Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fa2ddf3-927d-3d2f-a212-fdee38513a24.roa
File:                     9fa2ddf3-927d-3d2f-a212-fdee38513a24.roa (raw, json)
Hash identifier:          5yjltwjlUc6HYe7UBYBvFzy2HeuRDChHjwb5I3+wRSg=
Subject key identifier:   47:03:67:C1:30:10:F3:E2:6B:6E:5C:22:CB:CB:60:BF:65:60:16:17
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581D5EEFAA38ECE47F0DB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fa2ddf3-927d-3d2f-a212-fdee38513a24.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:d5:ee:fa:a3:8e:ce:47:f0:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=917bc539-66b6-46d9-a216-200415634554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:6a:76:e2:56:d6:cc:8e:5e:41:60:e7:2e:
                    13:eb:73:7a:7b:2c:8b:c9:4a:67:d2:2b:43:85:ce:
                    f0:80:e7:71:2a:23:c7:a9:7f:4b:dc:94:4b:42:dd:
                    9a:4e:a7:4c:63:46:7a:b6:0a:3e:a1:00:d7:de:10:
                    d1:80:29:78:ce:21:b6:b4:06:7b:dc:8a:eb:9d:aa:
                    43:17:e7:be:6a:5a:18:db:a0:1a:f6:df:6b:84:d7:
                    d9:78:19:43:5f:bb:52:65:82:6d:15:13:8d:bc:c9:
                    46:9e:8b:39:70:fa:5d:e6:e8:ec:18:d8:d6:c3:47:
                    d7:28:4e:b7:4e:56:42:c7:fa:c6:c3:0e:22:54:b9:
                    79:19:3a:56:06:8e:68:de:0b:69:e3:d8:fc:43:ac:
                    a3:b8:8e:bb:8f:fa:9a:ee:f8:6f:23:2a:11:6a:53:
                    85:3d:da:13:48:4c:42:b2:55:07:2a:9b:16:16:34:
                    2c:4c:8a:6e:3b:51:56:fa:f4:92:e2:e3:35:6d:41:
                    d5:2c:ca:59:20:4e:81:a4:7f:39:28:4f:11:3a:95:
                    ad:67:11:09:08:3a:b8:c8:8a:ff:d5:49:cf:16:c5:
                    e8:75:17:4e:81:fa:3b:68:3a:ab:2c:bf:97:e6:db:
                    95:74:4e:ef:b3:02:ec:87:19:4c:7a:d4:82:31:2f:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:03:67:C1:30:10:F3:E2:6B:6E:5C:22:CB:CB:60:BF:65:60:16:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fa2ddf3-927d-3d2f-a212-fdee38513a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:ab:f4:65:8b:fd:7a:f4:2b:f4:78:4f:45:f9:68:30:16:
         81:5c:1e:45:89:56:67:60:1f:7a:37:5f:78:2e:a9:6c:0a:94:
         03:6f:e9:5c:73:73:1a:7b:10:c0:71:73:6c:97:65:02:53:44:
         af:a5:43:ee:ee:b3:1f:15:26:98:e2:9b:cd:86:05:e7:f1:04:
         80:59:82:f3:99:d3:fe:7c:a3:09:6e:7a:f4:26:56:99:a7:99:
         ae:34:ec:35:ff:cd:99:a9:80:3a:db:94:4a:47:31:14:82:fe:
         c0:39:96:bc:aa:a1:36:a6:91:fe:49:8f:5f:3f:50:3a:57:05:
         8c:ff:29:2f:03:71:6b:66:0c:59:2b:cb:21:39:8c:35:1f:fc:
         e5:04:cd:18:45:d1:95:27:52:9f:dd:29:de:b4:49:49:17:97:
         94:60:1f:e2:f9:ee:78:75:b9:38:eb:fd:54:6e:ac:7e:cf:f0:
         53:4a:d3:43:cf:c3:c5:ff:6c:da:fd:04:4f:eb:f0:c0:5f:d1:
         1e:1a:79:97:8f:bf:2d:7b:ae:c5:e8:42:5c:c7:50:0a:63:64:
         30:95:db:7b:a7:64:c7:d0:af:11:15:08:e5:6a:15:69:88:ac:
         a5:6b:b9:b0:c5:3d:52:3d:4b:23:46:77:9e:b5:e8:7b:ee:8d:
         bf:bb:22:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdXu+qOOzkfw24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTE3YmM1MzktNjZiNi00NmQ5LWEyMTYtMjAwNDE1NjM0NTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPBqduJW1syOXkFg5y4T63N6eyyLyUpn0itD
hc7wgOdxKiPHqX9L3JRLQt2aTqdMY0Z6tgo+oQDX3hDRgCl4ziG2tAZ73IrrnapD
F+e+aloY26Aa9t9rhNfZeBlDX7tSZYJtFRONvMlGnos5cPpd5ujsGNjWw0fXKE63
TlZCx/rGww4iVLl5GTpWBo5o3gtp49j8Q6yjuI67j/qa7vhvIyoRalOFPdoTSExC
slUHKpsWFjQsTIpuO1FW+vSS4uM1bUHVLMpZIE6BpH85KE8ROpWtZxEJCDq4yIr/
1UnPFsXodRdOgfo7aDqrLL+X5tuVdE7vswLshxlMetSCMS+hLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcDZ8EwEPPia25cIsvLYL9lYBYXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWZhMmRkZjMtOTI3ZC0z
ZDJmLWEyMTItZmRlZTM4NTEzYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4Qq/Rli/169Cv0eE9F+WgwFoFcHkWJVmdgH3o3X3guqWwKlANv6Vxz
cxp7EMBxc2yXZQJTRK+lQ+7usx8VJpjim82GBefxBIBZgvOZ0/58owluevQmVpmn
ma407DX/zZmpgDrblEpHMRSC/sA5lryqoTamkf5Jj18/UDpXBYz/KS8DcWtmDFkr
yyE5jDUf/OUEzRhF0ZUnUp/dKd60SUkXl5RgH+L57nh1uTjr/VRurH7P8FNK00PP
w8X/bNr9BE/r8MBf0R4aeZePvy17rsXoQlzHUApjZDCV23unZMfQrxEVCOVqFWmI
rKVrubDFPVI9SyNGd5616Hvujb+7ItM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:40 2025 by rpki-client