Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/025b17c8-c8e2-38db-8a1d-56d3a97a36cf.roa
File:                     025b17c8-c8e2-38db-8a1d-56d3a97a36cf.roa (raw, json)
Hash identifier:          HDzrtYlUrjFIF13z1+/Zx32ywUSmv1YIKufhXNgbiYg=
Subject key identifier:   C4:A0:80:3F:50:CA:15:02:35:95:7D:4B:E8:07:89:3C:4D:B4:CA:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143DA4D7ADB943FB69284AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/025b17c8-c8e2-38db-8a1d-56d3a97a36cf.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        24.63.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:a4:d7:ad:b9:43:fb:69:28:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=bfa5ee7c-639c-4576-9568-581d8e582f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:ae:73:28:e5:a8:30:94:d0:99:81:01:3d:
                    aa:ec:a7:51:a3:9e:97:9d:e3:98:50:18:7d:66:9d:
                    f7:ee:31:84:d4:7a:18:4e:e3:c9:c3:5a:51:5d:29:
                    95:71:4a:80:eb:da:73:f4:e4:66:d4:f0:e0:e1:22:
                    84:f0:8c:c2:d6:f5:71:d4:ed:a6:70:f6:eb:2f:21:
                    44:a7:17:8e:f0:60:2b:f9:fe:87:f9:bb:96:e9:3a:
                    98:9f:40:09:d2:e3:83:a1:ef:0e:af:24:ed:e6:fd:
                    5d:83:1f:ea:e3:e7:29:1b:80:cd:c3:e9:19:4c:62:
                    92:37:c2:47:a3:ac:a1:3a:3a:16:36:fe:0d:83:8a:
                    26:64:b8:20:70:c4:1e:cf:c8:c0:96:39:03:b2:9d:
                    b0:d7:9d:75:72:39:58:24:f3:92:20:82:98:51:05:
                    be:63:89:f9:3c:97:96:3d:ef:b4:58:1d:4f:4b:ca:
                    25:3b:eb:88:8b:0c:04:9d:c3:71:82:96:c9:36:28:
                    c4:93:e1:02:c0:d2:86:bc:20:92:b1:42:19:cf:41:
                    c2:e1:9a:73:4a:65:58:41:89:e8:1c:a5:82:bb:c6:
                    eb:1f:b0:ee:28:ef:a0:f3:0b:ad:ea:63:10:95:85:
                    2c:17:21:8e:9d:b0:f8:9a:d2:cf:f8:7f:76:2d:87:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A0:80:3F:50:CA:15:02:35:95:7D:4B:E8:07:89:3C:4D:B4:CA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/025b17c8-c8e2-38db-8a1d-56d3a97a36cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:7c:78:53:e7:10:3f:ce:31:44:a0:91:29:e9:97:bd:42:b0:
         75:0b:d6:7b:2b:48:87:2e:99:63:ce:c1:88:c1:41:f8:4d:eb:
         aa:73:3a:88:6d:36:cc:9f:89:77:ca:b7:b7:f1:ec:c1:3e:00:
         e0:24:e7:7d:16:e1:d6:4e:22:52:b7:9d:0b:3d:42:e9:41:c2:
         40:d2:a1:bd:d2:be:3d:53:96:e0:93:1a:54:b6:7a:28:96:b4:
         b4:71:c3:80:e4:3b:1c:cb:d0:bf:5e:2d:4d:c6:c0:24:b8:7b:
         06:d2:a0:97:6e:e1:e6:7d:a0:92:1a:50:77:a3:67:cc:60:d4:
         af:cc:c0:10:f1:ba:f5:d6:0d:9b:ae:31:7c:8c:15:e3:fe:43:
         8f:8f:1f:aa:2e:64:c6:4c:d5:c2:43:2e:b6:bc:37:9b:f6:e4:
         be:ce:b0:5a:1c:ce:92:f4:7f:a1:aa:5a:67:1a:2c:1c:80:72:
         89:2d:02:e1:ec:a6:a3:9c:e4:f6:8b:fc:71:72:22:f2:3f:0a:
         93:5c:13:2b:2a:ff:79:b2:c2:f0:95:86:43:41:42:c0:3a:e1:
         a0:3d:ff:58:61:ba:1d:75:ca:a6:32:82:bf:6f:e0:77:70:ab:
         93:3d:a5:90:bb:71:12:4e:c9:4a:a8:d3:cb:3a:07:b6:e1:fb:
         ab:69:7c:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPaTXrblD+2koSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
YmZhNWVlN2MtNjM5Yy00NTc2LTk1NjgtNTgxZDhlNTgyZjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG+ucyjlqDCU0JmBAT2q7KdRo56XneOYUBh9
Zp337jGE1HoYTuPJw1pRXSmVcUqA69pz9ORm1PDg4SKE8IzC1vVx1O2mcPbrLyFE
pxeO8GAr+f6H+buW6TqYn0AJ0uODoe8OryTt5v1dgx/q4+cpG4DNw+kZTGKSN8JH
o6yhOjoWNv4Ng4omZLggcMQez8jAljkDsp2w1511cjlYJPOSIIKYUQW+Y4n5PJeW
Pe+0WB1PS8olO+uIiwwEncNxgpbJNijEk+ECwNKGvCCSsUIZz0HC4ZpzSmVYQYno
HKWCu8brH7DuKO+g8wut6mMQlYUsFyGOnbD4mtLP+H92LYfYLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSggD9QyhUCNZV9S+gHiTxNtMpmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDI1YjE3YzgtYzhlMi0z
OGRiLThhMWQtNTZkM2E5N2EzNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGD8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMN8eFPnED/OMUSgkSnpl71CsHUL1nsrSIcumWPOwYjBQfhN66pzOoht
NsyfiXfKt7fx7ME+AOAk530W4dZOIlK3nQs9QulBwkDSob3Svj1TluCTGlS2eiiW
tLRxw4DkOxzL0L9eLU3GwCS4ewbSoJdu4eZ9oJIaUHejZ8xg1K/MwBDxuvXWDZuu
MXyMFeP+Q4+PH6ouZMZM1cJDLra8N5v25L7OsFoczpL0f6GqWmcaLByAcoktAuHs
pqOc5PaL/HFyIvI/CpNcEysq/3mywvCVhkNBQsA64aA9/1hhuh11yqYygr9v4Hdw
q5M9pZC7cRJOyUqo08s6B7bh+6tpfDw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:09:42 2025 by rpki-client