Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76/28c742cf-70ba-3a87-b71c-fc4afabb1bb9.roa
File:                     28c742cf-70ba-3a87-b71c-fc4afabb1bb9.roa (raw, json)
Hash identifier:          77XbwtEJG4z5i345NE/URRupzIUcv1c52GqBRdaxZnw=
Subject key identifier:   D3:36:CE:38:10:71:CD:A5:27:D4:2E:AE:DC:F5:57:D4:2D:46:4C:79
Certificate issuer:       /CN=7758eb40-e5e3-495a-a55f-8146008a6a76
Certificate serial:       010D0C9F432858493AA3E1577530E7984FB07480
Authority key identifier: BB:9B:E8:D5:41:72:3B:C8:A9:0E:8B:93:62:FA:F4:40:67:02:AE:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76/28c742cf-70ba-3a87-b71c-fc4afabb1bb9.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     209242
IP address blocks:        204.62.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76/7758eb40-e5e3-495a-a55f-8146008a6a76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76/7758eb40-e5e3-495a-a55f-8146008a6a76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:e1:57:75:30:e7:98:4f:b0:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7758eb40-e5e3-495a-a55f-8146008a6a76
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=d518f7c2-4801-4308-b593-e89e257eec32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:94:ca:87:ac:6e:e5:55:5b:0e:2a:2c:73:55:
                    a9:ba:b1:9c:3c:3d:15:ea:3a:c9:b9:37:5e:6f:2d:
                    47:06:64:93:9d:d7:44:90:ee:94:03:30:33:58:25:
                    e0:20:eb:2d:b1:0c:45:ce:45:2a:7b:63:b7:b0:6b:
                    55:bb:b2:48:8e:b1:da:6e:8d:dc:55:2b:93:78:b6:
                    82:5b:2a:aa:ae:82:06:c1:8e:14:0a:4e:22:cb:a3:
                    11:1d:ea:61:90:af:d5:77:81:42:c7:6d:cf:1f:1c:
                    2b:78:31:16:e8:d6:29:a7:ea:92:8b:29:37:57:b0:
                    05:86:e5:cd:50:cc:e4:7c:7c:03:08:bd:c2:fe:59:
                    32:34:24:ae:9b:93:d7:0d:70:2d:a0:d0:2c:bc:b1:
                    5f:a8:14:86:cb:5f:b9:01:9b:fa:84:c4:06:6e:01:
                    5a:04:e4:33:2b:53:20:f9:8b:dd:ea:f3:23:61:01:
                    a7:c7:fa:26:69:7c:ae:f7:40:a6:63:aa:e4:15:2e:
                    50:4b:a9:fe:6d:81:6b:a4:f3:e7:cf:0f:0f:b5:f4:
                    4a:6f:81:e0:e6:55:b9:99:b4:18:18:0c:0a:54:4c:
                    c7:74:bf:e2:82:8e:ff:79:73:40:11:1c:8e:17:99:
                    36:d0:3c:a3:4e:93:9f:79:52:0a:42:36:2a:90:93:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:36:CE:38:10:71:CD:A5:27:D4:2E:AE:DC:F5:57:D4:2D:46:4C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76/28c742cf-70ba-3a87-b71c-fc4afabb1bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76/7758eb40-e5e3-495a-a55f-8146008a6a76.crl

            X509v3 Authority Key Identifier:
