Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
File:                     98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa (raw, json)
Hash identifier:          1DOe9Dv/topZSW5zpYuIFDqsccw4i1BdPvAgjaonsWA=
Subject key identifier:   03:77:12:BF:B9:E9:3F:AE:4A:DF:2A:43:88:0E:A0:CD:30:97:1D:30
Certificate issuer:       /CN=7fd18149-017f-4551-ae16-4dcabee6b650
Certificate serial:       010D0C9F432858498CFF1CF1B0B9B3456BB02D80
Authority key identifier: 42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     394791
IP address blocks:        204.10.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1c:f1:b0:b9:b3:45:6b:b0:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd18149-017f-4551-ae16-4dcabee6b650
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=e5dd5410-973e-4e48-bfc5-75df1ffcdf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:79:87:e8:a1:6a:62:13:b3:d6:28:9f:14:6a:
                    1e:62:48:7c:be:9b:8c:14:94:0a:1f:51:fd:a5:85:
                    d5:51:bc:df:1e:36:86:e2:c3:2f:d8:35:3c:1b:82:
                    59:68:65:6a:9d:3d:9f:16:89:50:6a:af:d3:71:fc:
                    a1:6d:ae:e9:b3:da:a0:22:da:9c:5e:b1:19:3f:be:
                    6b:54:8b:11:3e:b3:a1:07:1a:66:b5:ea:96:27:68:
                    5e:dd:f7:93:9f:0a:16:7e:cb:75:09:00:34:a1:18:
                    c0:15:b1:05:41:25:e7:2a:e8:16:13:33:fa:f9:cd:
                    ca:aa:2c:ce:1a:44:99:9f:ca:79:3d:2a:c0:50:93:
                    bc:b9:0b:30:bb:bc:12:63:25:b4:1d:f8:67:7a:7d:
                    2a:cc:f4:97:f9:4c:aa:df:15:71:80:fb:17:eb:64:
                    0a:f8:9c:c2:a0:19:2e:96:05:8f:31:e7:db:9d:76:
                    f1:09:04:9b:b1:ab:88:f9:b0:40:06:6a:58:59:3a:
                    87:6e:dc:5f:4a:76:3c:af:cd:63:aa:37:76:a7:19:
                    09:ab:51:ad:14:0e:f7:76:ed:53:6d:a8:bf:db:54:
                    07:fe:ea:47:3d:68:5d:8b:14:2d:b0:07:c7:21:73:
                    ff:aa:65:73:08:77:88:a8:b7:32:ce:04:1c:3e:ff:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:12:BF:B9:E9:3F:AE:4A:DF:2A:43:88:0E:A0:CD:30:97:1D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/98908ca7-d284-3ba8-ba8b-3c7bfecff3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650/7fd18149-017f-4551-ae16-4dcabee6b650.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:62:7C:36:C4:D6:8E:A6:7A:7D:FB:DE:DB:18:78:60:49:80:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7fd18149-017f-4551-ae16-4dcabee6b650.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8d:40:8d:c6:ae:4e:e0:f8:58:5a:bc:02:a7:32:e4:fa:43:
         83:ca:c6:e3:e1:47:a3:e7:1c:ed:e8:87:91:3a:d2:14:f5:3a:
         4f:f2:13:14:a5:81:97:7c:49:70:2d:f0:2f:fb:1a:fe:84:37:
         99:a4:7a:7a:39:69:2c:7d:75:3c:bc:b5:29:8b:16:0d:37:b9:
         c7:8c:72:a3:84:31:73:19:f7:90:83:7e:fe:16:01:6d:b3:5b:
         da:a4:21:19:64:95:0b:70:ff:e3:bf:4d:7c:6a:59:4d:ec:b2:
         5d:57:b1:03:ee:04:6f:de:8e:57:55:60:1b:9b:05:5d:a1:b5:
         4f:0e:cb:95:7e:d6:8e:e9:c1:cd:60:88:bb:35:ee:3a:9e:ad:
         c5:0c:73:48:ee:b8:e9:5a:99:5f:7e:f0:c4:08:b3:73:bb:65:
         59:0e:b3:e4:2f:b0:98:06:15:87:22:58:78:e9:e5:df:c3:08:
         58:11:eb:25:4e:af:b0:5a:53:95:a0:20:4f:64:b6:0d:c8:f3:
         5d:0c:a6:79:5b:9a:7f:03:00:96:0a:79:2c:99:47:ef:c8:93:
         3e:f5:7f:03:d6:dc:83:e2:e2:5f:de:e1:9a:e7:d2:3a:a0:df:
         84:48:15:2e:85:97:42:ed:ee:a9:bc:e9:4e:23:d2:01:a4:c8:
         0d:70:c8:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xzxsLmzRWuwLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZkMTgxNDktMDE3Zi00NTUxLWFlMTYtNGRjYWJlZTZi
NjUwMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
ZTVkZDU0MTAtOTczZS00ZTQ4LWJmYzUtNzVkZjFmZmNkZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXmH6KFqYhOz1iifFGoeYkh8vpuMFJQKH1H9
pYXVUbzfHjaG4sMv2DU8G4JZaGVqnT2fFolQaq/Tcfyhba7ps9qgItqcXrEZP75r
VIsRPrOhBxpmteqWJ2he3feTnwoWfst1CQA0oRjAFbEFQSXnKugWEzP6+c3KqizO
GkSZn8p5PSrAUJO8uQswu7wSYyW0Hfhnen0qzPSX+Uyq3xVxgPsX62QK+JzCoBku
lgWPMefbnXbxCQSbsauI+bBABmpYWTqHbtxfSnY8r81jqjd2pxkJq1GtFA73du1T
bai/21QH/upHPWhdixQtsAfHIXP/qmVzCHeIqLcyzgQcPv/uTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAN3Er+56T+uSt8qQ4gOoM0wlx0wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZmQx
ODE0OS0wMTdmLTQ1NTEtYWUxNi00ZGNhYmVlNmI2NTAvOTg5MDhjYTctZDI4NC0z
YmE4LWJhOGItM2M3YmZlY2ZmM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2ZkMTgxNDktMDE3Zi00NTUxLWFl
MTYtNGRjYWJlZTZiNjUwLzdmZDE4MTQ5LTAxN2YtNDU1MS1hZTE2LTRkY2FiZWU2
YjY1MC5jcmwwHwYDVR0jBBgwFoAUQpdifDbE1o6men373tsYeGBJgFwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZmQxODE0OS0wMTdmLTQ1NTEtYWUxNi00ZGNh
YmVlNmI2NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzApqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKGNQI3Grk7g+FhavAKnMuT6Q4PKxuPhR6PnHO3oh5E60hT1Ok/yExSl
gZd8SXAt8C/7Gv6EN5mkeno5aSx9dTy8tSmLFg03uceMcqOEMXMZ95CDfv4WAW2z
W9qkIRlklQtw/+O/TXxqWU3ssl1XsQPuBG/ejldVYBubBV2htU8Oy5V+1o7pwc1g
iLs17jqercUMc0juuOlamV9+8MQIs3O7ZVkOs+QvsJgGFYciWHjp5d/DCFgR6yVO
r7BaU5WgIE9ktg3I810Mpnlbmn8DAJYKeSyZR+/Ikz71fwPW3IPi4l/e4Zrn0jqg
34RIFS6Fl0Lt7qm86U4j0gGkyA1wyE8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:14:49 2025 by rpki-client