Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f4414216-5e21-3d0b-844a-62cc665c06fe.roa
File:                     f4414216-5e21-3d0b-844a-62cc665c06fe.roa (raw, json)
Hash identifier:          YdKbXNDmmHoDTyfn9genQ6aWgPwQJ7/tPN2VyFwi2J4=
Subject key identifier:   6C:1B:93:D4:66:B3:F6:6E:51:6C:5E:CD:DF:71:51:7A:5D:67:0A:70
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F432858492E13C703CE6AF1776D862520
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f4414216-5e21-3d0b-844a-62cc665c06fe.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     1742
IP address blocks:        140.247.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c7:03:ce:6a:f1:77:6d:86:25:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=52f1b0b0-0613-4642-a745-73e2f4eb7463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:71:f2:e9:c0:8d:e5:8a:9f:b3:15:9b:fb:
                    a6:f9:d1:49:f3:8c:5a:96:67:d9:04:a6:2b:42:44:
                    b8:a4:03:39:f6:1e:d1:75:4c:33:90:fa:0f:72:f1:
                    1d:8b:91:6e:db:8d:1b:4f:32:86:b9:83:c6:15:cf:
                    32:66:f2:3a:7f:37:fc:b6:ce:6d:d0:75:98:ae:83:
                    08:32:bb:d9:e0:d4:2e:9f:b8:0e:d5:78:0a:88:23:
                    28:0a:e7:66:ff:5d:f3:6d:36:eb:23:a3:7c:b0:8b:
                    fd:05:69:33:bd:96:07:fc:9c:37:b3:ce:78:b0:fc:
                    36:84:35:42:60:73:f6:9c:fd:28:41:31:7a:d2:27:
                    cf:ee:5d:50:68:49:c7:ab:6a:17:14:1f:52:f2:19:
                    d5:b6:94:8a:f9:40:bf:ba:a6:c6:aa:e7:8d:53:0e:
                    b6:be:3f:5a:d0:d5:e8:2b:5d:97:b7:60:2e:c6:13:
                    21:6f:32:6c:7f:88:d9:c5:fc:d8:06:5d:d8:42:61:
                    de:77:b3:03:5b:26:b2:25:b0:7d:35:a8:9c:82:2a:
                    43:33:35:0e:5c:23:ab:54:1c:f4:ed:71:2d:ff:a3:
                    b6:79:ed:e0:ba:b1:76:f1:06:34:ba:e8:ac:30:3f:
                    c2:9e:1e:d5:05:27:a0:5f:aa:e4:ad:fe:9a:72:7b:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1B:93:D4:66:B3:F6:6E:51:6C:5E:CD:DF:71:51:7A:5D:67:0A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/f4414216-5e21-3d0b-844a-62cc665c06fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:a9:be:9c:d9:f6:b3:00:13:21:64:2d:d3:b4:3d:22:6e:
         dc:ed:27:3e:e0:0e:d2:76:77:6e:85:5b:83:45:0b:ff:e1:03:
         ca:72:c8:d6:a6:48:5b:94:71:c2:23:3b:0d:1c:e4:b0:24:f3:
         54:50:7b:d3:20:65:0b:7f:3a:20:34:7e:b9:43:08:a7:6f:8f:
         bd:92:0d:d0:b4:27:76:e6:12:7e:44:9f:0d:a7:5d:ee:31:49:
         26:2c:21:c3:ec:2f:51:2f:72:91:7a:83:c6:f5:eb:35:00:e3:
         54:ba:8b:b7:e0:e2:4a:9b:9e:ba:e2:e8:2d:50:a8:79:17:96:
         dd:ea:49:8f:3a:ab:c5:c2:85:c3:ee:bb:aa:05:64:ed:7b:d8:
         94:b6:ec:32:0c:b4:2c:71:8c:72:b2:6a:7f:89:2a:ce:59:32:
         7b:05:16:a7:f6:76:6b:73:83:c2:46:d8:f0:91:ff:a4:16:e9:
         35:9b:4e:74:a3:4b:e8:88:82:2a:b7:de:d6:c2:4e:36:32:63:
         9c:f5:2e:3f:a5:13:75:e1:57:e0:88:fe:23:c5:ba:3c:09:7a:
         67:05:ba:79:ab:63:c7:3c:52:10:81:5a:16:09:3c:83:ce:ee:
         1c:d8:30:a3:43:50:92:82:59:f5:67:a7:b9:79:04:c5:3b:8c:
         a4:41:1e:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8cDzmrxd22GJSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
NTJmMWIwYjAtMDYxMy00NjQyLWE3NDUtNzNlMmY0ZWI3NDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSdx8unAjeWKn7MVm/um+dFJ84xalmfZBKYr
QkS4pAM59h7RdUwzkPoPcvEdi5Fu240bTzKGuYPGFc8yZvI6fzf8ts5t0HWYroMI
MrvZ4NQun7gO1XgKiCMoCudm/13zbTbrI6N8sIv9BWkzvZYH/Jw3s854sPw2hDVC
YHP2nP0oQTF60ifP7l1QaEnHq2oXFB9S8hnVtpSK+UC/uqbGqueNUw62vj9a0NXo
K12Xt2AuxhMhbzJsf4jZxfzYBl3YQmHed7MDWyayJbB9NaicgipDMzUOXCOrVBz0
7XEt/6O2ee3gurF28QY0uuisMD/Cnh7VBSegX6rkrf6acnsP1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwbk9Rms/ZuUWxezd9xUXpdZwpwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvZjQ0MTQyMTYtNWUyMS0z
ZDBiLTg0NGEtNjJjYzY2NWMwNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPfsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4yqb6c2fazABMhZC3TtD0ibtztJz7gDtJ2d26FW4NFC//hA8pyyNam
SFuUccIjOw0c5LAk81RQe9MgZQt/OiA0frlDCKdvj72SDdC0J3bmEn5Enw2nXe4x
SSYsIcPsL1EvcpF6g8b16zUA41S6i7fg4kqbnrri6C1QqHkXlt3qSY86q8XChcPu
u6oFZO172JS27DIMtCxxjHKyan+JKs5ZMnsFFqf2dmtzg8JG2PCR/6QW6TWbTnSj
S+iIgiq33tbCTjYyY5z1Lj+lE3XhV+CI/iPFujwJemcFunmrY8c8UhCBWhYJPIPO
7hzYMKNDUJKCWfVnp7l5BMU7jKRBHiw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:25 2025 by rpki-client