Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e25868c-59f1-35e2-a20d-94b64eb48e82.roa
File:                     2e25868c-59f1-35e2-a20d-94b64eb48e82.roa (raw, json)
Hash identifier:          BOp2LrIMn5mqvkhw/jA67La26jd0vZ+ovBjcCzlHKg0=
Subject key identifier:   7B:0E:DE:CF:1C:5C:F3:8E:39:51:34:CC:76:80:CF:24:0F:E5:A5:4D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848CC7B982FA1347707474FDBF0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e25868c-59f1-35e2-a20d-94b64eb48e82.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     397630
IP address blocks:        199.101.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:98:2f:a1:34:77:07:47:4f:db:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=7e2737c2-3aac-4635-84e4-16f91061e682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:1f:6a:6a:91:7b:a6:46:ec:22:08:4d:1f:
                    ba:73:ae:2c:db:1b:34:be:d5:13:ff:63:46:2f:a8:
                    bc:64:27:2f:3f:e5:b2:dd:54:06:2b:38:3b:04:f5:
                    f5:e3:fc:0f:5d:99:76:14:5d:0b:33:bf:8f:b2:32:
                    00:ad:09:35:d5:25:6f:ce:40:c5:35:4b:9e:f3:b5:
                    6f:d7:cd:60:07:ee:c4:94:ef:b7:32:78:84:b7:16:
                    1c:bf:60:46:96:98:10:3b:4f:ca:f1:05:00:67:3d:
                    e8:1e:92:36:34:0d:eb:fd:4e:01:0a:4f:2f:f1:b4:
                    fd:ca:99:5e:b7:07:fd:31:c2:d9:20:39:89:63:7e:
                    98:3e:2b:f1:70:89:2a:35:e6:34:12:48:c2:6e:ed:
                    3f:02:0f:dd:7a:e9:63:6e:26:01:ba:55:5f:14:a5:
                    20:d7:56:23:69:6b:ab:0b:56:0e:95:8d:dd:65:3c:
                    41:04:08:6f:f8:c1:44:e8:f0:55:c2:89:f3:1d:6b:
                    0c:c3:7e:6a:12:db:77:d6:32:64:2f:e8:e6:38:fa:
                    18:98:92:69:fe:3c:4e:45:3d:b4:ab:d4:18:e6:69:
                    f6:16:79:ca:4f:3a:78:21:14:fb:a3:59:4c:b5:ca:
                    33:c3:f6:0c:21:61:e3:8c:2c:eb:20:f2:6a:eb:2f:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0E:DE:CF:1C:5C:F3:8E:39:51:34:CC:76:80:CF:24:0F:E5:A5:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e25868c-59f1-35e2-a20d-94b64eb48e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:9a:d9:e5:1d:b9:93:62:e9:cc:be:2c:6d:90:31:59:b9:
         ff:87:ad:83:08:39:ac:4a:52:dd:6d:af:89:6f:4f:90:99:83:
         67:d4:54:c1:18:f6:92:80:da:89:09:91:d4:69:f0:26:70:8f:
         08:58:af:4b:07:83:de:f8:59:2e:22:e5:75:b5:6a:05:ce:fd:
         85:f5:8c:b9:15:be:ee:ba:72:1a:f9:1d:49:7c:3b:31:f8:58:
         0b:1f:e6:32:f5:7d:84:7c:fc:79:89:d3:76:1f:f5:6a:77:f6:
         26:bd:57:2f:3a:68:ca:4b:eb:5c:7d:a6:45:9b:0b:6c:ac:57:
         97:45:23:c8:c2:bf:86:5b:3c:79:88:44:ba:32:b7:8d:2c:8c:
         90:68:b9:6b:98:ad:54:63:5c:4e:27:d8:e6:36:d0:8b:32:73:
         a2:79:ef:e5:66:0e:03:58:88:88:96:54:43:10:ad:ab:be:5e:
         4e:27:46:a9:27:f3:b3:87:bc:1c:5f:3d:40:1a:d1:21:2b:cf:
         28:4e:f6:22:b9:57:49:01:c8:ee:b8:ce:84:1f:5e:06:1c:e5:
         4f:ce:da:ca:ce:d2:d0:6f:c0:b0:4a:c4:01:b9:78:74:ba:2f:
         85:c8:1e:bd:73:cb:3f:98:96:8e:94:2b:21:ee:c1:03:12:af:
         94:da:a5:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5gvoTR3B0dP2/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
N2UyNzM3YzItM2FhYy00NjM1LTg0ZTQtMTZmOTEwNjFlNjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SQfamqRe6ZG7CIITR+6c64s2xs0vtUT/2NG
L6i8ZCcvP+Wy3VQGKzg7BPX14/wPXZl2FF0LM7+PsjIArQk11SVvzkDFNUue87Vv
181gB+7ElO+3MniEtxYcv2BGlpgQO0/K8QUAZz3oHpI2NA3r/U4BCk8v8bT9yple
twf9McLZIDmJY36YPivxcIkqNeY0EkjCbu0/Ag/deuljbiYBulVfFKUg11YjaWur
C1YOlY3dZTxBBAhv+MFE6PBVwonzHWsMw35qEtt31jJkL+jmOPoYmJJp/jxORT20
q9QY5mn2FnnKTzp4IRT7o1lMtcozw/YMIWHjjCzrIPJq6y/GnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsO3s8cXPOOOVE0zHaAzyQP5aVNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmUyNTg2OGMtNTlmMS0z
NWUyLWEyMGQtOTRiNjRlYjQ4ZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2WIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoUmtnlHbmTYunMvixtkDFZuf+HrYMIOaxKUt1tr4lvT5CZg2fUVMEY
9pKA2okJkdRp8CZwjwhYr0sHg974WS4i5XW1agXO/YX1jLkVvu66chr5HUl8OzH4
WAsf5jL1fYR8/HmJ03Yf9Wp39ia9Vy86aMpL61x9pkWbC2ysV5dFI8jCv4ZbPHmI
RLoyt40sjJBouWuYrVRjXE4n2OY20Isyc6J57+VmDgNYiIiWVEMQrau+Xk4nRqkn
87OHvBxfPUAa0SErzyhO9iK5V0kByO64zoQfXgYc5U/O2srO0tBvwLBKxAG5eHS6
L4XIHr1zyz+Ylo6UKyHuwQMSr5TapbQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:48 2025 by rpki-client