Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82dfd550-7929-38ed-a71c-038b08a1d459.roa
File:                     82dfd550-7929-38ed-a71c-038b08a1d459.roa (raw, json)
Hash identifier:          QfRw7EYFDrkmpcevGOhb0Hl/6+8pLd86Fx43Nxi6C/o=
Subject key identifier:   64:81:6E:97:1C:37:04:09:CC:81:B4:48:FD:E8:AE:2F:1B:25:CA:CE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921344E9052DD6BFB68C8FE40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82dfd550-7929-38ed-a71c-038b08a1d459.roa
Signing time:             Sun 09 Mar 2025 10:20:54 +0000
ROA not before:           Sun 09 Mar 2025 10:20:54 +0000
ROA not after:            Sat 07 Jun 2025 10:20:54 +0000
asID:                     36522
IP address blocks:        206.172.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:4e:90:52:dd:6b:fb:68:c8:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:54 2025 GMT
            Not After : Jun  7 10:20:54 2025 GMT
        Subject: CN=1ec4c5e1-96b9-4af0-b008-17a1b59a6132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:bf:77:16:01:79:eb:79:47:b9:3e:b5:0b:
                    5f:db:30:15:8f:2b:d9:e1:ef:a3:dd:e5:59:35:2c:
                    b7:4f:89:bd:97:08:b8:60:99:e0:47:55:cc:2e:2e:
                    01:05:7c:a9:62:cc:68:50:ce:8b:a0:27:8c:82:dc:
                    00:f1:2d:5f:7e:66:85:e8:0c:50:dd:4a:fb:a7:94:
                    a3:05:0c:72:0a:34:14:97:8d:8f:6a:f3:f4:b6:05:
                    43:f2:b3:e2:b0:1a:7e:5c:ac:25:63:c2:af:98:2a:
                    e3:87:49:46:26:93:98:07:86:67:ae:ce:b6:82:40:
                    46:f0:4a:00:72:c0:e4:e0:36:a8:cc:65:9d:f6:4a:
                    28:d3:d4:c3:28:0c:fc:14:08:3c:08:30:0b:7f:a0:
                    b9:85:b4:be:2f:84:4b:4b:6e:05:03:9e:33:74:03:
                    51:51:a4:ba:47:4e:3c:2e:e2:91:47:d8:e9:b7:56:
                    ea:a2:57:80:50:08:18:79:dd:5d:a0:ed:ed:c5:1a:
                    93:de:a8:d0:be:c3:72:fe:a5:ea:ed:6e:94:db:49:
                    34:df:eb:41:1d:d4:38:d9:d2:f6:d8:4e:4e:e3:68:
                    ef:e0:c2:96:7f:af:e3:12:5f:57:1f:76:ea:58:92:
                    c4:1e:84:f4:7c:6f:bb:67:69:88:5d:13:6d:4a:e6:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:81:6E:97:1C:37:04:09:CC:81:B4:48:FD:E8:AE:2F:1B:25:CA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/82dfd550-7929-38ed-a71c-038b08a1d459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:10:4d:77:00:74:c9:5c:ac:ee:6f:8b:eb:dc:98:a9:98:c9:
         e3:a2:c5:d2:ed:2f:ca:69:51:0e:84:2e:bd:af:cc:cf:cf:1a:
         16:8e:08:9a:b5:5b:8b:1d:d7:c5:33:49:4a:5a:25:0f:a0:89:
         37:0b:72:79:ea:24:7d:f2:3b:60:93:29:a1:fd:3e:d2:91:36:
         9f:52:db:ab:ce:27:20:0a:95:14:6e:3d:0a:16:ea:bf:0b:1e:
         15:d3:9c:57:eb:72:13:49:63:94:62:a3:84:54:a6:05:ef:32:
         f6:53:e0:71:93:54:79:16:d8:bc:2c:39:17:c7:c8:14:4c:14:
         ec:d6:15:15:38:6c:12:40:1f:10:56:ef:3e:e3:cf:b6:3a:72:
         eb:40:e9:55:1a:7d:b6:da:1d:29:a0:5b:44:8d:ff:d0:6c:33:
         84:31:2b:89:c8:fd:93:40:7d:6b:ce:82:36:91:1a:86:b9:d8:
         a5:04:d5:99:01:3e:5f:52:9d:1f:b6:d3:a5:61:88:75:26:c9:
         11:b2:68:8a:bf:5e:f0:2d:7b:21:4a:fa:40:87:52:0e:78:a8:
         3b:b6:33:5b:0d:a8:47:f7:99:33:34:4a:f1:4b:0f:be:be:4b:
         bf:68:f8:95:69:7a:8b:48:6c:9f:7f:a4:e6:47:60:a4:3b:d9:
         04:6e:4a:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNE6QUt1r+2jI/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA1NFoXDTI1MDYwNzEwMjA1NFowLzEtMCsGA1UEAxMk
MWVjNGM1ZTEtOTZiOS00YWYwLWIwMDgtMTdhMWI1OWE2MTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDe/dxYBeet5R7k+tQtf2zAVjyvZ4e+j3eVZ
NSy3T4m9lwi4YJngR1XMLi4BBXypYsxoUM6LoCeMgtwA8S1ffmaF6AxQ3Ur7p5Sj
BQxyCjQUl42PavP0tgVD8rPisBp+XKwlY8KvmCrjh0lGJpOYB4Znrs62gkBG8EoA
csDk4DaozGWd9koo09TDKAz8FAg8CDALf6C5hbS+L4RLS24FA54zdANRUaS6R048
LuKRR9jpt1bqoleAUAgYed1doO3txRqT3qjQvsNy/qXq7W6U20k03+tBHdQ42dL2
2E5O42jv4MKWf6/jEl9XH3bqWJLEHoT0fG+7Z2mIXRNtSuY9bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSBbpccNwQJzIG0SP3ori8bJcrOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvODJkZmQ1NTAtNzkyOS0z
OGVkLWE3MWMtMDM4YjA4YTFkNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqwKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcQTXcAdMlcrO5vi+vcmKmYyeOixdLtL8ppUQ6ELr2vzM/PGhaOCJq1
W4sd18UzSUpaJQ+giTcLcnnqJH3yO2CTKaH9PtKRNp9S26vOJyAKlRRuPQoW6r8L
HhXTnFfrchNJY5Rio4RUpgXvMvZT4HGTVHkW2LwsORfHyBRMFOzWFRU4bBJAHxBW
7z7jz7Y6cutA6VUafbbaHSmgW0SN/9BsM4QxK4nI/ZNAfWvOgjaRGoa52KUE1ZkB
Pl9SnR+206VhiHUmyRGyaIq/XvAteyFK+kCHUg54qDu2M1sNqEf3mTM0SvFLD76+
S79o+JVpeotIbJ9/pOZHYKQ72QRuSqo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:10 2025 by rpki-client