Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/9a67e0a8-30e8-36fa-9d2a-66e4d441571e.roa
File:                     9a67e0a8-30e8-36fa-9d2a-66e4d441571e.roa (raw, json)
Hash identifier:          ddUfhwg/+INZs3NKBnpGxdjMTijmohHF1jZ3pdvnltU=
Subject key identifier:   C7:33:FB:A6:55:E4:E2:33:B3:0C:CE:D4:BF:F5:C0:07:4C:70:67:3D
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584957F4051C9D8326298D5EF300
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/9a67e0a8-30e8-36fa-9d2a-66e4d441571e.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     7992
IP address blocks:        24.50.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:05:1c:9d:83:26:29:8d:5e:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=3add0b68-78ab-45ef-a621-765eda4fcabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:bb:e0:39:07:7e:a5:11:f2:63:af:bd:22:
                    5a:ee:d5:06:50:a5:dd:18:11:68:cd:bb:2e:10:3f:
                    15:d8:10:70:52:f9:8a:6a:6f:a7:98:8f:33:3e:07:
                    21:ac:67:f4:71:4c:0d:83:76:c0:23:43:ac:d6:22:
                    2b:7b:c9:2a:02:b9:4c:16:c8:fd:5e:21:df:f0:e8:
                    4e:23:62:76:c7:4c:a6:73:9b:c5:00:36:f0:ea:56:
                    f1:2f:f6:9f:d3:95:4c:94:ee:b2:48:51:32:35:4f:
                    55:91:ce:4f:74:c8:cb:19:80:be:4d:63:e1:31:83:
                    6d:b8:fd:5a:d2:3f:ff:da:49:e5:b7:b5:9c:87:21:
                    b6:63:f0:78:35:db:49:6a:0b:ee:c8:3a:78:cb:02:
                    10:55:87:74:06:77:37:9a:fa:6f:71:54:43:82:d3:
                    44:60:9f:7e:98:78:ee:f6:69:88:3d:32:a7:7f:c1:
                    6c:45:96:ed:af:3c:77:b0:da:c8:2a:88:b9:79:9f:
                    db:ab:ce:aa:46:11:ea:66:a8:6b:18:ae:0e:ca:3a:
                    ae:28:15:b4:f1:90:b6:f2:b4:a0:06:57:c8:cc:b3:
                    48:00:79:1b:0c:a1:8e:5d:84:74:28:33:4a:6b:a5:
                    1b:5a:92:6a:fb:26:35:0f:9b:e1:ed:07:09:9e:fc:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:FB:A6:55:E4:E2:33:B3:0C:CE:D4:BF:F5:C0:07:4C:70:67:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/9a67e0a8-30e8-36fa-9d2a-66e4d441571e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.50.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:44:31:fa:00:9e:34:4c:57:fa:e3:d8:b8:11:7f:b4:24:58:
         d9:d2:22:9f:4c:00:ad:c5:c1:a0:40:95:87:6f:6a:b2:35:d5:
         d6:32:81:da:f6:d9:ff:0c:9d:48:aa:2b:14:e0:92:b0:e8:2e:
         d0:15:fd:ab:6e:76:23:9c:36:6f:eb:62:58:c8:58:80:cd:f2:
         19:9c:95:9f:03:60:4c:96:77:10:08:86:c2:76:f5:32:a9:68:
         75:b5:22:59:e3:15:f3:87:21:f3:d0:a5:49:55:a9:5d:01:7a:
         e9:30:40:d7:cd:67:d0:5c:84:4d:dc:65:f4:5f:19:75:75:96:
         38:30:d1:b6:65:30:a1:4f:92:bc:45:4e:99:5a:ad:25:50:14:
         ef:54:97:f7:6f:67:41:bc:ba:20:43:f4:3b:df:87:c4:9a:73:
         be:98:b6:e0:ab:91:ef:03:e4:59:3c:96:6b:ef:40:30:11:33:
         c1:1f:3b:e2:85:ba:c3:68:6c:6e:e1:aa:95:53:91:62:7b:2b:
         7d:87:22:54:90:db:3b:b8:41:00:0f:5f:95:06:76:fb:d0:f8:
         07:3e:08:74:cb:e4:ac:f5:56:f6:e2:e6:d0:fb:e5:3e:49:af:
         91:57:08:0f:8c:2b:c8:a7:99:41:0d:3e:15:45:41:d6:e0:66:
         3b:d2:31:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9AUcnYMmKY1e8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjg0N2QtNTNhYi00YWJiLWE1ZTUtMjZiOTk4Yzdm
Zjk4MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
M2FkZDBiNjgtNzhhYi00NWVmLWE2MjEtNzY1ZWRhNGZjYWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtky74DkHfqUR8mOvvSJa7tUGUKXdGBFozbsu
ED8V2BBwUvmKam+nmI8zPgchrGf0cUwNg3bAI0Os1iIre8kqArlMFsj9XiHf8OhO
I2J2x0ymc5vFADbw6lbxL/af05VMlO6ySFEyNU9Vkc5PdMjLGYC+TWPhMYNtuP1a
0j//2knlt7WchyG2Y/B4NdtJagvuyDp4ywIQVYd0Bnc3mvpvcVRDgtNEYJ9+mHju
9mmIPTKnf8FsRZbtrzx3sNrIKoi5eZ/bq86qRhHqZqhrGK4OyjquKBW08ZC28rSg
BlfIzLNIAHkbDKGOXYR0KDNKa6UbWpJq+yY1D5vh7QcJnvy7rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcz+6ZV5OIzswzO1L/1wAdMcGc9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83M2Yy
ODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5OThjN2ZmOTgvOWE2N2UwYTgtMzBlOC0z
NmZhLTlkMmEtNjZlNGQ0NDE1NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzNmMjg0N2QtNTNhYi00YWJiLWE1
ZTUtMjZiOTk4YzdmZjk4LzczZjI4NDdkLTUzYWItNGFiYi1hNWU1LTI2Yjk5OGM3
ZmY5OC5jcmwwHwYDVR0jBBgwFoAU4z9DS4XDJg2cVrC7yD+2Teg7fcswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83M2YyODQ3ZC01M2FiLTRhYmItYTVlNS0yNmI5
OThjN2ZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGDIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBEMfoAnjRMV/rj2LgRf7QkWNnSIp9MAK3FwaBAlYdvarI11dYygdr2
2f8MnUiqKxTgkrDoLtAV/atudiOcNm/rYljIWIDN8hmclZ8DYEyWdxAIhsJ29TKp
aHW1IlnjFfOHIfPQpUlVqV0BeukwQNfNZ9BchE3cZfRfGXV1ljgw0bZlMKFPkrxF
TplarSVQFO9Ul/dvZ0G8uiBD9Dvfh8Sac76YtuCrke8D5Fk8lmvvQDARM8EfO+KF
usNobG7hqpVTkWJ7K32HIlSQ2zu4QQAPX5UGdvvQ+Ac+CHTL5Kz1Vvbi5tD75T5J
r5FXCA+MK8inmUENPhVFQdbgZjvSMQ0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:12 2025 by rpki-client