Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/f8407a6f-a27d-37ae-8d29-f035147c07ae.roa
File:                     f8407a6f-a27d-37ae-8d29-f035147c07ae.roa (raw, json)
Hash identifier:          9SGltrjzmd8at3dDqyV+WKBEdCkU1HEV5H4TjOycDTQ=
Subject key identifier:   E3:74:C0:92:0A:15:48:7F:0C:63:F1:32:CB:07:55:13:79:09:83:82
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A050A7873652994BBA9C1E400
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/f8407a6f-a27d-37ae-8d29-f035147c07ae.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     5769
IP address blocks:        24.100.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:78:73:65:29:94:bb:a9:c1:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=cd098d85-c122-4359-9759-75a7742460bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:29:22:c5:aa:e0:35:c4:e4:8a:b2:2a:ba:
                    b2:d6:29:28:6f:26:bb:9f:75:bd:84:da:87:82:38:
                    84:98:f9:68:fe:7a:67:33:92:ce:59:a4:11:2b:42:
                    4c:1c:02:d8:41:ea:09:91:8e:3a:8d:ca:54:97:f3:
                    b4:c5:66:60:43:7d:bf:79:8d:04:0c:b0:3e:c1:54:
                    43:2f:b0:4e:05:47:81:5d:36:bb:90:6f:47:52:06:
                    1a:39:0b:aa:85:25:b5:5b:05:35:ab:52:06:e6:1b:
                    9e:22:cb:a7:c3:39:f7:93:b7:97:cc:85:c1:d2:4b:
                    d3:a5:b0:d9:34:a0:50:4a:9d:f4:3e:a5:db:37:45:
                    90:11:c1:c5:44:90:cf:24:dd:c3:d7:f1:3b:84:d8:
                    b6:c6:ad:01:fe:bc:dc:68:3c:75:14:3c:54:c2:1c:
                    51:62:b7:52:78:ee:15:b9:ce:71:44:6f:2c:87:80:
                    f7:2c:5d:9e:41:e1:0e:86:7d:df:54:9e:29:8d:9f:
                    9d:93:79:0c:af:86:65:15:51:a7:e2:c9:ac:c5:32:
                    7d:cd:ce:db:31:46:01:0d:1d:ce:9e:d9:0f:23:35:
                    8c:bb:8f:d7:ff:36:4a:b1:e4:ee:dc:b7:9c:bc:19:
                    d7:73:91:69:12:0d:5b:52:48:9b:ef:5b:4f:dd:09:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:74:C0:92:0A:15:48:7F:0C:63:F1:32:CB:07:55:13:79:09:83:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/f8407a6f-a27d-37ae-8d29-f035147c07ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.100.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:dd:ac:3d:d9:f8:5b:aa:9d:9c:47:5a:96:28:d9:e4:6d:
         10:df:6a:89:1a:70:31:4a:db:d1:a6:08:00:d1:0a:22:ad:f7:
         2b:0f:1d:f9:34:4a:8b:24:64:dd:22:ee:52:9a:72:1b:8b:b1:
         50:e9:d5:97:0d:f6:4c:ed:a2:58:5b:28:c9:d9:e8:59:6b:f2:
         1e:e3:d3:19:1d:74:16:44:ff:97:3b:48:57:de:04:96:5e:ff:
         49:70:06:d0:9c:7b:65:f0:13:fc:ed:56:66:e6:ea:0d:b5:e2:
         42:5f:6e:6a:48:82:b4:84:5d:de:72:cc:a9:cc:36:04:c9:5d:
         01:f0:21:50:d2:be:6d:df:a4:83:c0:f3:34:de:47:d7:bb:1f:
         2a:bc:e1:45:63:20:5d:a1:d4:6b:21:45:30:20:d3:17:83:ac:
         f0:c4:c5:08:ff:dc:7f:af:b2:72:45:4c:97:92:b3:48:34:d3:
         a5:16:b2:f3:2c:16:13:ea:51:ec:6a:7b:f2:ab:6a:1e:44:f8:
         30:7b:56:e4:78:c5:43:4a:9f:99:a2:cf:1a:a6:61:4d:0f:6c:
         db:3d:47:71:4c:14:32:af:de:cc:e1:12:d1:36:b8:2f:a1:34:
         07:89:ef:86:05:44:d4:16:74:c8:aa:28:62:c6:15:4a:44:9d:
         19:b7:6b:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnhzZSmUu6nB5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk
Y2QwOThkODUtYzEyMi00MzU5LTk3NTktNzVhNzc0MjQ2MGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIApIsWq4DXE5IqyKrqy1ikobya7n3W9hNqH
gjiEmPlo/npnM5LOWaQRK0JMHALYQeoJkY46jcpUl/O0xWZgQ32/eY0EDLA+wVRD
L7BOBUeBXTa7kG9HUgYaOQuqhSW1WwU1q1IG5hueIsunwzn3k7eXzIXB0kvTpbDZ
NKBQSp30PqXbN0WQEcHFRJDPJN3D1/E7hNi2xq0B/rzcaDx1FDxUwhxRYrdSeO4V
uc5xRG8sh4D3LF2eQeEOhn3fVJ4pjZ+dk3kMr4ZlFVGn4smsxTJ9zc7bMUYBDR3O
ntkPIzWMu4/X/zZKseTu3LecvBnXc5FpEg1bUkib71tP3QmUbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFON0wJIKFUh/DGPxMssHVRN5CYOCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZjg0MDdhNmYtYTI3ZC0z
N2FlLThkMjktZjAzNTE0N2MwN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGGTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbB3aw92fhbqp2cR1qWKNnkbRDfaokacDFK29GmCADRCiKt9ysPHfk0
SoskZN0i7lKachuLsVDp1ZcN9kztolhbKMnZ6Flr8h7j0xkddBZE/5c7SFfeBJZe
/0lwBtCce2XwE/ztVmbm6g214kJfbmpIgrSEXd5yzKnMNgTJXQHwIVDSvm3fpIPA
8zTeR9e7Hyq84UVjIF2h1GshRTAg0xeDrPDExQj/3H+vsnJFTJeSs0g006UWsvMs
FhPqUexqe/Krah5E+DB7VuR4xUNKn5mizxqmYU0PbNs9R3FMFDKv3szhEtE2uC+h
NAeJ74YFRNQWdMiqKGLGFUpEnRm3a7M=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:19 2025 by rpki-client