                keyid:BB:9B:E8:D5:41:72:3B:C8:A9:0E:8B:93:62:FA:F4:40:67:02:AE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7758eb40-e5e3-495a-a55f-8146008a6a76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:81:55:d2:3a:92:36:fd:dd:fb:70:ad:ae:f2:e7:00:b6:
         3c:48:58:54:dc:ac:e6:f0:e7:fd:4b:34:0c:a0:5a:03:27:e1:
         08:5e:f6:99:9c:65:1f:dd:50:7c:bd:d4:f3:ba:1a:c2:d3:46:
         b2:b5:08:c0:7e:ee:35:7f:e3:ac:89:1d:46:3f:80:56:d7:1b:
         d9:93:94:d7:1e:7d:67:46:ff:9f:30:e0:e3:81:61:38:e2:db:
         38:92:e0:1e:3a:62:37:63:60:c1:0c:6e:de:d5:a0:11:89:8b:
         e5:65:64:63:b8:c4:4e:46:f6:8d:bb:68:2c:eb:be:6f:a1:5c:
         60:9f:14:6d:4c:f4:82:e7:79:c5:ce:26:c9:5f:7e:c3:08:df:
         83:6e:b9:34:e0:99:e3:33:31:44:0f:6a:09:b9:74:06:8c:48:
         69:f1:19:eb:44:25:0b:2a:ac:fa:1a:64:13:43:c9:2b:27:af:
         67:32:71:8c:72:87:a3:04:7a:76:53:68:92:ca:75:cf:4b:3b:
         ac:f4:55:84:a1:e4:28:18:52:bc:42:28:10:49:8a:b0:31:92:
         b8:18:66:73:26:72:6d:90:de:12:6b:74:d4:d4:8d:20:04:c8:
         a6:17:a1:ae:8f:91:46:3a:9c:46:84:dd:2e:db:20:10:c9:4b:
         32:b5:67:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6o+FXdTDnmE+wdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc1OGViNDAtZTVlMy00OTVhLWE1NWYtODE0NjAwOGE2
YTc2MB4XDTI1MDMxODEzMDA1MFoXDTI1MDYxNjEzMDA1MFowLzEtMCsGA1UEAxMk
ZDUxOGY3YzItNDgwMS00MzA4LWI1OTMtZTg5ZTI1N2VlYzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJTKh6xu5VVbDiosc1WpurGcPD0V6jrJuTde
by1HBmSTnddEkO6UAzAzWCXgIOstsQxFzkUqe2O3sGtVu7JIjrHabo3cVSuTeLaC
WyqqroIGwY4UCk4iy6MRHephkK/Vd4FCx23PHxwreDEW6NYpp+qSiyk3V7AFhuXN
UMzkfHwDCL3C/lkyNCSum5PXDXAtoNAsvLFfqBSGy1+5AZv6hMQGbgFaBOQzK1Mg
+Yvd6vMjYQGnx/omaXyu90CmY6rkFS5QS6n+bYFrpPPnzw8PtfRKb4Hg5lW5mbQY
GAwKVEzHdL/igo7/eXNAERyOF5k20DyjTpOfeVIKQjYqkJO6swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNM2zjgQcc2lJ9Qurtz1V9QtRkx5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83NzU4
ZWI0MC1lNWUzLTQ5NWEtYTU1Zi04MTQ2MDA4YTZhNzYvMjhjNzQyY2YtNzBiYS0z
YTg3LWI3MWMtZmM0YWZhYmIxYmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzc1OGViNDAtZTVlMy00OTVhLWE1
NWYtODE0NjAwOGE2YTc2Lzc3NThlYjQwLWU1ZTMtNDk1YS1hNTVmLTgxNDYwMDhh
NmE3Ni5jcmwwHwYDVR0jBBgwFoAUu5vo1UFyO8ipDouTYvr0QGcCriIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83NzU4ZWI0MC1lNWUzLTQ5NWEtYTU1Zi04MTQ2
MDA4YTZhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD6NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnIgVXSOpI2/d37cK2u8ucAtjxIWFTcrObw5/1LNAygWgMn4Qhe9pmc
ZR/dUHy91PO6GsLTRrK1CMB+7jV/46yJHUY/gFbXG9mTlNcefWdG/58w4OOBYTji
2ziS4B46YjdjYMEMbt7VoBGJi+VlZGO4xE5G9o27aCzrvm+hXGCfFG1M9ILnecXO
JslffsMI34NuuTTgmeMzMUQPagm5dAaMSGnxGetEJQsqrPoaZBNDySsnr2cycYxy
h6MEenZTaJLKdc9LO6z0VYSh5CgYUrxCKBBJirAxkrgYZnMmcm2Q3hJrdNTUjSAE
yKYXoa6PkUY6nEaE3S7bIBDJSzK1Z5Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:22:10 2025 by rpki-client