Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa
File:                     d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa (raw, json)
Hash identifier:          Z83Cq539VNSGLoX3bSUW03Yh0B/VySHaJxP7W0WwcgM=
Subject key identifier:   32:48:BC:DD:CF:ED:09:4B:9A:81:65:1C:1F:E8:D7:6D:72:C9:72:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58143DF0560B53D87CA2180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:43:df:05:60:b5:3d:87:ca:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0fedb029-3953-4084-99be-a004c22f3299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:ba:1c:98:ed:60:4d:7c:2b:70:c6:72:29:
                    56:3d:ec:ae:92:6e:7f:28:c3:9b:07:c6:16:a6:9e:
                    98:e8:50:85:80:29:8b:2d:fa:50:99:0e:16:b1:25:
                    6a:13:69:bf:0f:c3:0f:c3:13:b8:8b:8a:86:cc:3e:
                    65:d3:9b:d5:07:10:2d:74:8f:48:50:3e:df:33:71:
                    14:13:91:0b:f7:09:85:9b:0e:76:d4:17:c5:84:6a:
                    21:33:97:ca:57:61:31:04:49:de:2e:4e:93:cf:ce:
                    be:e5:f0:35:1e:fb:ae:8c:76:0f:0a:d8:2d:7b:03:
                    41:a2:f6:19:1d:7e:d2:58:e7:aa:b7:e6:81:7b:9e:
                    81:11:29:6b:61:58:89:57:34:3a:7e:75:74:00:24:
                    48:8e:18:49:12:b9:77:84:85:a3:c5:c9:8a:e7:5c:
                    b9:2a:55:99:6c:2d:65:8a:b2:e1:c7:fa:fe:50:a3:
                    64:01:90:97:f9:d1:89:51:93:e8:7e:09:8d:70:d6:
                    26:75:04:0e:ac:1e:c3:b9:a3:3a:3b:24:01:b4:13:
                    8e:72:4e:e0:24:f5:a6:8b:a8:c2:14:9d:fc:7c:92:
                    83:b9:8a:1f:b8:b8:aa:57:5a:62:5d:bf:7a:01:d8:
                    c6:9d:4a:a6:ea:e0:e6:85:b1:3f:45:8b:80:3a:3d:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:BC:DD:CF:ED:09:4B:9A:81:65:1C:1F:E8:D7:6D:72:C9:72:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:17:b9:ee:64:1d:58:67:b1:0b:e2:13:85:d1:5c:da:3a:26:
         7a:58:5d:e6:96:4c:fe:b9:a2:1a:73:5f:18:81:21:f7:1b:6b:
         0b:3b:bd:bb:1f:0b:a4:96:c1:3e:c2:5d:c5:e4:37:95:0e:39:
         65:6b:f2:f3:22:71:d4:19:ff:f8:0e:77:50:a8:7b:55:28:3f:
         f8:56:00:09:32:ec:ed:59:a1:a0:b5:b3:86:d3:50:d1:e3:86:
         cc:50:0c:2a:1a:9d:fc:ee:1d:1a:52:08:dd:0c:96:cc:8a:a1:
         78:24:da:37:d6:1f:c7:b5:3e:43:72:8e:e9:11:1a:8d:84:1d:
         66:0f:e1:97:f8:fb:df:6e:4f:e4:6e:ac:ae:ea:fc:56:4f:98:
         b2:d7:04:0e:2b:2d:62:e4:00:f2:df:44:16:39:b7:29:c4:54:
         f4:c5:da:09:a3:4d:80:61:e5:bf:bc:85:7b:c5:02:62:5a:bc:
         fb:49:da:0e:5b:48:e7:c0:1f:e5:5e:a2:9e:22:8b:90:f1:41:
         17:9f:1b:a9:5c:82:fc:26:c3:03:0c:b0:bc:b7:0e:17:49:0a:
         70:25:b3:4d:43:55:a1:c3:7e:a6:16:77:bc:f8:0e:bb:ad:d1:
         f4:f4:9f:ae:ab:48:51:ad:0b:71:f4:cc:db:2d:67:ee:d8:04:
         2a:3f:52:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUPfBWC1PYfKIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MGZlZGIwMjktMzk1My00MDg0LTk5YmUtYTAwNGMyMmYzMjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon+6HJjtYE18K3DGcilWPeyukm5/KMObB8YW
pp6Y6FCFgCmLLfpQmQ4WsSVqE2m/D8MPwxO4i4qGzD5l05vVBxAtdI9IUD7fM3EU
E5EL9wmFmw521BfFhGohM5fKV2ExBEneLk6Tz86+5fA1HvuujHYPCtgtewNBovYZ
HX7SWOeqt+aBe56BESlrYViJVzQ6fnV0ACRIjhhJErl3hIWjxcmK51y5KlWZbC1l
irLhx/r+UKNkAZCX+dGJUZPofgmNcNYmdQQOrB7DuaM6OyQBtBOOck7gJPWmi6jC
FJ38fJKDuYofuLiqV1piXb96AdjGnUqm6uDmhbE/RYuAOj223wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJIvN3P7QlLmoFlHB/o121yyXKdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDFiZTE4MjMtZjRkZi0z
YTdhLThmMmUtYjY1NWQ5MjM2MWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALMXue5kHVhnsQviE4XRXNo6JnpYXeaWTP65ohpzXxiBIfcbaws7vbsf
C6SWwT7CXcXkN5UOOWVr8vMicdQZ//gOd1Coe1UoP/hWAAky7O1ZoaC1s4bTUNHj
hsxQDCoanfzuHRpSCN0MlsyKoXgk2jfWH8e1PkNyjukRGo2EHWYP4Zf4+99uT+Ru
rK7q/FZPmLLXBA4rLWLkAPLfRBY5tynEVPTF2gmjTYBh5b+8hXvFAmJavPtJ2g5b
SOfAH+Veop4ii5DxQRefG6lcgvwmwwMMsLy3DhdJCnAls01DVaHDfqYWd7z4Drut
0fT0n66rSFGtC3H0zNstZ+7YBCo/Uqw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:22 2025 by rpki-client