Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/8b750e04-37aa-34c5-af8d-dd7dfd408f19.roa
File:                     8b750e04-37aa-34c5-af8d-dd7dfd408f19.roa (raw, json)
Hash identifier:          q2mSsvxvaqMsmkUEOuyi+qyCVLyqbudC/epdoM34ki8=
Subject key identifier:   48:9B:6A:38:10:A8:9B:68:35:95:EA:6B:26:EA:49:3A:0B:EA:FF:C0
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285848D7A6582B783212425BDAD1C0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/8b750e04-37aa-34c5-af8d-dd7dfd408f19.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     174
IP address blocks:        205.240.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:58:2b:78:32:12:42:5b:da:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=fdad2eea-b77b-4830-a66d-050bb45158f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:48:f7:8b:fc:eb:71:24:2e:4b:0d:93:bd:
                    d8:b7:48:c3:24:71:be:91:a1:d7:63:3a:63:ec:88:
                    40:cd:48:30:c6:09:d1:b9:db:2e:2d:bc:98:47:9a:
                    24:dc:d0:e0:a7:8f:4a:7f:8a:da:54:fd:41:06:ad:
                    9e:d9:fc:4a:0b:57:0c:a6:72:4c:89:90:27:0f:fe:
                    f3:61:a2:96:61:bb:ad:f9:24:80:6a:5e:f2:3d:07:
                    d6:d1:b2:3b:3e:c7:ab:b6:9b:94:09:08:9b:78:94:
                    82:ad:a7:12:4e:a8:4f:14:80:09:3c:0c:23:28:d7:
                    9e:de:cc:94:5b:4b:47:ba:a5:09:1f:6b:5e:2e:5c:
                    0a:b7:3a:c5:00:93:17:45:1c:44:01:39:01:09:82:
                    7b:c2:c1:1f:f2:97:d9:ec:d9:87:be:46:e4:9e:cf:
                    9a:f2:9b:12:e5:94:3f:c2:dc:2e:d7:bc:ac:46:25:
                    20:d0:35:16:c0:1b:41:e4:57:ca:88:9c:2a:11:25:
                    4e:46:37:36:d4:39:87:7f:d2:ce:be:3d:f2:f8:cf:
                    2f:63:c8:b8:33:21:b0:6f:cc:0d:37:95:dc:bd:80:
                    80:cc:72:22:a5:00:4b:01:a3:71:ce:87:fb:40:cd:
                    87:39:ff:8b:5a:86:7f:6a:99:9d:0a:5d:c0:f7:cf:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:6A:38:10:A8:9B:68:35:95:EA:6B:26:EA:49:3A:0B:EA:FF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/8b750e04-37aa-34c5-af8d-dd7dfd408f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.240.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6c:7a:cd:46:c0:a2:bf:be:ab:6e:30:49:e5:82:24:c4:30:
         5b:04:6e:17:81:30:36:8d:94:3d:5b:f2:2a:0f:26:e3:4e:42:
         31:ab:ed:5c:f3:c8:f4:f5:ba:31:97:32:a6:51:01:a6:34:a2:
         c8:3f:c7:f0:93:dc:09:aa:e8:69:ee:3c:f4:ce:2e:1b:2a:f3:
         71:66:c4:2d:d7:7e:7c:dc:b1:13:24:40:bd:63:37:6e:8a:2f:
         52:37:d2:d6:9a:28:87:5d:d6:e7:0e:3c:bf:25:f1:76:07:31:
         62:bb:27:20:a8:3a:94:05:2a:18:5a:95:76:3b:7c:ef:dd:c4:
         3c:75:b9:ad:9e:d3:85:91:d0:bf:23:39:c8:03:67:7a:dc:ce:
         7e:3b:7f:52:39:ec:84:1c:8f:63:3e:77:41:70:47:ee:f8:19:
         01:e0:21:4f:60:ba:e8:4d:b1:43:02:03:47:2d:21:b9:ce:06:
         b3:07:57:8e:b6:4b:1f:d2:37:98:e7:b2:92:77:ef:d7:0f:be:
         dc:fb:1a:2c:11:02:03:b6:6c:48:a5:06:d6:3b:41:ab:0c:96:
         bc:49:53:49:67:07:b6:79:d7:fa:70:ba:54:33:a6:50:24:4b:
         af:fd:e5:83:35:a7:b0:d0:c7:3c:68:8a:65:a4:c8:b7:18:02:
         66:e0:6d:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplgreDISQlva0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZmRhZDJlZWEtYjc3Yi00ODMwLWE2NmQtMDUwYmI0NTE1OGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZdI94v863EkLksNk73Yt0jDJHG+kaHXYzpj
7IhAzUgwxgnRudsuLbyYR5ok3NDgp49Kf4raVP1BBq2e2fxKC1cMpnJMiZAnD/7z
YaKWYbut+SSAal7yPQfW0bI7PsertpuUCQibeJSCracSTqhPFIAJPAwjKNee3syU
W0tHuqUJH2teLlwKtzrFAJMXRRxEATkBCYJ7wsEf8pfZ7NmHvkbkns+a8psS5ZQ/
wtwu17ysRiUg0DUWwBtB5FfKiJwqESVORjc21DmHf9LOvj3y+M8vY8i4MyGwb8wN
N5XcvYCAzHIipQBLAaNxzof7QM2HOf+LWoZ/apmdCl3A988nFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEibajgQqJtoNZXqaybqSToL6v/AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvOGI3NTBlMDQtMzdhYS0z
NGM1LWFmOGQtZGQ3ZGZkNDA4ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfBNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJses1GwKK/vqtuMEnlgiTEMFsEbheBMDaNlD1b8ioPJuNOQjGr7Vzz
yPT1ujGXMqZRAaY0osg/x/CT3Amq6GnuPPTOLhsq83FmxC3XfnzcsRMkQL1jN26K
L1I30taaKIdd1ucOPL8l8XYHMWK7JyCoOpQFKhhalXY7fO/dxDx1ua2e04WR0L8j
OcgDZ3rczn47f1I57IQcj2M+d0FwR+74GQHgIU9guuhNsUMCA0ctIbnOBrMHV462
Sx/SN5jnspJ379cPvtz7GiwRAgO2bEilBtY7QasMlrxJU0lnB7Z51/pwulQzplAk
S6/95YM1p7DQxzxoimWkyLcYAmbgbfA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:10 2025 by rpki-client