Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5a0703e5-24b8-37d9-9eeb-74244b211ead.roa
File:                     5a0703e5-24b8-37d9-9eeb-74244b211ead.roa (raw, json)
Hash identifier:          hGMBOgy2GmCylamp8uLlyLISEwHcpacUSVyiz1tVQqE=
Subject key identifier:   D5:BD:75:8F:C8:16:04:BD:A1:94:3A:28:EC:BB:B0:93:67:7C:EB:3B
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285849CBCF8AE64F5831D0664EF8F0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5a0703e5-24b8-37d9-9eeb-74244b211ead.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     263214
IP address blocks:        206.48.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8a:e6:4f:58:31:d0:66:4e:f8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=d22b29f8-37a0-4c60-9e6f-5b0946844a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:e7:da:8f:5e:3e:3f:26:69:45:f0:f2:df:
                    4e:7b:9b:fb:77:80:86:87:70:f1:e2:f7:9e:28:da:
                    03:5e:6b:d2:e6:cc:73:c1:5f:fb:7a:05:56:6a:a2:
                    0b:ab:5f:e1:26:18:2d:09:ec:f1:0d:48:f8:be:21:
                    ff:86:66:93:f9:d8:5b:3d:8f:fa:ae:81:da:ab:fa:
                    30:85:66:8a:5b:8e:a9:d9:8f:72:b4:e0:04:c3:16:
                    fc:3d:2d:78:31:02:ea:5a:6a:eb:0c:1e:8b:df:73:
                    1e:0a:2b:c6:e6:4e:7c:34:79:72:87:38:92:a3:29:
                    e9:0c:c1:75:1c:b6:bd:89:a0:14:53:b8:11:58:ef:
                    69:bb:66:e8:da:8d:2b:27:ba:f1:1a:44:5e:e4:a4:
                    c6:7f:d1:9e:a1:e3:ad:94:26:c0:52:13:b9:2e:35:
                    60:32:a3:ab:04:61:58:cc:7b:56:29:a4:e5:4f:54:
                    e1:a0:e1:f1:ae:85:f9:2a:56:48:1e:88:47:f5:48:
                    11:df:77:d7:0a:b1:f5:b9:7f:b4:b0:d7:b3:60:49:
                    08:f3:59:bb:a4:26:4c:4a:d9:f2:27:8b:db:27:4a:
                    0c:16:a0:55:93:59:8d:aa:aa:49:eb:bd:30:56:a8:
                    b2:20:7a:5d:60:75:0c:62:3d:1b:cc:b0:a1:43:d1:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:75:8F:C8:16:04:BD:A1:94:3A:28:EC:BB:B0:93:67:7C:EB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5a0703e5-24b8-37d9-9eeb-74244b211ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.48.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:83:fd:c8:ae:9a:d5:5b:85:46:78:ff:33:0c:b2:16:2b:79:
         64:76:2e:b6:4f:66:15:e5:ef:6b:60:ac:57:a3:81:cf:8c:93:
         fa:60:98:3a:31:0e:f7:e0:4b:b3:68:de:f6:b0:53:b8:f1:35:
         24:b7:d3:a8:8b:6c:61:99:31:40:e7:92:6c:da:b6:b4:19:5e:
         56:f7:42:c5:44:84:3e:fe:ee:5a:20:f0:dc:4b:47:d8:b6:63:
         cd:02:58:30:82:be:44:e4:4b:70:3e:f2:5b:36:f5:a0:36:d0:
         96:d5:60:64:a3:0e:75:c6:36:ce:5a:d1:7f:43:d1:82:54:07:
         fe:1c:ca:eb:74:67:9f:ef:07:0c:0d:65:97:1c:c4:b0:b5:d7:
         eb:4a:1f:88:34:86:a8:a8:88:61:34:88:6b:43:76:7b:3b:be:
         20:80:02:75:a6:08:25:34:3c:8f:0c:07:6e:72:d7:d0:05:12:
         4f:5a:f8:06:71:f0:a1:6f:a4:64:ed:e9:6a:87:c7:e2:51:61:
         bb:49:b2:af:80:dc:f2:6a:9d:a0:fd:78:52:56:2b:ef:2f:75:
         43:aa:89:33:0d:b2:5f:0c:5a:36:2f:be:58:32:f5:a7:30:c1:
         9c:70:24:a0:9f:6a:2a:16:90:5f:d5:f3:1b:da:8b:fc:ee:90:
         c9:75:b4:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4rmT1gx0GZO+PAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
ZDIyYjI5ZjgtMzdhMC00YzYwLTllNmYtNWIwOTQ2ODQ0YTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR3n2o9ePj8maUXw8t9Oe5v7d4CGh3Dx4vee
KNoDXmvS5sxzwV/7egVWaqILq1/hJhgtCezxDUj4viH/hmaT+dhbPY/6roHaq/ow
hWaKW46p2Y9ytOAEwxb8PS14MQLqWmrrDB6L33MeCivG5k58NHlyhziSoynpDMF1
HLa9iaAUU7gRWO9pu2bo2o0rJ7rxGkRe5KTGf9GeoeOtlCbAUhO5LjVgMqOrBGFY
zHtWKaTlT1ThoOHxroX5KlZIHohH9UgR33fXCrH1uX+0sNezYEkI81m7pCZMStny
J4vbJ0oMFqBVk1mNqqpJ670wVqiyIHpdYHUMYj0bzLChQ9GoswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNW9dY/IFgS9oZQ6KOy7sJNnfOs7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNWEwNzAzZTUtMjRiOC0z
N2Q5LTllZWItNzQyNDRiMjExZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjCBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2D/ciumtVbhUZ4/zMMshYreWR2LrZPZhXl72tgrFejgc+Mk/pgmDox
DvfgS7No3vawU7jxNSS306iLbGGZMUDnkmzatrQZXlb3QsVEhD7+7log8NxLR9i2
Y80CWDCCvkTkS3A+8ls29aA20JbVYGSjDnXGNs5a0X9D0YJUB/4cyut0Z5/vBwwN
ZZccxLC11+tKH4g0hqioiGE0iGtDdns7viCAAnWmCCU0PI8MB25y19AFEk9a+AZx
8KFvpGTt6WqHx+JRYbtJsq+A3PJqnaD9eFJWK+8vdUOqiTMNsl8MWjYvvlgy9acw
wZxwJKCfaioWkF/V8xvai/zukMl1tAE=
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:37:42 2025 by rpki-client