Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/12cd62b2-9d1c-33a4-9c27-03e7b98dd720.roa
File:                     12cd62b2-9d1c-33a4-9c27-03e7b98dd720.roa (raw, json)
Hash identifier:          Jc5XPCL89nJFSpi7EnWFhalaLPsmcKKfXRvGzefML0Q=
Subject key identifier:   CD:61:36:B0:9C:43:68:00:68:81:90:6C:08:77:3F:4D:13:3C:55:90
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F432858495D89693220AC1392D68BD100
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/12cd62b2-9d1c-33a4-9c27-03e7b98dd720.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     36184
IP address blocks:        217.10.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:69:32:20:ac:13:92:d6:8b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=e50a3a60-55cd-477f-aa79-1a833f46887d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:47:18:62:ab:0f:d7:f9:ea:93:9d:fe:dc:
                    60:d7:81:c6:80:17:59:06:52:b7:dc:84:aa:e4:00:
                    e7:c9:86:03:0a:78:cd:e4:9b:fc:0c:b9:32:44:e3:
                    f0:c2:30:07:d7:56:8d:d0:32:8f:17:6b:c5:0f:f5:
                    7d:4b:9c:94:fa:31:ae:87:6d:c2:47:fe:5d:36:77:
                    bb:23:82:12:39:36:31:dd:b6:d0:60:13:a0:46:8f:
                    15:65:d1:79:a3:56:d9:6f:27:03:4f:e8:5f:67:d0:
                    ed:3d:cf:cf:17:15:f0:79:bf:7f:66:e8:67:7c:fb:
                    36:2b:3f:a1:7e:55:1d:00:03:0a:a7:21:2d:d2:71:
                    8d:19:96:67:ef:2e:86:f8:10:79:58:37:f8:e5:d1:
                    92:44:64:0a:da:dc:d2:2b:ce:6d:00:de:46:6f:ac:
                    ba:91:f6:88:68:11:ea:23:0f:01:9c:54:a3:aa:dd:
                    d7:08:a0:09:8b:1c:ef:09:be:68:6f:67:c3:8a:f9:
                    c2:8b:e8:76:b5:18:45:77:24:b7:dc:93:0f:40:94:
                    51:d2:ea:e3:f4:c5:10:d2:a7:b4:e2:a0:6a:85:7a:
                    21:8e:59:fc:3c:96:ef:aa:44:4f:b5:9d:bc:0b:4c:
                    29:80:21:99:37:39:63:03:35:17:20:07:e5:a0:24:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:61:36:B0:9C:43:68:00:68:81:90:6C:08:77:3F:4D:13:3C:55:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/12cd62b2-9d1c-33a4-9c27-03e7b98dd720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.10.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:7c:bc:c0:d8:d3:c4:75:c3:2b:45:d3:2a:7c:f7:cc:7f:
         03:51:82:f4:f0:1e:bf:7f:24:d6:cf:23:16:69:bc:de:7c:e4:
         1a:16:51:77:44:3b:69:a8:7a:e4:d2:26:a6:98:a0:e7:d2:7d:
         87:f4:dc:f3:4a:81:2d:eb:c7:c5:c0:94:a3:94:90:2d:d2:f3:
         c5:cd:d8:69:f7:fa:7c:74:32:42:63:c8:4a:bd:11:e2:e1:de:
         1d:0f:8a:89:96:e8:b0:0d:4d:30:7b:17:a4:d7:db:56:69:d8:
         95:92:f7:c8:9a:bb:34:93:5a:bb:61:cd:46:0b:b0:7a:1d:fb:
         c7:15:57:e3:56:5a:c4:e9:6b:fd:af:f3:e9:72:de:8b:ed:4b:
         78:2a:3c:97:4e:ed:88:cb:e6:c7:59:00:ec:0a:20:ce:22:cd:
         f3:19:da:34:7f:00:1f:47:23:86:64:1a:20:72:31:39:41:21:
         21:68:c3:c2:14:cb:4f:f1:c5:80:02:06:6b:cc:b1:a0:e9:0f:
         63:ac:c1:05:87:a7:e4:05:ec:75:12:38:ef:a1:f1:27:0c:91:
         af:42:6d:68:45:fa:27:9c:b2:70:f0:c3:54:3c:37:67:15:0a:
         bb:dc:f4:7c:a7:cd:b6:49:fe:5f:3b:48:8d:d4:56:2d:66:16:
         7a:18:5b:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWkyIKwTktaL0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwODg0ZjQtZmExNC00YTEzLWFjM2ItZWZiN2M5NDEy
MDgyMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk
ZTUwYTNhNjAtNTVjZC00NzdmLWFhNzktMWE4MzNmNDY4ODdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JlHGGKrD9f56pOd/txg14HGgBdZBlK33ISq
5ADnyYYDCnjN5Jv8DLkyROPwwjAH11aN0DKPF2vFD/V9S5yU+jGuh23CR/5dNne7
I4ISOTYx3bbQYBOgRo8VZdF5o1bZbycDT+hfZ9DtPc/PFxXweb9/ZuhnfPs2Kz+h
flUdAAMKpyEt0nGNGZZn7y6G+BB5WDf45dGSRGQK2tzSK85tAN5Gb6y6kfaIaBHq
Iw8BnFSjqt3XCKAJixzvCb5ob2fDivnCi+h2tRhFdyS33JMPQJRR0urj9MUQ0qe0
4qBqhXohjln8PJbvqkRPtZ28C0wpgCGZNzljAzUXIAfloCQzxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1hNrCcQ2gAaIGQbAh3P00TPFWQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNjA4
ODRmNC1mYTE0LTRhMTMtYWMzYi1lZmI3Yzk0MTIwODIvMTJjZDYyYjItOWQxYy0z
M2E0LTljMjctMDNlN2I5OGRkNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTYwODg0ZjQtZmExNC00YTEzLWFj
M2ItZWZiN2M5NDEyMDgyL2U2MDg4NGY0LWZhMTQtNGExMy1hYzNiLWVmYjdjOTQx
MjA4Mi5jcmwwHwYDVR0jBBgwFoAUDJp86W2MOEia8zvKQWbziUd9SQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lNjA4ODRmNC1mYTE0LTRhMTMtYWMzYi1lZmI3
Yzk0MTIwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QrgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqefLzA2NPEdcMrRdMqfPfMfwNRgvTwHr9/JNbPIxZpvN585BoWUXdE
O2moeuTSJqaYoOfSfYf03PNKgS3rx8XAlKOUkC3S88XN2Gn3+nx0MkJjyEq9EeLh
3h0PiomW6LANTTB7F6TX21Zp2JWS98iauzSTWrthzUYLsHod+8cVV+NWWsTpa/2v
8+ly3ovtS3gqPJdO7YjL5sdZAOwKIM4izfMZ2jR/AB9HI4ZkGiByMTlBISFow8IU
y0/xxYACBmvMsaDpD2OswQWHp+QF7HUSOO+h8ScMka9CbWhF+iecsnDww1Q8N2cV
Crvc9HynzbZJ/l87SI3UVi1mFnoYWyc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:15:08 2025 by rpki-client