Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/d51d3675-a5da-37f9-9961-52b245f66381.roa
File:                     d51d3675-a5da-37f9-9961-52b245f66381.roa (raw, json)
Hash identifier:          cYgXP0zsw7uCUqXUo7ccj8MHRFE/s3p3Iieujj7exdw=
Subject key identifier:   15:23:FE:FC:1D:90:26:37:03:8F:9E:D7:ED:6F:B3:77:D8:86:D2:68
Certificate issuer:       /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial:       010D0C9F43285849797438FC7C4513B74AB54AE0
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/d51d3675-a5da-37f9-9961-52b245f66381.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     27364
IP address blocks:        24.101.0.0/19 maxlen: 19
                          24.101.32.0/19 maxlen: 19
                          24.101.64.0/19 maxlen: 19
                          24.101.96.0/19 maxlen: 19
                          24.101.128.0/19 maxlen: 19
                          24.101.160.0/19 maxlen: 19
                          24.101.192.0/19 maxlen: 19
                          24.101.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:38:fc:7c:45:13:b7:4a:b5:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=d9d08896-3d32-4810-9c47-8d9956af75c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:cc:22:42:41:34:8a:6a:a8:fe:c5:39:c2:
                    23:36:d7:d5:18:ac:e8:ba:00:e1:92:28:0b:13:fc:
                    af:3e:a5:98:03:86:17:37:2a:12:ad:c5:0a:a4:8d:
                    87:39:ab:47:10:61:94:5b:1b:82:68:ee:45:69:b2:
                    c9:d3:ad:0e:8c:48:5d:30:1b:9f:79:d4:f9:f0:6b:
                    0e:cb:0c:e3:15:db:95:f0:f4:6e:05:b7:66:1a:d3:
                    b7:0b:a9:d0:ea:9c:ac:32:66:f2:a4:d2:19:11:c9:
                    cb:4c:93:d5:f0:16:bf:fe:2e:29:0b:6d:98:59:15:
                    c4:a5:da:eb:e1:2d:44:8f:86:93:84:96:42:a3:c0:
                    dd:fe:d8:da:cb:94:54:1b:e6:d0:07:84:07:f4:d8:
                    37:14:b7:c8:cb:45:b4:ef:30:f4:76:2f:83:aa:3b:
                    f1:76:a8:a4:c9:84:30:54:d3:09:9f:e9:d7:c9:bf:
                    74:b6:c3:b8:4a:d2:59:ac:3d:0b:7d:f0:df:22:ba:
                    0f:7f:d3:ef:3a:f3:64:f2:40:fb:d3:d6:b1:8c:2c:
                    0b:93:bd:3d:ea:a4:39:4b:a4:7e:48:d1:ab:d3:14:
                    bd:43:ed:86:3e:50:5e:43:d3:66:19:03:eb:76:91:
                    e7:f7:4b:71:b4:bd:07:b9:7b:30:b0:cb:3a:fd:dd:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:23:FE:FC:1D:90:26:37:03:8F:9E:D7:ED:6F:B3:77:D8:86:D2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/d51d3675-a5da-37f9-9961-52b245f66381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c4:42:e7:46:5b:c1:c0:79:2b:3c:ba:13:a5:17:90:6b:ea:
         e0:c0:83:eb:76:89:88:74:95:e9:30:67:cf:ec:79:cb:df:6d:
         43:68:9d:15:e3:ef:78:03:9b:5d:1c:19:cf:36:2c:41:ab:fb:
         74:61:a2:d9:77:81:5d:d6:ef:05:02:43:63:ce:85:94:b1:67:
         1b:67:fe:23:fa:db:af:27:e4:39:a6:72:02:d2:ff:c8:77:6b:
         a2:74:b6:db:df:45:d7:89:12:fb:9a:e4:df:25:4e:8a:da:76:
         4b:96:99:99:5d:5f:b0:84:91:62:ce:2b:9c:82:12:76:57:3e:
         42:29:b7:b8:d8:c3:0c:02:fd:be:97:7d:0e:ae:73:5b:5a:ac:
         a1:d1:3a:58:be:6b:25:26:ec:37:1d:98:3c:6c:2c:87:a7:58:
         a3:e7:cd:29:22:7a:a0:a8:3a:e5:f3:7e:7a:3e:ef:a1:61:49:
         7d:75:5a:73:8f:3a:16:3a:12:cd:d2:60:b9:a8:93:b6:91:4d:
         4e:3a:cb:37:eb:54:bb:d4:e4:a3:e1:37:c8:80:38:e9:cd:0f:
         5d:52:22:95:7d:47:17:9e:89:9c:00:9b:33:63:cd:93:bd:3d:
         5e:df:c0:36:07:61:5f:c5:1a:5c:48:b8:de:8e:de:40:e3:11:
         a3:83:af:9f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEl5dDj8fEUTt0q1SuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ0Zjc2NTktMTEzZS00YjNjLWJlOWQtMjAwODIxYmM5
YTViMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
ZDlkMDg4OTYtM2QzMi00ODEwLTljNDctOGQ5OTU2YWY3NWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwULMIkJBNIpqqP7FOcIjNtfVGKzougDhkigL
E/yvPqWYA4YXNyoSrcUKpI2HOatHEGGUWxuCaO5FabLJ060OjEhdMBufedT58GsO
ywzjFduV8PRuBbdmGtO3C6nQ6pysMmbypNIZEcnLTJPV8Ba//i4pC22YWRXEpdrr
4S1Ej4aThJZCo8Dd/tjay5RUG+bQB4QH9Ng3FLfIy0W07zD0di+DqjvxdqikyYQw
VNMJn+nXyb90tsO4StJZrD0LffDfIroPf9PvOvNk8kD709axjCwLk7096qQ5S6R+
SNGr0xS9Q+2GPlBeQ9NmGQPrdpHn90txtL0HuXswsMs6/d0nkwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBUj/vwdkCY3A4+e1+1vs3fYhtJoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDRm
NzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4MjFiYzlhNWIvZDUxZDM2NzUtYTVkYS0z
N2Y5LTk5NjEtNTJiMjQ1ZjY2MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQ0Zjc2NTktMTEzZS00YjNjLWJl
OWQtMjAwODIxYmM5YTViLzA0NGY3NjU5LTExM2UtNGIzYy1iZTlkLTIwMDgyMWJj
OWE1Yi5jcmwwHwYDVR0jBBgwFoAUw7o5dR9Nje8RX/3hFz1+7KaBgM4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDRmNzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4
MjFiYzlhNWIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGGUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX8RC50ZbwcB5Kzy6E6UXkGvq4MCD63aJiHSV6TBnz+x5y99tQ2idFePv
eAObXRwZzzYsQav7dGGi2XeBXdbvBQJDY86FlLFnG2f+I/rbryfkOaZyAtL/yHdr
onS2299F14kS+5rk3yVOitp2S5aZmV1fsISRYs4rnIISdlc+Qim3uNjDDAL9vpd9
Dq5zW1qsodE6WL5rJSbsNx2YPGwsh6dYo+fNKSJ6oKg65fN+ej7voWFJfXVac486
FjoSzdJguaiTtpFNTjrLN+tUu9Tko+E3yIA46c0PXVIilX1HF56JnACbM2PNk709
Xt/ANgdhX8UaXEi43o7eQOMRo4Ovnw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:37 2025 by rpki-client