Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa
File:                     63555432-fed5-3827-95ba-2c1139e7a9ac.roa (raw, json)
Hash identifier:          pVD2w16N98wwcCHudO6YHXvpFgewOOBlWtOehKzsNBU=
Subject key identifier:   E5:0A:1B:1B:AE:A3:05:EB:54:5D:42:F8:19:2E:22:93:79:D8:65:24
Certificate issuer:       /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
Certificate serial:       010D0C9F4328584A268AB091A51C29B921F5E3C0
Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     396462
IP address blocks:        207.44.1.0/24 maxlen: 32
                          207.44.67.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b0:91:a5:1c:29:b9:21:f5:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=e9b60feb-9f77-4d13-a167-93088a585402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f8:df:07:85:ed:77:be:4d:aa:e3:ed:1d:0a:
                    69:85:84:dc:27:d6:9d:8e:bb:0a:9f:73:bd:73:05:
                    5c:1c:e1:00:72:33:da:74:bc:bf:ac:ad:53:1c:2b:
                    9d:86:0e:cd:2a:10:a2:ff:f5:0a:f1:6f:59:a9:dc:
                    bf:e2:5c:53:77:1f:f3:a0:27:e5:44:61:f6:26:1d:
                    b7:16:26:da:ca:cc:05:4c:40:7b:5f:c5:69:eb:fe:
                    ea:00:3e:21:55:c5:18:3e:91:60:a2:f5:77:cb:3c:
                    3e:4d:ab:39:aa:19:69:1c:a9:4d:10:3d:5e:87:f3:
                    45:07:4b:b6:16:e4:bf:06:89:2e:8a:b4:78:ed:b4:
                    fd:0d:da:bc:02:e2:28:ca:e1:19:c5:2f:2e:cc:6b:
                    c3:83:5e:b7:80:6a:e2:d1:cb:22:ec:02:38:ae:27:
                    62:d2:f8:0f:92:22:2a:60:01:a7:fc:ac:90:58:a9:
                    29:cd:0a:31:14:21:3a:ba:e3:1e:3a:cf:1d:d8:7a:
                    bf:01:77:aa:8f:74:f5:cb:ab:b2:95:d0:e2:d2:8c:
                    c0:02:04:ab:6b:7a:a1:75:13:38:6e:7f:c4:bc:62:
                    bb:34:c6:e2:a1:6c:a2:34:83:c0:f2:22:1f:dc:e0:
                    b8:ac:33:60:bf:f8:4a:3e:1c:c3:90:9b:6b:8f:c9:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0A:1B:1B:AE:A3:05:EB:54:5D:42:F8:19:2E:22:93:79:D8:65:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.44.1.0/24
                  207.44.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:94:fb:1e:b9:07:ff:bb:d3:af:60:a6:8d:c6:d8:e5:04:04:
         89:32:22:ce:5e:33:28:74:cf:7a:92:5e:63:68:25:50:2a:f5:
         f5:57:f7:2d:2e:ec:d6:f3:f8:b1:d5:7e:ff:2b:c0:7c:3b:08:
         f7:ad:73:e6:2b:d4:7b:b3:97:d2:b3:5c:c0:42:89:7a:bc:36:
         03:33:96:b3:f5:9f:e9:ff:a2:da:e0:94:2a:68:1e:b4:f1:d8:
         9a:db:df:34:0f:19:af:c2:7e:2b:db:d7:85:6e:93:58:86:68:
         e0:dd:84:04:35:ab:64:cf:d3:1a:97:6b:ca:6b:54:95:64:83:
         2e:34:ca:49:d2:47:c1:ba:11:ea:5e:f1:c5:84:78:d2:f9:75:
         50:a1:e5:60:2c:0c:d8:d1:e5:97:57:02:e9:6f:28:5b:b8:26:
         05:e0:d2:aa:3e:0e:6c:ea:80:99:bb:0d:f6:6f:d4:e5:c3:dd:
         d6:d2:d0:29:38:46:08:8b:28:52:0c:79:8a:54:0f:0c:80:83:
         74:3c:48:78:f0:d9:62:7c:2e:c9:0c:6b:8d:51:dd:ad:94:27:
         ae:35:18:4f:1e:42:d2:2b:98:57:0d:7f:90:81:c2:33:1c:56:
         22:a8:38:b0:3c:97:c5:34:36:cf:44:f9:dd:46:b6:4a:2f:a1:
         4a:9d:3e:71
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEomirCRpRwpuSH148AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz
YjExMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
ZTliNjBmZWItOWY3Ny00ZDEzLWExNjctOTMwODhhNTg1NDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/jfB4Xtd75NquPtHQpphYTcJ9adjrsKn3O9
cwVcHOEAcjPadLy/rK1THCudhg7NKhCi//UK8W9Zqdy/4lxTdx/zoCflRGH2Jh23
FibayswFTEB7X8Vp6/7qAD4hVcUYPpFgovV3yzw+Tas5qhlpHKlNED1eh/NFB0u2
FuS/BokuirR47bT9Ddq8AuIoyuEZxS8uzGvDg163gGri0csi7AI4ridi0vgPkiIq
YAGn/KyQWKkpzQoxFCE6uuMeOs8d2Hq/AXeqj3T1y6uyldDi0ozAAgSra3qhdRM4
bn/EvGK7NMbioWyiNIPA8iIf3OC4rDNgv/hKPhzDkJtrj8loHQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOUKGxuuowXrVF1C+BkuIpN52GUkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh
MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvNjM1NTU0MzItZmVkNS0z
ODI3LTk1YmEtMmMxMTM5ZTdhOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1
NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4
M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl
YjliODNiMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzywBAwQA
zyxDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAMSU+x65B/+7069gpo3G2OUEBIkyIs5eMyh0z3qSXmNoJVAq
9fVX9y0u7Nbz+LHVfv8rwHw7CPetc+Yr1Huzl9KzXMBCiXq8NgMzlrP1n+n/otrg
lCpoHrTx2Jrb3zQPGa/Cfivb14Vuk1iGaODdhAQ1q2TP0xqXa8prVJVkgy40yknS
R8G6Eepe8cWEeNL5dVCh5WAsDNjR5ZdXAulvKFu4JgXg0qo+DmzqgJm7DfZv1OXD
3dbS0Ck4RgiLKFIMeYpUDwyAg3Q8SHjw2WJ8LskMa41R3a2UJ641GE8eQtIrmFcN
f5CBwjMcViKoOLA8l8U0Ns9E+d1GtkovoUqdPnE=
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:35:40 2025 by rpki-client