Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c32d59d-9c6a-32e8-8252-e4be8df884f0.roa
File:                     9c32d59d-9c6a-32e8-8252-e4be8df884f0.roa (raw, json)
Hash identifier:          wMyUwbg+4GZy8XR2wiq+cnWi91IyJh884P/YHKtmHiM=
Subject key identifier:   9B:0C:79:A1:7D:E6:86:B3:D5:AC:04:81:6D:F3:C3:13:01:FD:B0:DD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345E3D8700F2D98F221900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c32d59d-9c6a-32e8-8252-e4be8df884f0.roa
Signing time:             Sun 09 Mar 2025 10:21:01 +0000
ROA not before:           Sun 09 Mar 2025 10:21:01 +0000
ROA not after:            Sat 07 Jun 2025 10:21:01 +0000
asID:                     21723
IP address blocks:        207.236.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:5e:3d:87:00:f2:d9:8f:22:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:01 2025 GMT
            Not After : Jun  7 10:21:01 2025 GMT
        Subject: CN=50775348-baa2-417f-9807-85b44af38c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:75:98:91:3f:1e:b0:49:57:09:03:a1:f3:
                    d4:26:d0:d7:c3:2b:71:e3:90:b9:e0:2e:58:41:47:
                    52:cd:6a:9b:d8:af:1e:52:3e:2d:55:70:05:84:59:
                    0d:04:1d:a0:28:b3:0a:8c:c7:26:8c:f3:c7:3f:de:
                    5e:a6:42:f0:e7:d2:60:ed:4f:d2:f6:4b:aa:9d:82:
                    b4:3c:24:45:ad:1a:96:24:21:df:26:f2:e5:63:b3:
                    3d:4c:2d:02:9f:ee:e5:6f:22:a9:28:bb:73:cc:82:
                    32:0f:97:72:8a:4e:36:66:aa:80:f3:54:fa:fc:68:
                    da:6d:52:48:1c:55:32:94:2e:71:26:64:0c:92:25:
                    31:88:bf:f6:c8:a2:29:88:3e:64:2a:26:e1:10:81:
                    a2:2f:ca:2e:a7:81:ef:9c:5f:c3:9a:86:7f:98:ec:
                    e8:3a:ec:6b:5f:a2:a7:35:20:ec:4e:ae:bb:a0:eb:
                    4e:38:d9:21:3d:7a:49:23:e2:e5:93:9d:42:37:9e:
                    1a:0a:ee:c9:93:af:9a:e9:8c:19:04:a5:c3:e5:a6:
                    bf:1d:b6:d6:2d:25:7f:81:3b:0d:e8:56:e7:71:7a:
                    8f:83:66:0f:18:74:b5:3a:9a:df:9e:29:15:56:e9:
                    11:64:e7:a5:ac:f2:d6:6a:13:8d:6d:f2:80:29:39:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:79:A1:7D:E6:86:B3:D5:AC:04:81:6D:F3:C3:13:01:FD:B0:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c32d59d-9c6a-32e8-8252-e4be8df884f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:36:a0:cf:49:06:91:44:26:3e:05:65:00:00:39:d5:16:
         93:6c:ac:4f:16:b9:58:64:87:18:c4:37:d7:b3:e7:cb:5c:25:
         e6:e4:50:4f:2b:f7:0a:4a:bf:b4:30:42:9c:94:38:7f:a9:24:
         9f:0f:04:da:64:c9:9f:a1:3d:6c:0f:8a:5c:f1:25:8e:dc:01:
         15:c4:4b:ce:53:5d:dd:b8:c2:12:24:19:c8:13:6b:84:ae:f3:
         5d:eb:dc:34:f5:08:fc:3f:63:12:1d:07:8a:12:1b:f0:cf:f9:
         d1:68:8d:7d:6a:c6:01:6c:03:c9:c0:d1:ae:6f:48:c2:c0:bc:
         35:86:31:a1:43:2b:22:11:bd:a4:00:84:6f:04:f0:55:69:e1:
         c3:82:6e:2c:47:15:d6:34:2f:b5:0b:34:0d:b7:95:52:ae:f8:
         55:43:6c:d8:7d:f1:50:17:8d:52:c9:12:ed:f5:2e:2c:fc:b7:
         e9:ad:bd:ec:30:92:4a:a8:8b:0c:a1:7d:6e:98:da:d9:1f:18:
         f8:e9:f7:b5:dc:91:5a:15:d7:11:10:1e:03:ae:81:58:4c:60:
         03:02:70:84:34:fb:8a:5e:79:27:d1:4c:b4:dd:8e:55:36:f7:
         87:ab:70:9e:b8:1f:f3:af:33:cf:4e:d1:57:3e:d8:04:59:23:
         be:71:7b:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNF49hwDy2Y8iGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjEwMVoXDTI1MDYwNzEwMjEwMVowLzEtMCsGA1UEAxMk
NTA3NzUzNDgtYmFhMi00MTdmLTk4MDctODViNDRhZjM4YzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZd1mJE/HrBJVwkDofPUJtDXwytx45C54C5Y
QUdSzWqb2K8eUj4tVXAFhFkNBB2gKLMKjMcmjPPHP95epkLw59Jg7U/S9kuqnYK0
PCRFrRqWJCHfJvLlY7M9TC0Cn+7lbyKpKLtzzIIyD5dyik42ZqqA81T6/GjabVJI
HFUylC5xJmQMkiUxiL/2yKIpiD5kKibhEIGiL8oup4HvnF/DmoZ/mOzoOuxrX6Kn
NSDsTq67oOtOONkhPXpJI+Llk51CN54aCu7Jk6+a6YwZBKXD5aa/HbbWLSV/gTsN
6FbncXqPg2YPGHS1OprfnikVVukRZOelrPLWahONbfKAKTkZCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsMeaF95oaz1awEgW3zwxMB/bDdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWMzMmQ1OWQtOWM2YS0z
MmU4LTgyNTItZTRiZThkZjg4NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+ySMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHJNqDPSQaRRCY+BWUAADnVFpNsrE8WuVhkhxjEN9ez58tcJebkUE8r
9wpKv7QwQpyUOH+pJJ8PBNpkyZ+hPWwPilzxJY7cARXES85TXd24whIkGcgTa4Su
813r3DT1CPw/YxIdB4oSG/DP+dFojX1qxgFsA8nA0a5vSMLAvDWGMaFDKyIRvaQA
hG8E8FVp4cOCbixHFdY0L7ULNA23lVKu+FVDbNh98VAXjVLJEu31Liz8t+mtveww
kkqoiwyhfW6Y2tkfGPjp97XckVoV1xEQHgOugVhMYAMCcIQ0+4peeSfRTLTdjlU2
94ercJ64H/OvM89O0Vc+2ARZI75xe2g=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:40 2025 by rpki-client