Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/deb551cb-f925-3bb9-a52a-aa4c9a51f436.roa
File:                     deb551cb-f925-3bb9-a52a-aa4c9a51f436.roa (raw, json)
Hash identifier:          vIStV9FMOkSerls6dfj0fp+nlxnTdf7GvedPvzSriLw=
Subject key identifier:   CA:81:BA:FB:ED:6F:CA:CB:3E:43:41:90:32:A5:A5:B0:63:8E:11:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E2F39BEEC0B6ED11E9C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/deb551cb-f925-3bb9-a52a-aa4c9a51f436.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7922
IP address blocks:        24.60.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:2f:39:be:ec:0b:6e:d1:1e:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=ef195a69-7913-419c-bcb4-33924aeb7c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:e8:98:42:ea:6d:af:c7:05:96:ad:8d:3e:
                    78:a9:92:35:bc:26:d1:0c:bb:08:4a:29:97:ed:fa:
                    1c:a2:4f:86:41:a8:73:26:34:d6:7d:2f:05:bf:57:
                    7f:06:05:f1:50:d5:5f:cf:be:e2:9d:1b:a6:c7:72:
                    90:48:c7:c0:18:f5:10:37:89:a0:83:c3:34:a1:4c:
                    73:73:44:5c:91:70:13:32:c1:ed:29:0a:ae:44:d7:
                    36:0b:fd:3f:8b:7b:d8:c9:64:ea:dd:53:b8:d5:5c:
                    1a:4a:b8:c5:46:04:fb:92:64:c4:89:86:f3:2a:03:
                    e0:7e:39:c8:c4:82:ba:f7:41:b7:bb:92:2d:93:0c:
                    f1:90:21:70:c5:75:04:fd:5f:f1:f4:61:eb:91:83:
                    52:59:eb:ef:6c:ec:34:ba:5c:4b:3e:8f:bc:d6:c6:
                    e4:4b:c1:eb:21:79:41:fd:1f:6d:7b:3e:80:62:7f:
                    e8:43:6e:a9:a6:a5:9f:7f:53:78:49:ae:1f:60:b3:
                    06:58:79:be:fb:04:7d:30:b6:d5:b0:b9:b2:61:9e:
                    2a:af:ac:fd:0f:8d:f8:b9:ba:a0:f2:ba:3f:93:c5:
                    7f:f8:0e:e8:b6:54:ae:4a:95:4a:ed:1b:ba:7f:fa:
                    cf:95:2f:a2:05:ab:da:8e:6a:95:98:ed:c7:f5:97:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:81:BA:FB:ED:6F:CA:CB:3E:43:41:90:32:A5:A5:B0:63:8E:11:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/deb551cb-f925-3bb9-a52a-aa4c9a51f436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.60.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:35:89:58:d6:06:a1:ce:7e:d5:a8:87:97:77:fe:e6:5a:2f:
         99:0c:0c:90:a5:0f:b7:9c:89:5d:e0:a7:b2:e4:ae:f2:32:38:
         13:54:d3:06:9a:29:87:55:fb:29:fd:d8:53:98:f4:23:f6:5f:
         ed:21:f3:7e:e4:26:24:13:c9:39:62:c6:c3:73:6c:4c:e7:fb:
         c2:be:ab:f4:9f:f5:30:75:d9:f4:52:43:5e:c7:06:3b:8a:71:
         06:3b:ce:df:5b:42:ef:34:b7:82:a1:e0:cd:65:6d:4b:ad:6a:
         49:32:9a:1e:1f:2b:a7:78:b9:ac:e4:2b:43:b4:1d:36:c4:57:
         42:9d:f3:7d:31:e8:68:99:24:f7:50:a7:2a:1c:6a:b3:6e:11:
         14:43:c0:1c:f7:1d:75:3a:5e:0b:6e:22:55:81:29:6b:34:4f:
         1d:03:b9:13:85:ae:12:09:56:04:ad:2a:62:e8:ed:bb:45:dd:
         55:1e:cd:91:c7:97:cb:0b:2d:19:5f:a7:1b:cf:3b:fc:9b:44:
         e6:4e:ae:50:86:e0:e2:4a:9e:c6:9b:b3:f9:07:ff:0a:82:9d:
         6e:52:18:09:c5:78:a6:07:ed:0d:41:77:94:60:a8:ba:a4:78:
         43:23:88:68:36:77:a5:48:f6:bc:c5:98:db:28:b0:b3:5c:11:
         0d:93:82:2f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiebi85vuwLbtEenIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZWYxOTVhNjktNzkxMy00MTljLWJjYjQtMzM5MjRhZWI3YzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IfomELqba/HBZatjT54qZI1vCbRDLsISimX
7focok+GQahzJjTWfS8Fv1d/BgXxUNVfz77inRumx3KQSMfAGPUQN4mgg8M0oUxz
c0RckXATMsHtKQquRNc2C/0/i3vYyWTq3VO41VwaSrjFRgT7kmTEiYbzKgPgfjnI
xIK690G3u5ItkwzxkCFwxXUE/V/x9GHrkYNSWevvbOw0ulxLPo+81sbkS8HrIXlB
/R9tez6AYn/oQ26ppqWff1N4Sa4fYLMGWHm++wR9MLbVsLmyYZ4qr6z9D434ubqg
8ro/k8V/+A7otlSuSpVK7Ru6f/rPlS+iBavajmqVmO3H9ZcsAQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMqBuvvtb8rLPkNBkDKlpbBjjhHGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGViNTUxY2ItZjkyNS0z
YmI5LWE1MmEtYWE0YzlhNTFmNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCGDwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA2DWJWNYGoc5+1aiHl3f+5lovmQwMkKUPt5yJXeCnsuSu8jI4E1TTBpop
h1X7Kf3YU5j0I/Zf7SHzfuQmJBPJOWLGw3NsTOf7wr6r9J/1MHXZ9FJDXscGO4px
BjvO31tC7zS3gqHgzWVtS61qSTKaHh8rp3i5rOQrQ7QdNsRXQp3zfTHoaJkk91Cn
Khxqs24RFEPAHPcddTpeC24iVYEpazRPHQO5E4WuEglWBK0qYujtu0XdVR7NkceX
ywstGV+nG887/JtE5k6uUIbg4kqexpuz+Qf/CoKdblIYCcV4pgftDUF3lGCouqR4
QyOIaDZ3pUj2vMWY2yiws1wRDZOCLw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:26 2025 by rpki-client