Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa
File:                     97804e67-b515-3bb5-98a2-f8a309ebc23e.roa (raw, json)
Hash identifier:          MCClUGZc/CYn+Ss7b58raLNb8rxmIFN37xz/A3UqJCQ=
Subject key identifier:   F4:A5:88:D4:09:73:E3:54:15:C0:EC:D4:7D:B6:A3:BE:3E:48:95:D9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848ADC60FB03BBD3BB44EB1A840
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     19905
IP address blocks:        209.52.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:0f:b0:3b:bd:3b:b4:4e:b1:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=47ce78d6-6113-4f2c-b93c-ff2c22009e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:72:71:ea:cd:af:1d:29:cf:4b:39:51:47:
                    73:e1:15:b4:bd:82:28:13:0a:73:bb:69:d1:7e:64:
                    bf:40:27:27:ba:59:12:64:2d:3e:0b:5a:9d:45:3c:
                    46:0a:4d:9a:3b:9e:d3:b3:f3:a8:1a:7b:a6:d7:ca:
                    64:9f:9e:c6:43:82:62:47:4a:09:39:ac:03:3b:49:
                    01:4a:a6:e9:c2:7c:7c:84:bf:36:c8:ee:f5:f4:03:
                    de:c8:8a:6f:b5:21:f4:d1:23:4c:46:b2:c8:63:a8:
                    ef:f9:32:39:ec:42:80:c3:6c:82:c4:02:56:6e:38:
                    6c:f2:58:3d:43:c2:6b:c1:b0:68:40:3b:05:e7:17:
                    85:c7:b3:6d:56:63:4d:64:ca:30:cb:fd:60:dd:3d:
                    7b:83:e6:22:f7:9b:de:0d:8d:a2:ba:ed:e5:13:ec:
                    8d:b2:b3:a9:86:1f:3e:87:af:de:ad:71:3d:95:6a:
                    bc:58:e1:b1:fd:6c:b9:ac:32:15:27:f6:3c:6a:2b:
                    40:58:43:bd:11:9a:85:40:d2:d7:8c:54:c7:12:cc:
                    b4:4b:9c:fa:6d:cd:12:b7:b2:6c:68:8f:35:78:59:
                    09:07:aa:06:fc:ec:7d:6f:9d:51:9e:dd:51:61:67:
                    87:59:31:62:8c:b3:a9:f3:aa:0a:71:fa:bb:8e:a8:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:88:D4:09:73:E3:54:15:C0:EC:D4:7D:B6:A3:BE:3E:48:95:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97804e67-b515-3bb5-98a2-f8a309ebc23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.52.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:a1:b4:41:18:c3:5b:d6:50:4e:6d:d7:4f:65:61:28:5d:
         11:57:6c:99:0f:67:0b:18:72:b6:9e:d4:a8:f7:08:ce:6f:44:
         1e:d1:41:14:26:47:41:88:6a:b1:17:02:6a:f9:e6:d0:74:78:
         12:c1:ca:d9:56:4a:20:b7:ab:0a:98:6c:8f:51:9f:de:d6:ff:
         67:00:cf:e7:c6:30:90:7f:35:09:c8:29:7c:a7:5e:a9:e1:66:
         09:9b:f6:b5:79:33:ca:89:ae:45:10:31:03:e7:03:50:d3:3c:
         24:41:14:d0:de:8f:6c:88:5c:a3:52:4f:e4:b3:b9:1a:6f:30:
         91:1d:83:09:5c:2d:7c:0c:65:de:8e:54:4c:05:0b:00:43:35:
         bb:cc:db:82:c9:52:53:97:53:a5:60:e4:95:ca:bf:a8:f4:f6:
         ae:45:5e:e4:b2:bd:78:95:dd:0a:76:82:f9:1c:c1:94:bd:51:
         69:eb:e4:81:a6:aa:52:ef:4c:c0:87:01:bd:4e:01:37:76:75:
         49:02:cc:0e:28:82:a7:67:7d:bc:b9:ed:3e:06:e7:30:ca:1a:
         4c:78:d5:50:9d:3f:22:ed:23:d9:47:12:c7:d8:55:62:da:57:
         64:f6:35:4f:59:9c:72:78:fc:17:0e:cd:7c:18:e8:30:61:c9:
         45:52:64:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxg+wO707tE6xqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NDdjZTc4ZDYtNjExMy00ZjJjLWI5M2MtZmYyYzIyMDA5ZTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2VycerNrx0pz0s5UUdz4RW0vYIoEwpzu2nR
fmS/QCcnulkSZC0+C1qdRTxGCk2aO57Ts/OoGnum18pkn57GQ4JiR0oJOawDO0kB
Sqbpwnx8hL82yO719APeyIpvtSH00SNMRrLIY6jv+TI57EKAw2yCxAJWbjhs8lg9
Q8JrwbBoQDsF5xeFx7NtVmNNZMowy/1g3T17g+Yi95veDY2iuu3lE+yNsrOphh8+
h6/erXE9lWq8WOGx/Wy5rDIVJ/Y8aitAWEO9EZqFQNLXjFTHEsy0S5z6bc0St7Js
aI81eFkJB6oG/Ox9b51Rnt1RYWeHWTFijLOp86oKcfq7jqg+SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSliNQJc+NUFcDs1H22o74+SJXZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTc4MDRlNjctYjUxNS0z
YmI1LTk4YTItZjhhMzA5ZWJjMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TS4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnfobRBGMNb1lBObddPZWEoXRFXbJkPZwsYcrae1Kj3CM5vRB7RQRQm
R0GIarEXAmr55tB0eBLBytlWSiC3qwqYbI9Rn97W/2cAz+fGMJB/NQnIKXynXqnh
Zgmb9rV5M8qJrkUQMQPnA1DTPCRBFNDej2yIXKNST+SzuRpvMJEdgwlcLXwMZd6O
VEwFCwBDNbvM24LJUlOXU6Vg5JXKv6j09q5FXuSyvXiV3Qp2gvkcwZS9UWnr5IGm
qlLvTMCHAb1OATd2dUkCzA4ogqdnfby57T4G5zDKGkx41VCdPyLtI9lHEsfYVWLa
V2T2NU9ZnHJ4/BcOzXwY6DBhyUVSZPs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:16 2025 by rpki-client