Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4942005-a8d9-3202-8f2b-f9b83b2cb315.roa
File:                     f4942005-a8d9-3202-8f2b-f9b83b2cb315.roa (raw, json)
Hash identifier:          2Ejros7D7QPUTSbMOfS2CgIpw6vH4qbCNnyhNbOONWE=
Subject key identifier:   EE:9D:09:96:FA:F2:2D:9B:E5:BD:A0:B5:D7:73:C8:81:32:43:4C:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581442B758FB8F82349A9C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4942005-a8d9-3202-8f2b-f9b83b2cb315.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:44:2b:75:8f:b8:f8:23:49:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=fa9904a3-94bc-45ca-8607-b2348880a793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:79:ba:35:19:f3:a8:d6:ee:1c:e8:5a:43:
                    eb:42:6b:26:eb:f0:7e:c5:40:58:7c:38:fa:8c:7c:
                    82:9e:38:89:21:27:00:fc:73:b0:1a:09:df:6b:62:
                    a8:01:f6:30:04:bb:49:f8:5e:9a:10:15:e6:c3:df:
                    9f:72:c9:c1:1d:8a:8f:45:08:6f:ef:5f:3b:09:5f:
                    c5:ee:d0:96:fb:42:e9:98:51:32:7c:ca:76:2c:48:
                    da:0f:85:f8:60:b9:4a:56:2c:f2:e3:ed:69:98:6c:
                    22:ad:64:3d:f1:e1:ff:58:42:68:70:4c:99:ef:fb:
                    c7:8b:98:eb:cd:53:71:e3:7e:ca:b8:29:43:00:f5:
                    06:52:0c:e5:d7:eb:c6:b2:23:01:64:6f:be:56:7c:
                    30:aa:41:74:8a:9e:36:97:bb:49:a3:da:ec:ef:08:
                    fd:0b:4f:5c:54:72:ba:48:5c:26:b0:65:d2:20:02:
                    27:0a:2f:14:2d:60:1a:19:05:75:b2:fd:48:b2:d4:
                    01:aa:d5:39:14:99:81:36:db:da:7f:50:75:2b:3b:
                    f2:c1:fc:ac:67:7a:82:20:42:e9:68:10:48:ca:38:
                    e9:f4:cb:0e:f0:a2:ae:6a:d3:ed:74:95:33:86:4e:
                    4b:ed:8c:65:30:bb:b3:ae:e0:7b:95:5f:85:d5:91:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9D:09:96:FA:F2:2D:9B:E5:BD:A0:B5:D7:73:C8:81:32:43:4C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4942005-a8d9-3202-8f2b-f9b83b2cb315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:30:95:2c:fc:2e:5b:ce:14:19:fb:c9:17:d9:f4:1f:5e:5b:
         24:fa:45:92:68:ea:84:85:35:bc:d8:21:31:4f:ab:16:b5:54:
         6a:72:79:a6:1f:9e:30:3c:80:75:2c:43:34:ee:15:78:52:da:
         94:ff:84:26:c6:0c:e3:c3:5c:9f:c6:66:2f:f6:a5:67:47:f0:
         ff:1c:54:01:e9:0d:5f:ce:4a:a3:e9:fb:ce:a7:ec:5c:34:33:
         2a:44:50:de:53:34:aa:b3:ee:a0:c3:26:0e:ba:03:4e:4a:04:
         ca:83:cd:0d:c2:1b:2d:0d:c8:33:6a:25:58:f0:36:b4:e6:bd:
         e3:fa:d2:f1:79:f9:8b:0d:8a:51:c4:da:67:78:21:0a:44:48:
         06:9f:95:37:d0:fa:fc:81:df:44:0c:61:f5:d7:aa:ef:61:5f:
         d1:e1:40:f8:72:7f:e8:6f:5b:b6:c7:42:00:56:1e:0c:82:35:
         e2:4a:0c:99:ad:1c:38:fe:70:c3:47:de:16:00:00:58:67:c6:
         1e:4b:93:1e:06:a5:f6:03:36:bc:1f:d5:24:b9:fa:90:81:bb:
         ff:85:3f:d6:65:a3:ec:84:86:06:24:d0:99:05:8a:6f:4d:bf:
         82:a8:10:1a:f9:71:85:cf:f1:f1:73:c1:3c:b5:6e:61:0a:7c:
         c0:17:17:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUQrdY+4+CNJqcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmE5OTA0YTMtOTRiYy00NWNhLTg2MDctYjIzNDg4ODBhNzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjF5ujUZ86jW7hzoWkPrQmsm6/B+xUBYfDj6
jHyCnjiJIScA/HOwGgnfa2KoAfYwBLtJ+F6aEBXmw9+fcsnBHYqPRQhv7187CV/F
7tCW+0LpmFEyfMp2LEjaD4X4YLlKVizy4+1pmGwirWQ98eH/WEJocEyZ7/vHi5jr
zVNx437KuClDAPUGUgzl1+vGsiMBZG++VnwwqkF0ip42l7tJo9rs7wj9C09cVHK6
SFwmsGXSIAInCi8ULWAaGQV1sv1IstQBqtU5FJmBNtvaf1B1KzvywfysZ3qCIELp
aBBIyjjp9MsO8KKuatPtdJUzhk5L7YxlMLuzruB7lV+F1ZFDawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6dCZb68i2b5b2gtddzyIEyQ0wRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjQ5NDIwMDUtYThkOS0z
MjAyLThmMmItZjliODNiMmNiMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcwlSz8LlvOFBn7yRfZ9B9eWyT6RZJo6oSFNbzYITFPqxa1VGpyeaYf
njA8gHUsQzTuFXhS2pT/hCbGDOPDXJ/GZi/2pWdH8P8cVAHpDV/OSqPp+86n7Fw0
MypEUN5TNKqz7qDDJg66A05KBMqDzQ3CGy0NyDNqJVjwNrTmveP60vF5+YsNilHE
2md4IQpESAaflTfQ+vyB30QMYfXXqu9hX9HhQPhyf+hvW7bHQgBWHgyCNeJKDJmt
HDj+cMNH3hYAAFhnxh5Lkx4GpfYDNrwf1SS5+pCBu/+FP9Zlo+yEhgYk0JkFim9N
v4KoEBr5cYXP8fFzwTy1bmEKfMAXF2Y=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:05 2025 by rpki-client