Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24b517ee-0971-37dd-b976-99170b4dd6d2.roa
File:                     24b517ee-0971-37dd-b976-99170b4dd6d2.roa (raw, json)
Hash identifier:          Yb5wkoT/ae5ke/CeEqOYPcTSgvHcyUgZEVqWhMTQMeQ=
Subject key identifier:   44:6C:CF:63:01:A7:0C:E7:34:88:B2:C7:C4:DE:EE:4B:60:EC:4B:CE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3C0F5D91F65C770480ADFA40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24b517ee-0971-37dd-b976-99170b4dd6d2.roa
Signing time:             Wed 18 Jun 2025 18:00:13 +0000
ROA not before:           Wed 18 Jun 2025 18:00:13 +0000
ROA not after:            Tue 16 Sep 2025 18:00:13 +0000
asID:                     22773
IP address blocks:        24.251.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:0f:5d:91:f6:5c:77:04:80:ad:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 18 18:00:13 2025 GMT
            Not After : Sep 16 18:00:13 2025 GMT
        Subject: CN=039a97ec-1831-442e-bcc5-d9f897f250fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:5c:48:01:36:66:9e:75:81:e6:55:1f:0d:
                    60:94:2b:c6:e9:73:55:a3:8f:02:9c:57:9b:58:8c:
                    1a:fc:8c:e3:99:70:12:73:cf:0a:81:38:67:f5:06:
                    62:34:ee:95:dc:31:92:13:15:51:9c:f1:cf:b2:01:
                    3c:27:c5:79:ac:d0:88:ed:75:f0:33:c0:b7:2a:f4:
                    cb:b9:5a:b8:9a:f0:24:98:b5:3e:59:1c:24:42:0e:
                    49:20:5d:8b:3c:33:36:bd:5f:c4:a3:ff:81:ea:bf:
                    67:40:11:4c:96:0c:ea:24:73:3e:54:11:4f:2c:93:
                    61:4a:45:40:d0:6f:00:9a:22:25:67:8e:f4:43:82:
                    1a:7d:34:d5:b5:31:81:c5:c2:ba:b0:1f:9d:c7:7d:
                    b8:13:e5:45:e7:a1:c5:6f:ba:84:a8:60:28:06:1f:
                    fd:78:ad:c3:18:a2:47:e3:3d:7e:ff:60:2d:80:5e:
                    9e:28:b4:3a:50:ce:a7:a9:75:ce:b5:09:d9:1c:9b:
                    dc:88:13:22:37:5d:d1:7d:81:74:f5:37:9a:20:d4:
                    cb:27:dd:35:69:b4:8f:e9:d0:3e:02:5f:e1:f0:12:
                    3a:06:8a:45:b7:99:ae:d3:92:9d:75:95:53:52:af:
                    06:af:f8:76:23:b6:97:de:d0:c8:a6:ad:a2:23:4e:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6C:CF:63:01:A7:0C:E7:34:88:B2:C7:C4:DE:EE:4B:60:EC:4B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24b517ee-0971-37dd-b976-99170b4dd6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.251.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:f2:49:f6:ef:e8:65:49:8d:1c:99:fe:68:74:83:6d:76:
         8e:39:4b:ac:1e:a6:2f:76:00:b0:a2:65:43:ac:42:88:80:e9:
         ab:f4:3e:3a:89:6c:8c:25:00:99:b3:78:e8:46:5a:69:d7:88:
         7a:e7:37:a9:3f:64:6f:b1:c6:a9:e3:ae:69:c5:89:96:b1:c2:
         68:c9:f7:71:15:11:9b:09:f7:a1:bd:fc:ab:81:5c:f3:22:cd:
         11:c6:16:00:c1:55:6a:3b:0a:c5:09:a5:16:60:51:26:34:c9:
         be:bf:9b:9f:e6:3c:b5:e8:8d:66:68:2c:8a:ba:e5:50:5a:d7:
         63:44:13:08:52:83:80:e6:de:1d:e1:ee:55:0e:3b:56:17:aa:
         e6:4b:e0:cd:c8:f2:c5:d6:e1:0d:20:c4:f0:1e:31:0d:e6:f8:
         8b:6a:cc:da:8a:e2:6b:d1:30:6f:60:ec:66:1a:38:38:6c:97:
         c0:63:fe:51:e1:a3:64:74:f2:5f:e2:df:b7:60:7f:97:39:d3:
         7e:3b:1c:64:ef:a1:15:12:36:ea:2e:77:10:c9:95:27:27:fe:
         25:4e:34:45:8b:4b:d1:88:64:c7:c8:17:22:88:22:59:9c:7c:
         ae:ba:7d:c5:da:0b:a6:4f:ff:1e:ee:9f:eb:30:e0:4d:dc:89:
         78:b9:84:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D12R9lx3BICt+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxODE4MDAxM1oXDTI1MDkxNjE4MDAxM1owLzEtMCsGA1UEAxMk
MDM5YTk3ZWMtMTgzMS00NDJlLWJjYzUtZDlmODk3ZjI1MGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9JcSAE2Zp51geZVHw1glCvG6XNVo48CnFeb
WIwa/IzjmXASc88KgThn9QZiNO6V3DGSExVRnPHPsgE8J8V5rNCI7XXwM8C3KvTL
uVq4mvAkmLU+WRwkQg5JIF2LPDM2vV/Eo/+B6r9nQBFMlgzqJHM+VBFPLJNhSkVA
0G8AmiIlZ470Q4IafTTVtTGBxcK6sB+dx324E+VF56HFb7qEqGAoBh/9eK3DGKJH
4z1+/2AtgF6eKLQ6UM6nqXXOtQnZHJvciBMiN13RfYF09TeaINTLJ901abSP6dA+
Al/h8BI6BopFt5mu05KddZVTUq8Gr/h2I7aX3tDIpq2iI05p0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERsz2MBpwznNIiyx8Te7ktg7EvOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjRiNTE3ZWUtMDk3MS0z
N2RkLWI5NzYtOTkxNzBiNGRkNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPsnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk+8kn27+hlSY0cmf5odINtdo45S6wepi92ALCiZUOsQoiA6av0PjqJ
bIwlAJmzeOhGWmnXiHrnN6k/ZG+xxqnjrmnFiZaxwmjJ93EVEZsJ96G9/KuBXPMi
zRHGFgDBVWo7CsUJpRZgUSY0yb6/m5/mPLXojWZoLIq65VBa12NEEwhSg4Dm3h3h
7lUOO1YXquZL4M3I8sXW4Q0gxPAeMQ3m+ItqzNqK4mvRMG9g7GYaODhsl8Bj/lHh
o2R08l/i37dgf5c50347HGTvoRUSNuoudxDJlScn/iVONEWLS9GIZMfIFyKIIlmc
fK66fcXaC6ZP/x7un+sw4E3ciXi5hFk=
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:29:25 2025 by rpki-client