Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/625f0141-e4cf-3366-aabd-95212048e347.roa
File:                     625f0141-e4cf-3366-aabd-95212048e347.roa (raw, json)
Hash identifier:          IyVEqvOB7rKE1qxN8wZfUESXT3zKzGSxUoA7+9w7rdM=
Subject key identifier:   EC:0C:A6:5C:C4:E4:CE:BD:5A:A7:C0:B3:FB:38:19:38:0B:88:72:10
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584898D60CFB9D647B4B2722A840
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/625f0141-e4cf-3366-aabd-95212048e347.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     27539
IP address blocks:        69.26.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:0c:fb:9d:64:7b:4b:27:22:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=ad2174e2-5a34-4962-8e1e-62bc91736244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:ee:18:a8:ef:78:d2:7f:76:05:ab:22:78:
                    27:4f:a0:4f:55:5b:69:a2:08:b9:0e:17:3d:c9:62:
                    b3:31:c9:93:f7:ba:56:48:1e:04:f5:4c:42:51:88:
                    fb:c2:04:4f:26:27:99:84:2f:23:e8:98:76:76:0d:
                    00:98:ab:c7:fd:78:3d:ea:87:c8:6e:ea:86:38:5c:
                    39:46:45:b3:48:4d:bf:de:70:a3:b6:20:96:63:ac:
                    05:a7:df:56:d4:3e:b3:55:c2:4e:c3:62:11:95:cb:
                    db:b6:7f:11:96:35:1b:4d:a9:3f:fd:10:25:fc:c4:
                    bf:47:44:8d:b7:0f:7f:65:cb:0a:71:ce:af:d0:8c:
                    c6:e5:a2:00:76:c0:47:5d:1e:ab:58:00:3b:1d:d3:
                    2d:49:91:05:f6:37:c1:4f:f7:b5:94:94:11:c9:13:
                    1d:6e:d9:55:cf:84:93:74:e6:75:6b:94:33:b6:92:
                    12:74:35:59:b5:d4:a4:51:da:7c:5d:5e:7b:d4:fc:
                    d7:3d:ea:33:bf:d5:57:ad:11:20:5f:d7:60:86:fa:
                    ad:28:3c:8a:17:8f:8e:2d:68:4f:4b:84:82:01:fb:
                    b6:ec:4d:91:38:39:3c:31:5b:da:0d:19:29:84:c8:
                    13:61:98:f6:57:e7:ab:77:09:39:bc:48:87:a5:ad:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:A6:5C:C4:E4:CE:BD:5A:A7:C0:B3:FB:38:19:38:0B:88:72:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/625f0141-e4cf-3366-aabd-95212048e347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ae:15:d1:40:9e:49:04:52:2b:00:13:16:20:a4:4e:07:08:
         d0:d5:73:b4:24:7e:2a:f2:3e:7d:bf:2c:56:88:67:e3:6a:fa:
         68:4e:cc:07:c5:a8:56:6e:8d:c0:27:fa:38:27:cd:85:9a:69:
         8e:94:8f:15:8d:e5:7a:ec:c2:80:9d:51:23:b3:67:1c:9e:c1:
         b5:b2:90:25:fc:53:f6:2b:42:3f:15:2e:e6:ec:cb:d5:47:74:
         8f:3d:32:41:75:3c:8f:74:62:50:3d:a7:56:8d:1d:11:7d:96:
         ea:a9:54:87:ac:e3:90:53:c2:f1:06:36:59:ed:77:37:e6:1d:
         4f:d5:81:81:63:6a:e3:18:3d:d9:c7:47:a0:99:41:b2:30:85:
         ef:c0:d5:bb:b1:80:49:16:e3:ca:7f:64:4b:2f:e0:3e:17:4d:
         91:fc:79:56:c3:01:e9:8e:df:84:a7:9e:56:b7:86:e5:0f:1d:
         bd:cb:63:6f:07:9a:ac:b2:fc:39:2b:5a:d9:ab:8e:ed:37:99:
         10:3c:ad:8b:99:e5:67:10:07:ef:98:26:b7:55:c5:6d:98:6e:
         ed:3e:4d:2f:5a:4a:ee:6b:6e:2b:45:a2:ef:cb:01:6f:ae:35:
         e2:3a:79:e1:61:1a:72:d1:4a:e6:d1:77:e6:d7:e1:e3:03:20:
         62:c0:b3:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gz7nWR7SyciqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YWQyMTc0ZTItNWEzNC00OTYyLThlMWUtNjJiYzkxNzM2MjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4fuGKjveNJ/dgWrIngnT6BPVVtpogi5Dhc9
yWKzMcmT97pWSB4E9UxCUYj7wgRPJieZhC8j6Jh2dg0AmKvH/Xg96ofIbuqGOFw5
RkWzSE2/3nCjtiCWY6wFp99W1D6zVcJOw2IRlcvbtn8RljUbTak//RAl/MS/R0SN
tw9/ZcsKcc6v0IzG5aIAdsBHXR6rWAA7HdMtSZEF9jfBT/e1lJQRyRMdbtlVz4ST
dOZ1a5QztpISdDVZtdSkUdp8XV571PzXPeozv9VXrREgX9dghvqtKDyKF4+OLWhP
S4SCAfu27E2RODk8MVvaDRkphMgTYZj2V+erdwk5vEiHpa0LrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwMplzE5M69WqfAs/s4GTgLiHIQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvNjI1ZjAxNDEtZTRjZi0z
MzY2LWFhYmQtOTUyMTIwNDhlMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRRocMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAquFdFAnkkEUisAExYgpE4HCNDVc7QkfiryPn2/LFaIZ+Nq+mhOzAfF
qFZujcAn+jgnzYWaaY6UjxWN5XrswoCdUSOzZxyewbWykCX8U/YrQj8VLubsy9VH
dI89MkF1PI90YlA9p1aNHRF9luqpVIes45BTwvEGNlntdzfmHU/VgYFjauMYPdnH
R6CZQbIwhe/A1buxgEkW48p/ZEsv4D4XTZH8eVbDAemO34Snnla3huUPHb3LY28H
mqyy/DkrWtmrju03mRA8rYuZ5WcQB++YJrdVxW2Ybu0+TS9aSu5rbitFou/LAW+u
NeI6eeFhGnLRSubRd+bX4eMDIGLAs74=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:11 2025 by rpki-client