFN+X8bwXVy9wT+kuFZy7gn+zek5OiHmaHqtXatRqaxGCbPf75Wi50i
HP1PedzbTFwDtM0ZE4hFGTJPOa16zKKXN7A6x5DB5gTsiPYlJQnDadsRZIxsM+KU
b1G4pODDElPdkM3U3vMXGPI8GQBYpZI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:25 2025 by rpki-client