Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62c7cf76-ecb1-3d38-8804-e99526a28dca.roa
File:                     62c7cf76-ecb1-3d38-8804-e99526a28dca.roa (raw, json)
Hash identifier:          jfOi1CxfyyVbMJc/vb8yZ3kdZ0GE5RUJzUC7Po8ZRqA=
Subject key identifier:   3A:71:86:31:FF:04:E4:CA:0F:CB:9B:A1:FE:64:51:95:5D:FF:03:5B
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848A565F543C551154D93AA7D00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62c7cf76-ecb1-3d38-8804-e99526a28dca.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     11233
IP address blocks:        209.237.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:f5:43:c5:51:15:4d:93:aa:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=8098f3c6-276c-4a79-987f-a7c7bfe9c7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:fc:d7:51:06:90:db:e9:2b:66:cd:c2:9c:
                    9f:bd:2f:83:d1:17:09:22:ed:98:41:0b:9a:8f:df:
                    6b:ee:fb:04:e6:99:39:ae:20:23:f3:4e:65:7b:18:
                    79:6f:c4:ed:1c:02:35:0d:0c:0e:39:9d:0a:b4:de:
                    1a:70:22:62:da:b3:e3:49:92:bb:26:8f:1c:83:d3:
                    d4:e5:4c:12:91:eb:8f:ce:8f:a7:1c:3c:c7:f5:6f:
                    e0:2f:a3:91:fd:93:5a:31:93:bd:2c:98:8b:80:da:
                    95:42:f2:8f:5e:74:d2:e7:90:fe:c5:de:0d:dd:31:
                    54:5d:ec:08:a0:22:32:4a:07:7a:72:b5:56:1c:7a:
                    ae:80:99:cd:5f:8e:78:ea:de:1d:b9:36:18:25:10:
                    49:f8:d9:e8:34:ab:40:f2:93:6d:af:97:8a:18:84:
                    de:7f:ea:02:b5:51:31:7c:e7:04:32:f9:dc:c6:76:
                    34:4a:5b:59:98:8a:87:6f:af:14:29:c3:7f:55:f2:
                    9c:33:b5:8b:67:15:2d:82:d6:be:f3:cf:af:6a:38:
                    05:6c:48:34:af:8a:92:63:61:cf:20:ca:73:02:51:
                    e1:cc:c4:f6:e6:a4:a1:5d:88:40:7a:15:c2:47:b4:
                    45:55:89:f2:7c:a5:e1:95:e0:2a:55:a1:f9:0b:d6:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:71:86:31:FF:04:E4:CA:0F:CB:9B:A1:FE:64:51:95:5D:FF:03:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/62c7cf76-ecb1-3d38-8804-e99526a28dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b4:a6:48:99:f5:db:66:6c:1b:53:99:a6:64:33:41:29:5f:
         31:a7:f8:dd:e2:02:87:74:4b:2c:5d:1f:ea:07:91:bc:18:5d:
         10:c6:9e:24:62:2b:4d:a1:41:2a:37:f8:08:c4:64:7f:b2:cf:
         4a:b2:9d:cd:e9:70:81:2b:00:59:07:5f:fc:b7:21:81:53:e5:
         5c:b1:7a:05:52:27:c8:57:45:3f:cd:fe:03:e2:12:fe:1f:17:
         45:2b:b4:7f:0d:ea:49:44:fb:16:2f:e5:ed:22:e0:61:03:1f:
         eb:71:f5:16:97:4e:00:5b:d3:1c:49:cc:cf:3f:d2:3b:65:39:
         a5:44:14:6f:e6:f1:63:61:2f:0c:87:40:73:93:12:1f:0b:89:
         be:05:3f:c9:32:1a:d0:61:a0:a4:00:b2:c0:fb:5d:f2:99:92:
         9b:cc:ef:cb:6c:c4:01:69:9e:85:53:7e:e6:77:19:bf:85:82:
         b4:30:a9:1d:86:da:f8:a3:4d:96:da:4e:b4:2e:ba:08:a5:89:
         63:69:0f:2f:48:11:e1:9f:14:3c:59:74:f2:22:9e:13:4a:36:
         cd:b4:5a:60:9f:80:7e:f0:2e:84:0b:59:24:7f:ce:43:fe:e5:
         01:1c:f3:ef:c8:8c:6b:d0:42:c1:75:90:2c:7b:04:46:fc:b1:
         da:24:3c:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfVDxVEVTZOqfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ODA5OGYzYzYtMjc2Yy00YTc5LTk4N2YtYTdjN2JmZTljN2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kD811EGkNvpK2bNwpyfvS+D0RcJIu2YQQua
j99r7vsE5pk5riAj805lexh5b8TtHAI1DQwOOZ0KtN4acCJi2rPjSZK7Jo8cg9PU
5UwSkeuPzo+nHDzH9W/gL6OR/ZNaMZO9LJiLgNqVQvKPXnTS55D+xd4N3TFUXewI
oCIySgd6crVWHHqugJnNX4546t4duTYYJRBJ+NnoNKtA8pNtr5eKGITef+oCtVEx
fOcEMvncxnY0SltZmIqHb68UKcN/VfKcM7WLZxUtgta+88+vajgFbEg0r4qSY2HP
IMpzAlHhzMT25qShXYhAehXCR7RFVYnyfKXhleAqVaH5C9aWGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpxhjH/BOTKD8ubof5kUZVd/wNbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNjJjN2NmNzYtZWNiMS0z
ZDM4LTg4MDQtZTk5NTI2YTI4ZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGi0pkiZ9dtmbBtTmaZkM0EpXzGn+N3iAod0SyxdH+oHkbwYXRDGniRi
K02hQSo3+AjEZH+yz0qync3pcIErAFkHX/y3IYFT5VyxegVSJ8hXRT/N/gPiEv4f
F0UrtH8N6klE+xYv5e0i4GEDH+tx9RaXTgBb0xxJzM8/0jtlOaVEFG/m8WNhLwyH
QHOTEh8Lib4FP8kyGtBhoKQAssD7XfKZkpvM78tsxAFpnoVTfuZ3Gb+FgrQwqR2G
2vijTZbaTrQuugiliWNpDy9IEeGfFDxZdPIinhNKNs20WmCfgH7wLoQLWSR/zkP+
5QEc8+/IjGvQQsF1kCx7BEb8sdokPHQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:04 2025 by rpki-client