Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afa62003-0728-3b9d-b69f-43d8da98c479.roa
File:                     afa62003-0728-3b9d-b69f-43d8da98c479.roa (raw, json)
Hash identifier:          aIFgj1u8c2htVwT7RnoAKfYJ1yqVi8qGYhqU2/SWR88=
Subject key identifier:   A1:51:05:1A:03:A4:88:95:9A:F2:BF:07:41:1A:06:EF:75:2A:A8:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C8D487A914274255B6780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afa62003-0728-3b9d-b69f-43d8da98c479.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        24.99.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:8d:48:7a:91:42:74:25:5b:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=94fa99eb-f115-457d-b3da-29f91342ba9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:0e:36:00:1f:92:7b:f8:d0:be:20:e7:b3:
                    01:5e:13:86:c1:5d:db:41:cf:b0:d7:db:f0:b7:b4:
                    9f:af:91:7e:86:8f:f8:3c:ce:ca:2b:1d:2b:cb:c4:
                    b7:6e:8f:fa:72:06:dc:5d:08:f2:9c:c2:53:5a:4b:
                    5c:ed:27:67:da:df:ca:31:70:a4:71:3c:94:47:11:
                    7b:a9:48:b4:cd:4e:e8:44:70:ea:77:01:3b:e8:bf:
                    a8:fd:d7:87:58:18:ed:02:fa:e8:65:62:02:d5:05:
                    a5:3f:5e:65:35:c5:62:73:5b:ae:53:69:74:1f:aa:
                    cd:d8:92:b5:98:be:64:0e:4d:bb:a1:44:9d:de:9c:
                    39:ab:31:27:2d:83:e3:38:9b:54:38:f7:2f:c9:e9:
                    5c:cc:bc:44:55:c6:a4:c1:00:84:01:7b:64:96:fa:
                    05:37:2b:d2:8b:d2:e6:14:fe:ba:01:4a:51:59:50:
                    d5:65:f5:30:47:55:2c:2a:e9:0a:08:95:52:9e:b8:
                    f3:a7:7e:00:0c:ba:b3:08:2a:31:4a:21:77:eb:a6:
                    ec:05:f7:9d:1b:2a:3a:e5:82:34:5c:99:cd:98:97:
                    2e:1a:83:69:63:79:86:bd:3f:0f:81:dd:38:e7:0d:
                    7d:0b:99:3b:ed:53:3c:2b:f4:31:30:ca:41:db:ed:
                    7e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:05:1A:03:A4:88:95:9A:F2:BF:07:41:1A:06:EF:75:2A:A8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afa62003-0728-3b9d-b69f-43d8da98c479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:16:6b:b9:76:9b:37:99:76:21:ec:ce:3d:08:b3:e4:82:99:
         06:52:92:c6:3b:f6:43:0c:70:9b:66:99:e1:87:44:ea:31:b8:
         84:85:dd:1d:f8:4c:33:f6:18:ac:c1:b1:1a:68:b5:3d:f5:f0:
         bc:ab:c1:94:67:89:5a:20:ae:bf:96:dd:ab:32:0e:98:89:8f:
         58:3c:66:92:45:48:4b:98:50:07:d1:1f:af:c9:43:11:ba:20:
         13:05:a3:4a:0e:7f:20:d6:90:2d:c9:66:41:51:92:b5:e1:bd:
         d1:cf:16:e5:aa:e7:4e:4a:bf:a2:73:53:89:6a:c2:33:82:1f:
         60:f8:3a:81:00:e0:df:85:9a:66:c3:19:27:58:73:56:80:fc:
         1a:e3:8f:3f:48:2e:ee:b1:e8:4a:82:6e:f1:7a:f4:9a:a8:5f:
         ff:b5:bb:15:0a:6e:f0:77:5c:b9:53:30:6e:01:85:3f:9c:2c:
         87:d7:b5:f7:32:92:4a:e3:1e:08:b4:d7:12:46:a3:99:19:d8:
         4e:4d:de:fb:e0:82:1a:00:19:29:2c:d4:ee:62:e4:df:d5:6d:
         01:62:4d:af:56:d1:0b:39:36:79:83:cc:80:60:31:db:d1:42:
         2b:dd:83:56:97:e9:b9:c7:b7:ec:17:79:fd:85:05:42:ef:52:
         d8:b7:f3:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPI1IepFCdCVbZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
OTRmYTk5ZWItZjExNS00NTdkLWIzZGEtMjlmOTEzNDJiYTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo18ONgAfknv40L4g57MBXhOGwV3bQc+w19vw
t7Sfr5F+ho/4PM7KKx0ry8S3bo/6cgbcXQjynMJTWktc7Sdn2t/KMXCkcTyURxF7
qUi0zU7oRHDqdwE76L+o/deHWBjtAvroZWIC1QWlP15lNcVic1uuU2l0H6rN2JK1
mL5kDk27oUSd3pw5qzEnLYPjOJtUOPcvyelczLxEVcakwQCEAXtklvoFNyvSi9Lm
FP66AUpRWVDVZfUwR1UsKukKCJVSnrjzp34ADLqzCCoxSiF366bsBfedGyo65YI0
XJnNmJcuGoNpY3mGvT8Pgd045w19C5k77VM8K/QxMMpB2+1+fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFRBRoDpIiVmvK/B0EaBu91KqikMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZhNjIwMDMtMDcyOC0z
YjlkLWI2OWYtNDNkOGRhOThjNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGGPrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIWa7l2mzeZdiHszj0Is+SCmQZSksY79kMMcJtmmeGHROoxuISF3R34
TDP2GKzBsRpotT318LyrwZRniVogrr+W3asyDpiJj1g8ZpJFSEuYUAfRH6/JQxG6
IBMFo0oOfyDWkC3JZkFRkrXhvdHPFuWq505Kv6JzU4lqwjOCH2D4OoEA4N+FmmbD
GSdYc1aA/Brjjz9ILu6x6EqCbvF69JqoX/+1uxUKbvB3XLlTMG4BhT+cLIfXtfcy
kkrjHgi01xJGo5kZ2E5N3vvgghoAGSks1O5i5N/VbQFiTa9W0Qs5NnmDzIBgMdvR
Qivdg1aX6bnHt+wXef2FBULvUti384s=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:00:31 2025 by rpki-client