Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/608fb941-9794-3752-99bc-f23a84c5b8ee.roa
File:                     608fb941-9794-3752-99bc-f23a84c5b8ee.roa (raw, json)
Hash identifier:          Y5fM7SKWr2ygPOz10BhWpLx1QtiWf4xU5uPbsEGYAq8=
Subject key identifier:   DC:46:0E:9F:12:AD:B9:1D:A5:D7:70:CF:3D:0D:41:55:8D:2A:4E:B0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C892F79F50D30FA3F9770
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/608fb941-9794-3752-99bc-f23a84c5b8ee.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.98.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:89:2f:79:f5:0d:30:fa:3f:97:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=023153a8-b58c-4f93-b455-f938f8b22aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:ad:c3:fb:32:0c:16:18:72:a3:4f:f7:52:
                    19:ae:4e:3e:ee:89:a3:fa:30:de:25:3b:bf:8f:29:
                    71:67:7f:36:d0:93:ea:e3:b2:17:a2:24:b7:5d:87:
                    16:fb:77:f1:f7:8b:ac:a5:21:8f:9d:b4:dd:a0:f2:
                    94:aa:3c:27:af:a1:2c:4f:22:71:49:c2:33:f5:f7:
                    ce:5b:14:ea:81:9f:9e:8b:4d:a1:cc:ce:fa:8d:4b:
                    7c:03:d8:20:41:cd:4d:cb:52:b7:6b:03:62:21:d9:
                    80:09:ad:0c:47:13:e9:88:db:8c:ee:78:cc:b9:b4:
                    22:53:ac:40:2a:4f:0c:05:32:6e:79:c8:93:b0:6f:
                    5f:46:1c:57:b2:38:42:be:a8:b5:3e:a7:cd:c2:17:
                    ec:7a:ab:76:c9:7a:3a:84:6c:56:85:eb:df:5e:b7:
                    43:39:35:ec:15:04:ca:da:e8:00:30:49:81:42:71:
                    97:33:24:8d:40:41:35:b9:a3:ff:7f:0e:15:83:01:
                    fb:4f:f9:41:2e:7b:ef:45:75:92:07:ba:e8:7e:c9:
                    ca:d6:e1:2a:6b:02:c7:df:47:40:f0:75:96:ac:4c:
                    ab:a6:33:c4:7a:3c:a8:b8:fd:b3:d5:67:f7:06:b8:
                    f1:2b:45:38:e6:ae:48:04:9a:d0:92:88:3e:dc:5d:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:46:0E:9F:12:AD:B9:1D:A5:D7:70:CF:3D:0D:41:55:8D:2A:4E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/608fb941-9794-3752-99bc-f23a84c5b8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.98.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:64:e9:ff:c3:72:a7:f6:87:be:b2:8b:47:fc:1d:01:36:da:
         1b:7b:58:43:38:d2:95:f2:58:be:43:75:d8:98:8a:62:87:0d:
         08:3c:5d:0b:b2:de:73:39:fe:ec:ea:bc:dd:fd:3c:36:68:e8:
         70:76:88:b9:26:44:c3:29:3a:02:76:75:a1:5b:d7:42:3f:18:
         8a:e4:8e:11:76:3e:ae:d2:41:71:68:cf:94:90:65:a1:38:e3:
         01:34:2a:56:0b:56:c1:99:b4:e5:87:04:82:5f:d5:4d:f2:01:
         87:51:91:ec:45:d0:04:a5:68:fa:8e:7a:2a:cf:4e:c1:fc:d4:
         61:24:34:e3:49:e1:39:ad:b1:c6:0d:89:34:2f:e1:77:6f:c4:
         55:d2:84:a0:84:d9:9c:82:72:d4:76:78:74:8b:00:95:c7:53:
         a0:b2:8c:13:55:2b:f0:11:02:69:f7:38:ea:10:8c:fc:eb:96:
         1b:dd:a5:8a:4f:a6:07:58:4f:6a:81:7b:2e:29:b8:ec:a9:75:
         01:52:9f:d0:cb:77:3c:f5:61:ff:b4:45:d4:0a:5f:d2:82:d3:
         46:e9:8c:09:d7:42:65:e8:c4:e7:5e:17:86:36:f8:46:c9:31:
         67:9b:52:a6:c5:6d:0e:66:af:92:aa:1f:ca:82:13:f6:e1:97:
         63:9c:7b:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPIkvefUNMPo/l3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
MDIzMTUzYTgtYjU4Yy00ZjkzLWI0NTUtZjkzOGY4YjIyYWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Ctw/syDBYYcqNP91IZrk4+7omj+jDeJTu/
jylxZ3820JPq47IXoiS3XYcW+3fx94uspSGPnbTdoPKUqjwnr6EsTyJxScIz9ffO
WxTqgZ+ei02hzM76jUt8A9ggQc1Ny1K3awNiIdmACa0MRxPpiNuM7njMubQiU6xA
Kk8MBTJueciTsG9fRhxXsjhCvqi1PqfNwhfseqt2yXo6hGxWhevfXrdDOTXsFQTK
2ugAMEmBQnGXMySNQEE1uaP/fw4VgwH7T/lBLnvvRXWSB7rofsnK1uEqawLH30dA
8HWWrEyrpjPEejyouP2z1Wf3BrjxK0U45q5IBJrQkog+3F0ytQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxGDp8Srbkdpddwzz0NQVWNKk6wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA4ZmI5NDEtOTc5NC0z
NzUyLTk5YmMtZjIzYTg0YzViOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGGKkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALpk6f/Dcqf2h76yi0f8HQE22ht7WEM40pXyWL5DddiYimKHDQg8XQuy
3nM5/uzqvN39PDZo6HB2iLkmRMMpOgJ2daFb10I/GIrkjhF2Pq7SQXFoz5SQZaE4
4wE0KlYLVsGZtOWHBIJf1U3yAYdRkexF0ASlaPqOeirPTsH81GEkNONJ4TmtscYN
iTQv4XdvxFXShKCE2ZyCctR2eHSLAJXHU6CyjBNVK/ARAmn3OOoQjPzrlhvdpYpP
pgdYT2qBey4puOypdQFSn9DLdzz1Yf+0RdQKX9KC00bpjAnXQmXoxOdeF4Y2+EbJ
MWebUqbFbQ5mr5KqH8qCE/bhl2Oce+w=
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:34 2025 by rpki-client