Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/77d7bb04-d01e-369d-a790-a0405c08de73.roa
File:                     77d7bb04-d01e-369d-a790-a0405c08de73.roa (raw, json)
Hash identifier:          IG0N7rEkopBRnP3GsCAIRCs5t3KyJLSArv31TYa8UFg=
Subject key identifier:   48:E6:CD:27:8B:E7:E7:86:D4:CD:E1:CD:10:B2:96:98:53:F9:86:62
Certificate issuer:       /CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Certificate serial:       010D0C9F43285848530AE71AF9FF195A4E815FD0
Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/77d7bb04-d01e-369d-a790-a0405c08de73.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     88
IP address blocks:        204.153.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e7:1a:f9:ff:19:5a:4e:81:5f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=50bc3af8-b5d7-4db3-9256-b975677b0f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:c1:4d:a6:b6:14:75:5a:e6:b5:c8:45:1d:
                    b3:53:7c:40:25:43:42:00:93:3a:49:d9:ed:e7:06:
                    8f:94:fe:9c:2b:d8:5e:5a:36:76:a6:30:d8:7f:8a:
                    db:91:97:af:22:d5:3f:e4:f3:33:06:35:66:c6:a4:
                    45:f4:8f:df:14:5a:0d:f6:cb:62:6e:14:72:62:a2:
                    05:b2:c6:45:26:04:4a:42:96:09:46:2b:dc:ef:d2:
                    e8:fe:15:2e:2f:56:a9:ed:7e:56:80:5a:6e:31:08:
                    8b:04:91:e0:07:40:9b:50:26:b1:aa:9e:74:33:58:
                    e2:10:2e:7b:e8:fc:39:92:2d:fb:2f:1c:c9:dc:4a:
                    54:20:47:06:30:95:33:3e:3f:1b:d5:6e:06:e3:9c:
                    b2:1d:ec:e7:f5:6a:e7:34:b1:ba:c4:5c:50:97:d6:
                    78:e9:14:35:f3:15:cf:31:75:78:91:02:d2:d0:a4:
                    1e:0e:c7:37:37:94:8e:bf:a4:73:79:37:e3:ef:e2:
                    01:15:af:86:cc:f8:61:eb:d3:d2:73:ee:3c:6c:1b:
                    96:ed:b0:46:8a:6a:18:e4:05:c7:ec:21:94:9c:c3:
                    f8:6d:65:c9:1e:33:9b:12:98:38:7c:43:10:53:04:
                    ea:cb:5c:dc:f9:4f:77:37:23:68:43:1c:4c:dc:2a:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E6:CD:27:8B:E7:E7:86:D4:CD:E1:CD:10:B2:96:98:53:F9:86:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/77d7bb04-d01e-369d-a790-a0405c08de73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl

            X509v3 Authority Key Identifier:
                keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:77:57:e1:48:9b:d1:5b:72:9a:14:8a:66:88:9b:2c:73:
         24:0c:15:38:20:c1:a1:59:79:b5:a3:8f:59:4c:f2:a7:54:43:
         26:15:68:ab:80:29:b8:ee:82:83:20:cf:95:a1:14:99:a6:c9:
         61:d4:11:87:71:a7:09:27:45:76:cb:28:21:81:b6:c0:90:aa:
         95:2c:79:8f:51:69:f9:98:80:2f:c1:fd:ee:10:d5:f5:93:8a:
         76:05:57:11:d5:1c:a6:2a:8a:20:6a:e4:37:e7:0c:7a:dd:43:
         49:74:7a:11:a3:a9:aa:a6:5f:2e:57:ed:9a:7b:a6:a9:10:6f:
         af:e4:af:43:e7:9f:e1:83:51:1f:a5:f0:94:70:f8:6d:56:76:
         6b:74:68:41:70:ea:31:5c:4e:d7:9c:aa:1b:3c:78:37:fc:fc:
         53:37:eb:56:a9:7e:86:84:c9:23:52:e3:eb:22:ce:65:d6:ad:
         16:bb:db:28:9e:43:93:b6:27:26:ce:02:a9:2c:d4:df:80:3e:
         77:6a:d7:3b:e5:3d:a8:f0:7c:2c:26:ca:4b:b0:a8:c0:42:dc:
         a9:46:cd:c3:80:5d:3d:2e:7a:a9:68:d7:11:25:73:5c:5e:51:
         bc:dc:47:0e:86:53:a5:8f:57:c5:02:99:3a:ad:db:bd:9d:10:
         b4:38:23:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuca+f8ZWk6BX9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli
ZmQzMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTBiYzNhZjgtYjVkNy00ZGIzLTkyNTYtYjk3NTY3N2IwZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlADBTaa2FHVa5rXIRR2zU3xAJUNCAJM6Sdnt
5waPlP6cK9heWjZ2pjDYf4rbkZevItU/5PMzBjVmxqRF9I/fFFoN9stibhRyYqIF
ssZFJgRKQpYJRivc79Lo/hUuL1ap7X5WgFpuMQiLBJHgB0CbUCaxqp50M1jiEC57
6Pw5ki37LxzJ3EpUIEcGMJUzPj8b1W4G45yyHezn9WrnNLG6xFxQl9Z46RQ18xXP
MXV4kQLS0KQeDsc3N5SOv6RzeTfj7+IBFa+GzPhh69PSc+48bBuW7bBGimoY5AXH
7CGUnMP4bWXJHjObEpg4fEMQUwTqy1zc+U93NyNoQxxM3Cr8VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjmzSeL5+eG1M3hzRCylphT+YZiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm
MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvNzdkN2JiMDQtZDAxZS0z
NjlkLWE3OTAtYTA0MDVjMDhkZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5
NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5
YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx
MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkdd1fhSJvRW3KaFIpmiJsscyQMFTggwaFZebWjj1lM8qdUQyYVaKuA
KbjugoMgz5WhFJmmyWHUEYdxpwknRXbLKCGBtsCQqpUseY9RafmYgC/B/e4Q1fWT
inYFVxHVHKYqiiBq5DfnDHrdQ0l0ehGjqaqmXy5X7Zp7pqkQb6/kr0Pnn+GDUR+l
8JRw+G1Wdmt0aEFw6jFcTtecqhs8eDf8/FM361apfoaEySNS4+sizmXWrRa72yie
Q5O2JybOAqks1N+APndq1zvlPajwfCwmykuwqMBC3KlGzcOAXT0ueqlo1xElc1xe
UbzcRw6GU6WPV8UCmTqt272dELQ4I40=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:08 2025 by rpki-client