Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f80c13bb-5751-3d8b-88a5-85a48ed71425.roa
File:                     f80c13bb-5751-3d8b-88a5-85a48ed71425.roa (raw, json)
Hash identifier:          uxgYZ8q9o3bEcUx6d90n8c9NbA0DUkEL/9kOyjm8tx8=
Subject key identifier:   2D:43:35:9A:30:F3:03:81:93:89:28:5A:5B:D8:9A:EB:87:98:5A:03
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921345B6A559B46C066F3C420
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f80c13bb-5751-3d8b-88a5-85a48ed71425.roa
Signing time:             Sun 09 Mar 2025 10:21:00 +0000
ROA not before:           Sun 09 Mar 2025 10:21:00 +0000
ROA not after:            Sat 07 Jun 2025 10:21:00 +0000
asID:                     577
IP address blocks:        207.236.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:5b:6a:55:9b:46:c0:66:f3:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:00 2025 GMT
            Not After : Jun  7 10:21:00 2025 GMT
        Subject: CN=094283db-6d42-41f1-b108-67f6ceea6a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:41:bc:aa:7f:9a:14:1c:d3:19:30:4c:c7:
                    f8:23:5d:b1:18:df:cc:17:4e:33:f8:1c:1e:8f:5b:
                    df:22:a0:95:e8:32:76:b6:53:66:1c:6c:54:ab:db:
                    ad:d5:a4:19:53:ad:f2:7b:7f:c8:70:29:9e:9e:93:
                    71:86:21:1c:3d:72:bc:b7:ed:d5:7c:8e:21:90:27:
                    08:e5:7e:d6:76:b2:c6:06:38:de:d8:82:94:90:41:
                    3c:d9:8c:d0:68:66:67:f2:1f:40:ee:41:23:62:52:
                    7d:2a:51:8b:41:4c:18:71:f7:d5:b5:56:76:97:fb:
                    3f:13:21:9f:d5:ff:69:28:3b:6a:94:07:1c:2d:1f:
                    2f:0f:58:29:08:e9:73:46:72:41:57:ba:7c:f9:b2:
                    7f:6b:91:48:f9:93:27:37:50:8d:af:f3:6e:ba:d5:
                    11:8c:74:85:cf:5e:58:5a:89:52:8f:b8:a0:36:c7:
                    f3:99:21:9b:07:7e:6b:0a:40:d2:6a:c6:42:b4:ea:
                    71:8f:91:cc:69:33:3f:3f:1e:a8:1f:bf:ed:dc:7e:
                    9d:32:bc:01:db:9b:0f:15:5d:cf:46:2f:22:e9:52:
                    24:b8:d1:27:e9:16:2c:ac:81:5a:ae:aa:c1:4f:19:
                    c1:6a:cb:09:86:11:7f:46:e9:6d:a0:a6:5d:c5:6f:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:35:9A:30:F3:03:81:93:89:28:5A:5B:D8:9A:EB:87:98:5A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f80c13bb-5751-3d8b-88a5-85a48ed71425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:ac:91:37:22:f7:7b:af:4c:4f:62:89:47:99:26:55:e5:
         35:ee:d1:57:c9:9a:f0:75:41:d5:27:81:e2:97:fa:f1:ec:a2:
         6d:27:b4:35:78:8a:12:f8:26:3f:4d:d5:d1:12:8b:af:f9:04:
         47:f5:69:ae:ca:b9:fa:7b:7e:3b:08:81:2d:72:3d:6a:19:a1:
         8e:0a:7e:7a:c0:ab:a5:16:52:c8:dc:e2:b2:08:aa:bc:7e:f6:
         ab:93:64:a1:d3:de:6b:8d:24:21:5f:8e:41:e8:34:5a:31:74:
         b7:87:28:2a:f2:c6:69:78:ce:f6:8c:36:86:1b:1a:59:43:64:
         3e:74:d4:2c:27:ed:3c:a8:90:db:b5:5c:65:92:ff:41:e8:a6:
         cc:b9:6a:85:a1:68:b1:c7:9d:d9:c2:68:ed:c8:53:69:ed:e0:
         3a:2c:03:08:37:44:e7:f7:c7:fc:1a:0a:b4:ec:10:ff:2a:84:
         50:9c:34:47:03:62:c4:a6:0d:2d:62:21:c2:f0:db:f8:a4:55:
         d4:de:d6:29:68:a2:09:99:7a:b1:48:96:e2:48:2f:80:d2:ca:
         a2:94:e6:7b:76:20:5d:86:c9:31:9a:35:1e:14:fa:97:15:7d:
         81:90:5e:e3:6c:90:90:2b:75:ac:f8:83:33:d2:54:91:52:36:
         23:aa:79:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNFtqVZtGwGbzxCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjEwMFoXDTI1MDYwNzEwMjEwMFowLzEtMCsGA1UEAxMk
MDk0MjgzZGItNmQ0Mi00MWYxLWIxMDgtNjdmNmNlZWE2YThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw1BvKp/mhQc0xkwTMf4I12xGN/MF04z+Bwe
j1vfIqCV6DJ2tlNmHGxUq9ut1aQZU63ye3/IcCmenpNxhiEcPXK8t+3VfI4hkCcI
5X7WdrLGBjje2IKUkEE82YzQaGZn8h9A7kEjYlJ9KlGLQUwYcffVtVZ2l/s/EyGf
1f9pKDtqlAccLR8vD1gpCOlzRnJBV7p8+bJ/a5FI+ZMnN1CNr/NuutURjHSFz15Y
WolSj7igNsfzmSGbB35rCkDSasZCtOpxj5HMaTM/Px6oH7/t3H6dMrwB25sPFV3P
Ri8i6VIkuNEn6RYsrIFarqrBTxnBassJhhF/RultoKZdxW83cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1DNZow8wOBk4koWlvYmuuHmFoDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjgwYzEzYmItNTc1MS0z
ZDhiLTg4YTUtODVhNDhlZDcxNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+wMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzFrJE3Ivd7r0xPYolHmSZV5TXu0VfJmvB1QdUngeKX+vHsom0ntDV4
ihL4Jj9N1dESi6/5BEf1aa7Kufp7fjsIgS1yPWoZoY4KfnrAq6UWUsjc4rIIqrx+
9quTZKHT3muNJCFfjkHoNFoxdLeHKCryxml4zvaMNoYbGllDZD501Cwn7TyokNu1
XGWS/0Hopsy5aoWhaLHHndnCaO3IU2nt4DosAwg3ROf3x/waCrTsEP8qhFCcNEcD
YsSmDS1iIcLw2/ikVdTe1iloogmZerFIluJIL4DSyqKU5nt2IF2GyTGaNR4U+pcV
fYGQXuNskJArdaz4gzPSVJFSNiOqeZE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:33 2025 by rpki-client