Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/1493c781-77c2-36ff-8d13-d6e704c3952c.roa
File:                     1493c781-77c2-36ff-8d13-d6e704c3952c.roa (raw, json)
Hash identifier:          ooRAhkQ6W/hTpjoxtMsw7YiEnpoRPsK0TxpGsmY/64w=
Subject key identifier:   69:5F:8E:4A:A1:54:4F:1F:C4:73:0B:8F:30:85:F9:12:4F:01:78:27
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F432858494469464B497F121F2C2C8900
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/1493c781-77c2-36ff-8d13-d6e704c3952c.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        204.111.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:46:4b:49:7f:12:1f:2c:2c:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=71f775fe-c781-404c-b73d-dd0d1ff9e5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:3c:06:f5:52:90:86:7b:15:81:7c:c9:90:
                    23:04:cc:96:06:35:f2:96:4b:a3:49:9f:5b:e3:ec:
                    de:13:bf:04:85:89:90:83:08:07:69:fb:c2:eb:24:
                    55:fe:4c:a8:a5:77:8e:ba:1e:33:7f:bc:d5:53:ff:
                    e0:9c:31:60:ea:be:13:d4:a4:60:32:b6:53:ee:7d:
                    ef:d9:a0:d7:10:ff:53:ec:f5:88:c1:1c:b6:a2:c4:
                    a0:6e:ae:89:fd:5d:f4:8c:80:22:19:6f:51:6d:d4:
                    44:3e:7f:46:13:a7:77:bf:83:82:de:a0:2c:87:ef:
                    2d:7b:9a:97:58:56:3b:d2:52:1b:fc:70:6a:18:6c:
                    33:46:0a:53:d2:dd:eb:c1:07:bb:ea:93:9b:94:b8:
                    dc:47:8f:36:32:c3:d8:5d:bd:36:64:55:b7:35:34:
                    44:8e:e9:a0:8f:ae:be:c9:30:55:d4:79:30:6d:ea:
                    fa:8d:3f:be:47:17:a6:84:22:a5:69:60:76:4c:79:
                    90:64:69:28:06:1c:0d:51:71:e5:d4:5e:f1:36:45:
                    2a:3c:49:3c:3f:b1:ce:dc:4f:83:f4:84:57:87:22:
                    99:f4:2c:2c:8e:23:2d:20:40:57:2c:20:90:e4:29:
                    e4:68:f4:17:f5:07:29:93:d8:da:38:55:34:4e:39:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5F:8E:4A:A1:54:4F:1F:C4:73:0B:8F:30:85:F9:12:4F:01:78:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/1493c781-77c2-36ff-8d13-d6e704c3952c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.111.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:f3:3c:39:45:8d:01:2d:59:5b:2b:d7:6c:db:97:f4:61:
         0e:6a:41:11:47:2d:59:38:04:0a:fc:42:f3:b3:ab:d4:08:b4:
         fb:01:5d:c1:a1:0a:1c:4a:d4:7e:ed:92:2b:a6:72:19:7b:b6:
         d3:5c:33:86:8d:af:6e:e5:14:88:e0:5f:4d:60:97:c8:c9:e4:
         bf:ce:be:c1:75:4c:e1:8b:11:58:ea:ea:0e:82:b8:41:b6:24:
         b7:35:b4:a4:92:37:76:be:e3:30:46:63:a6:38:c8:e1:4d:54:
         cb:5b:b4:7a:c1:0b:d6:af:f8:6b:38:76:d4:ca:04:63:e0:f6:
         f0:ac:6f:ec:5f:50:af:ae:2b:d3:7b:f6:e9:8b:e0:8a:c0:c9:
         d3:1f:4c:cc:2d:df:33:c2:9b:be:15:58:18:fb:bb:bd:68:fa:
         01:41:28:06:0d:3e:6f:0a:de:c1:fa:5e:0d:27:01:2b:10:72:
         f3:3b:36:4e:55:10:c0:6e:57:a2:c2:2c:21:e2:89:40:05:a7:
         e3:78:97:ca:a9:99:bf:85:e6:eb:5a:d2:a0:73:f9:b6:9f:a5:
         28:73:df:65:82:dd:2e:90:1d:f5:8a:67:d3:5e:8a:f5:ba:e7:
         a8:61:95:6b:f7:4d:5a:6e:16:69:d7:79:05:4a:3f:24:5d:92:
         20:d3:e7:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUZLSX8SHywsiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NzFmNzc1ZmUtYzc4MS00MDRjLWI3M2QtZGQwZDFmZjllNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS88BvVSkIZ7FYF8yZAjBMyWBjXylkujSZ9b
4+zeE78EhYmQgwgHafvC6yRV/kyopXeOuh4zf7zVU//gnDFg6r4T1KRgMrZT7n3v
2aDXEP9T7PWIwRy2osSgbq6J/V30jIAiGW9RbdREPn9GE6d3v4OC3qAsh+8te5qX
WFY70lIb/HBqGGwzRgpT0t3rwQe76pOblLjcR482MsPYXb02ZFW3NTREjumgj66+
yTBV1Hkwber6jT++RxemhCKlaWB2THmQZGkoBhwNUXHl1F7xNkUqPEk8P7HO3E+D
9IRXhyKZ9CwsjiMtIEBXLCCQ5CnkaPQX9Qcpk9jaOFU0TjnldwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlfjkqhVE8fxHMLjzCF+RJPAXgnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMTQ5M2M3ODEtNzdjMi0z
NmZmLThkMTMtZDZlNzA0YzM5NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzG9rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqj8zw5RY0BLVlbK9ds25f0YQ5qQRFHLVk4BAr8QvOzq9QItPsBXcGh
ChxK1H7tkiumchl7ttNcM4aNr27lFIjgX01gl8jJ5L/OvsF1TOGLEVjq6g6CuEG2
JLc1tKSSN3a+4zBGY6Y4yOFNVMtbtHrBC9av+Gs4dtTKBGPg9vCsb+xfUK+uK9N7
9umL4IrAydMfTMwt3zPCm74VWBj7u71o+gFBKAYNPm8K3sH6Xg0nASsQcvM7Nk5V
EMBuV6LCLCHiiUAFp+N4l8qpmb+F5uta0qBz+bafpShz32WC3S6QHfWKZ9NeivW6
56hhlWv3TVpuFmnXeQVKPyRdkiDT5/E=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:20 2025 by rpki-client