Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa
File:                     ef190013-db65-3925-bc84-76c0b3dbc647.roa (raw, json)
Hash identifier:          McmcU+3FNooQa+XOBmaNGMwbplhGJRVYt1X/RfX3Kp4=
Subject key identifier:   B4:07:17:69:85:98:D8:1C:1A:78:FD:01:9E:C9:D7:36:28:36:B5:89
Certificate issuer:       /CN=b056a34f-06eb-490a-9513-af59adeb036e
Certificate serial:       010D0C9F4328584905B6B2051F41F40A75DD4880
Authority key identifier: 9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     397018
IP address blocks:        91.209.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b2:05:1f:41:f4:0a:75:dd:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b056a34f-06eb-490a-9513-af59adeb036e
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=26f65bc1-133b-4028-b27a-414e734cfa80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:26:47:83:95:f4:e1:e7:fe:ab:1d:45:5c:
                    bb:99:e1:9b:4e:01:0d:78:a4:c0:ae:a5:c9:9f:5c:
                    26:07:db:a0:c2:f9:f6:86:ac:9f:9f:42:dd:41:c4:
                    88:d2:2e:80:35:17:f3:c6:da:6a:b3:ec:4b:23:06:
                    ae:a8:2a:37:9f:41:13:a2:2a:17:49:b2:24:a2:eb:
                    47:72:d6:6a:36:b9:90:df:03:e6:5f:d5:e0:9b:5f:
                    0c:02:2c:70:9f:c2:84:17:64:40:c6:5c:39:f5:89:
                    a2:80:15:72:95:d1:fe:50:a7:eb:7b:7b:c7:07:af:
                    bb:1a:8f:15:d4:64:00:d3:47:28:92:da:be:78:f7:
                    ca:3d:2f:b9:f9:fc:a8:d4:b3:03:09:07:3b:fc:cc:
                    f8:42:14:3a:76:f8:aa:ad:4e:d1:eb:ab:38:2f:8e:
                    c4:f6:17:4a:4e:3d:b1:cf:5c:b8:19:a6:25:a5:84:
                    ce:7d:ce:51:e6:0a:5a:ac:be:05:3f:00:4e:6b:c2:
                    05:57:c4:d6:b1:3a:76:bc:b9:15:e8:15:ae:9c:94:
                    15:ad:70:b0:bb:6d:3b:07:f7:74:07:a0:6c:99:79:
                    d5:f5:17:6e:7c:69:4c:64:20:a8:3c:62:24:e5:0c:
                    31:c8:00:4c:ca:57:87:ca:9b:ca:74:3d:ab:1f:f4:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:17:69:85:98:D8:1C:1A:78:FD:01:9E:C9:D7:36:28:36:B5:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/ef190013-db65-3925-bc84-76c0b3dbc647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e/b056a34f-06eb-490a-9513-af59adeb036e.crl

            X509v3 Authority Key Identifier:
                keyid:9F:02:CC:22:E1:3D:43:41:4E:B6:AF:C9:23:23:90:EC:82:5F:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b056a34f-06eb-490a-9513-af59adeb036e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4a:ca:98:ce:a1:17:1c:08:a9:8f:49:14:8f:8e:11:b1:79:
         b4:b7:78:fa:ec:d1:2e:27:53:f7:d9:60:b8:5a:bc:a8:3d:7b:
         ec:8f:6e:0d:dc:71:fa:80:55:ba:92:9f:aa:7e:45:3c:41:eb:
         4a:4f:30:fd:67:40:c6:47:74:34:c1:80:6b:22:50:e7:6e:83:
         80:29:26:0b:3d:05:4b:88:58:7c:84:df:fa:e7:27:8a:e5:93:
         77:52:66:60:df:24:3f:06:4d:38:67:24:73:ee:42:66:64:34:
         43:87:5a:f4:be:80:77:9b:7e:03:91:e6:08:48:2a:ad:26:98:
         fa:c0:7e:64:db:1d:26:54:03:15:b8:c3:dc:c8:26:08:ed:ca:
         0c:ef:4a:4c:b2:83:ad:93:cf:7f:91:65:27:fb:d9:0c:8f:6f:
         e5:c9:a3:ce:d5:ae:4f:24:08:d3:e3:2b:48:fd:50:a9:02:0e:
         dd:64:7f:95:eb:0c:5d:e2:a0:06:64:6a:ee:00:a4:54:73:6d:
         c7:fc:53:1c:3a:5d:ef:d5:43:1a:4a:37:81:de:60:28:aa:92:
         b6:0f:0e:b9:5d:3e:f4:d3:96:78:62:a6:55:0d:0a:13:fb:50:
         2a:04:24:f5:76:d3:4f:5c:33:ce:12:67:b3:48:16:0f:bf:c3:
         35:40:91:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrIFH0H0CnXdSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA1NmEzNGYtMDZlYi00OTBhLTk1MTMtYWY1OWFkZWIw
MzZlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
MjZmNjViYzEtMTMzYi00MDI4LWIyN2EtNDE0ZTczNGNmYTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAcmR4OV9OHn/qsdRVy7meGbTgENeKTArqXJ
n1wmB9ugwvn2hqyfn0LdQcSI0i6ANRfzxtpqs+xLIwauqCo3n0EToioXSbIkoutH
ctZqNrmQ3wPmX9Xgm18MAixwn8KEF2RAxlw59YmigBVyldH+UKfre3vHB6+7Go8V
1GQA00coktq+ePfKPS+5+fyo1LMDCQc7/Mz4QhQ6dviqrU7R66s4L47E9hdKTj2x
z1y4GaYlpYTOfc5R5gparL4FPwBOa8IFV8TWsTp2vLkV6BWunJQVrXCwu207B/d0
B6BsmXnV9RdufGlMZCCoPGIk5QwxyABMyleHypvKdD2rH/T7zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQHF2mFmNgcGnj9AZ7J1zYoNrWJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDU2
YTM0Zi0wNmViLTQ5MGEtOTUxMy1hZjU5YWRlYjAzNmUvZWYxOTAwMTMtZGI2NS0z
OTI1LWJjODQtNzZjMGIzZGJjNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjA1NmEzNGYtMDZlYi00OTBhLTk1
MTMtYWY1OWFkZWIwMzZlL2IwNTZhMzRmLTA2ZWItNDkwYS05NTEzLWFmNTlhZGVi
MDM2ZS5jcmwwHwYDVR0jBBgwFoAUnwLMIuE9Q0FOtq/JIyOQ7IJfvVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDU2YTM0Zi0wNmViLTQ5MGEtOTUxMy1hZjU5
YWRlYjAzNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtKypjOoRccCKmPSRSPjhGxebS3ePrs0S4nU/fZYLhavKg9e+yPbg3c
cfqAVbqSn6p+RTxB60pPMP1nQMZHdDTBgGsiUOdug4ApJgs9BUuIWHyE3/rnJ4rl
k3dSZmDfJD8GTThnJHPuQmZkNEOHWvS+gHebfgOR5ghIKq0mmPrAfmTbHSZUAxW4
w9zIJgjtygzvSkyyg62Tz3+RZSf72QyPb+XJo87Vrk8kCNPjK0j9UKkCDt1kf5Xr
DF3ioAZkau4ApFRzbcf8Uxw6Xe/VQxpKN4HeYCiqkrYPDrldPvTTlnhiplUNChP7
UCoEJPV2009cM84SZ7NIFg+/wzVAkTc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:26 2025 by rpki-client