Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8a5bf73-6eb7-37d9-9008-cda099fef64d.roa
File:                     c8a5bf73-6eb7-37d9-9008-cda099fef64d.roa (raw, json)
Hash identifier:          P6mZ58ndoxATC0Ba05hrb2IgXQ1D81R3mOGS9hW4b9I=
Subject key identifier:   32:A8:78:66:30:3C:1C:D8:D2:C5:D4:09:70:FC:E9:38:8D:77:63:6E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213453A3BFB8B8C4439A8540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8a5bf73-6eb7-37d9-9008-cda099fef64d.roa
Signing time:             Sun 09 Mar 2025 10:20:56 +0000
ROA not before:           Sun 09 Mar 2025 10:20:56 +0000
ROA not after:            Sat 07 Jun 2025 10:20:56 +0000
asID:                     36522
IP address blocks:        207.61.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:53:a3:bf:b8:b8:c4:43:9a:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:56 2025 GMT
            Not After : Jun  7 10:20:56 2025 GMT
        Subject: CN=a7a2fd68-0339-4391-81e3-55b95849e4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:cf:52:49:91:7a:f3:52:71:fd:12:76:39:
                    08:4a:31:bd:d9:b7:c1:b6:68:22:fb:12:bd:e4:e2:
                    e3:2d:16:00:23:56:b8:03:34:c2:c8:b8:4b:c2:b0:
                    34:39:f0:1c:6f:e2:c0:dc:46:af:fd:58:93:ff:79:
                    37:4c:c8:7a:e8:91:65:fc:5c:63:43:90:13:16:57:
                    63:f4:19:7e:9f:ad:4c:bc:51:04:b5:32:3c:47:9a:
                    d3:2d:18:d8:e3:09:b1:21:5c:3d:e7:68:5d:cb:36:
                    1c:76:1c:ac:45:7a:91:5f:77:8b:c2:e2:15:c8:6b:
                    01:76:91:8d:52:6e:24:2a:3e:4c:f5:15:3e:b8:92:
                    9d:85:ca:e8:db:15:16:f4:f4:d3:97:d1:8b:3b:f5:
                    c6:77:8b:ad:55:3a:28:51:1b:a7:6a:e3:ab:0c:7c:
                    e5:1b:37:9b:66:ef:17:ad:51:32:eb:83:e4:50:7b:
                    78:91:e9:4e:d3:34:d0:fe:55:b2:f8:1b:67:f2:fe:
                    ba:01:c9:b2:33:ac:53:17:a0:93:79:fb:c3:50:ec:
                    33:e8:fb:5f:ac:13:00:a1:26:7f:eb:0a:58:fb:55:
                    e5:a6:b2:66:a7:d7:ae:d9:04:b6:78:7f:4a:09:0c:
                    54:4c:be:ad:ce:21:a0:fd:57:e8:39:4d:41:58:51:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:78:66:30:3C:1C:D8:D2:C5:D4:09:70:FC:E9:38:8D:77:63:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8a5bf73-6eb7-37d9-9008-cda099fef64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:b6:96:88:08:3d:c7:d0:8d:44:8e:80:d2:a4:6b:9c:3e:
         08:77:bf:be:34:89:b9:76:61:6d:36:2d:3e:f1:f9:c6:43:66:
         95:14:1f:8d:76:38:1c:f7:a7:92:f1:df:14:7c:cd:95:d3:45:
         46:e2:18:ed:33:e2:14:9a:af:32:6d:b0:09:50:4c:2f:b7:b7:
         e3:9b:8a:ed:99:8d:ae:bc:98:3b:35:92:44:50:7a:3a:cb:9a:
         d8:af:10:77:d4:53:7a:83:a0:2d:cb:ff:88:bf:31:66:c1:f5:
         d7:ad:c9:70:66:e0:48:63:ba:48:b1:3b:22:8b:45:56:a5:a1:
         5e:d7:34:3e:b1:57:23:f2:09:52:7a:7d:02:a9:89:46:bb:b1:
         37:eb:64:ba:de:16:ac:f1:3f:f5:4d:d1:bc:d6:42:ef:a3:9b:
         6f:9b:87:f0:12:77:2d:78:48:bf:28:3a:53:1f:a0:0e:7a:90:
         28:c3:c7:5a:8d:65:93:b9:65:8a:7d:4d:2b:41:20:0a:6d:81:
         39:b8:18:96:cf:75:53:f3:06:d8:89:ab:21:67:df:20:71:e9:
         b5:3d:f9:68:fd:e6:46:8a:e5:ba:fb:9f:2c:88:47:08:82:47:
         ba:7f:0c:ef:42:de:7d:8f:37:68:6a:21:da:be:91:09:19:55:
         f6:81:70:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNFOjv7i4xEOahUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA1NloXDTI1MDYwNzEwMjA1NlowLzEtMCsGA1UEAxMk
YTdhMmZkNjgtMDMzOS00MzkxLTgxZTMtNTViOTU4NDllNGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9HPUkmRevNScf0SdjkISjG92bfBtmgi+xK9
5OLjLRYAI1a4AzTCyLhLwrA0OfAcb+LA3Eav/ViT/3k3TMh66JFl/FxjQ5ATFldj
9Bl+n61MvFEEtTI8R5rTLRjY4wmxIVw952hdyzYcdhysRXqRX3eLwuIVyGsBdpGN
Um4kKj5M9RU+uJKdhcro2xUW9PTTl9GLO/XGd4utVTooURunauOrDHzlGzebZu8X
rVEy64PkUHt4kelO0zTQ/lWy+Btn8v66AcmyM6xTF6CTefvDUOwz6PtfrBMAoSZ/
6wpY+1XlprJmp9eu2QS2eH9KCQxUTL6tziGg/VfoOU1BWFE0lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDKoeGYwPBzY0sXUCXD86TiNd2NuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzhhNWJmNzMtNmViNy0z
N2Q5LTkwMDgtY2RhMDk5ZmVmNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzz3YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAx4tpaICD3H0I1EjoDSpGucPgh3v740ibl2YW02LT7x+cZDZpUUH412
OBz3p5Lx3xR8zZXTRUbiGO0z4hSarzJtsAlQTC+3t+Obiu2Zja68mDs1kkRQejrL
mtivEHfUU3qDoC3L/4i/MWbB9detyXBm4EhjukixOyKLRValoV7XND6xVyPyCVJ6
fQKpiUa7sTfrZLreFqzxP/VN0bzWQu+jm2+bh/ASdy14SL8oOlMfoA56kCjDx1qN
ZZO5ZYp9TStBIAptgTm4GJbPdVPzBtiJqyFn3yBx6bU9+Wj95kaK5br7nyyIRwiC
R7p/DO9C3n2PN2hqIdq+kQkZVfaBcN0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:04:19 2025 by rpki-client