Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/d7d5e058-1fe6-357c-8466-a7bc48dae08b.roa
File:                     d7d5e058-1fe6-357c-8466-a7bc48dae08b.roa (raw, json)
Hash identifier:          mloixW5H3+vMutTqOBL7/v9hKwTk5JA5oojashtsiIQ=
Subject key identifier:   7F:85:D8:16:32:AF:C0:AC:F1:6A:D6:E4:71:25:F9:5F:55:38:F4:14
Certificate issuer:       /CN=3c637fa0-0773-40d6-afca-d49122516b4f
Certificate serial:       010D0C9F432858491D7181404F5D40FF14A4EE80
Authority key identifier: DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/d7d5e058-1fe6-357c-8466-a7bc48dae08b.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     26404
IP address blocks:        204.87.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:81:40:4f:5d:40:ff:14:a4:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c637fa0-0773-40d6-afca-d49122516b4f
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=f06cad24-05d4-4613-a154-44140548d908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:2f:bb:67:03:f0:71:8d:53:bd:85:f4:fb:
                    7b:30:c6:e1:10:7e:cc:26:1b:cd:47:63:28:53:b9:
                    69:a1:44:f1:50:27:60:65:f0:d9:cf:6d:fe:e0:be:
                    6f:91:92:74:c3:f1:f7:19:e4:d0:c4:ef:58:5d:62:
                    c7:0c:4b:5b:db:4a:54:03:18:c7:a3:05:23:f2:f9:
                    1b:cc:6f:74:dc:00:97:24:41:bf:6e:14:e4:ef:97:
                    a2:4f:86:a0:5e:c6:56:64:c1:89:13:d5:ed:ee:0a:
                    77:5e:48:8c:4a:f1:b8:e3:98:e5:e6:2d:63:31:44:
                    8f:ac:64:82:7e:de:80:c4:10:38:0d:13:f8:30:69:
                    59:42:26:d4:d0:f0:d3:97:f0:76:63:ba:a4:7e:fd:
                    0d:af:59:30:c4:f0:41:e0:81:20:19:49:ff:ba:e5:
                    7a:e3:04:08:fc:d2:1c:1c:72:f5:3f:1c:e0:67:fd:
                    d0:39:01:97:a7:1f:1a:44:fb:c7:e5:cf:04:2e:28:
                    c1:31:89:37:00:ce:c6:de:be:42:6d:2f:80:48:9f:
                    93:fd:df:5a:63:65:06:4b:3d:8b:3b:2c:fc:5f:3e:
                    22:31:31:1a:10:22:90:21:c4:d3:51:d0:52:be:0e:
                    30:e5:42:de:aa:90:94:a2:20:cb:f6:af:be:59:f0:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:85:D8:16:32:AF:C0:AC:F1:6A:D6:E4:71:25:F9:5F:55:38:F4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/d7d5e058-1fe6-357c-8466-a7bc48dae08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.crl

            X509v3 Authority Key Identifier:
                keyid:DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.87.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:c9:f6:2e:34:ea:96:b8:d8:86:07:72:8c:6f:9d:19:09:
         1b:0b:b7:27:f4:f1:cc:95:6f:d8:b5:01:b4:d9:21:75:7e:d2:
         f8:1d:ea:d1:d5:c0:39:1d:78:c3:c3:71:6f:22:29:1c:50:e3:
         dd:df:2e:a3:fa:2d:27:8f:91:65:34:73:77:30:f5:98:b8:24:
         02:28:ea:f1:c4:f2:df:7c:6b:2c:d5:3d:21:52:2c:06:47:4c:
         01:b1:d5:7a:83:5f:dd:6c:db:d5:9d:70:cf:c6:a3:cb:57:3f:
         69:31:26:77:96:8e:cc:04:75:3b:6e:12:bb:f5:bb:7e:af:62:
         5e:c0:c9:a5:97:e8:e1:22:53:95:39:6b:ba:dd:38:8d:ec:03:
         06:34:ad:69:bd:e0:37:14:24:83:05:40:f8:97:e4:85:1d:90:
         67:42:a0:50:44:9b:cf:13:f6:45:29:61:d2:0f:63:63:03:cf:
         bf:a4:04:49:f9:67:2a:d9:45:bf:50:61:76:20:06:af:64:d0:
         bb:61:ce:61:05:40:59:05:24:49:35:7e:17:11:b7:5e:0b:6f:
         50:72:49:72:75:f3:bd:e9:8a:66:25:7a:bd:9d:9c:9a:a0:88:
         55:89:db:ce:75:dd:75:4f:08:8a:05:79:46:4e:0e:72:4a:c2:
         e0:b6:54:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYFAT11A/xSk7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M2MzdmYTAtMDc3My00MGQ2LWFmY2EtZDQ5MTIyNTE2
YjRmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjA2Y2FkMjQtMDVkNC00NjEzLWExNTQtNDQxNDA1NDhkOTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKIvu2cD8HGNU72F9Pt7MMbhEH7MJhvNR2Mo
U7lpoUTxUCdgZfDZz23+4L5vkZJ0w/H3GeTQxO9YXWLHDEtb20pUAxjHowUj8vkb
zG903ACXJEG/bhTk75eiT4agXsZWZMGJE9Xt7gp3XkiMSvG445jl5i1jMUSPrGSC
ft6AxBA4DRP4MGlZQibU0PDTl/B2Y7qkfv0Nr1kwxPBB4IEgGUn/uuV64wQI/NIc
HHL1PxzgZ/3QOQGXpx8aRPvH5c8ELijBMYk3AM7G3r5CbS+ASJ+T/d9aY2UGSz2L
Oyz8Xz4iMTEaECKQIcTTUdBSvg4w5ULeqpCUoiDL9q++WfBlvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+F2BYyr8Cs8WrW5HEl+V9VOPQUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYzYz
N2ZhMC0wNzczLTQwZDYtYWZjYS1kNDkxMjI1MTZiNGYvZDdkNWUwNTgtMWZlNi0z
NTdjLTg0NjYtYTdiYzQ4ZGFlMDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2M2MzdmYTAtMDc3My00MGQ2LWFm
Y2EtZDQ5MTIyNTE2YjRmLzNjNjM3ZmEwLTA3NzMtNDBkNi1hZmNhLWQ0OTEyMjUx
NmI0Zi5jcmwwHwYDVR0jBBgwFoAU2/gqnWFQJ0lVAC0+9sdirvncD/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zYzYzN2ZhMC0wNzczLTQwZDYtYWZjYS1kNDkx
MjI1MTZiNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFeXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFn2yfYuNOqWuNiGB3KMb50ZCRsLtyf08cyVb9i1AbTZIXV+0vgd6tHV
wDkdeMPDcW8iKRxQ493fLqP6LSePkWU0c3cw9Zi4JAIo6vHE8t98ayzVPSFSLAZH
TAGx1XqDX91s29WdcM/Go8tXP2kxJneWjswEdTtuErv1u36vYl7AyaWX6OEiU5U5
a7rdOI3sAwY0rWm94DcUJIMFQPiX5IUdkGdCoFBEm88T9kUpYdIPY2MDz7+kBEn5
ZyrZRb9QYXYgBq9k0LthzmEFQFkFJEk1fhcRt14Lb1BySXJ1873pimYler2dnJqg
iFWJ28513XVPCIoFeUZODnJKwuC2VIg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 07:30:10 2025 by rpki-client