Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9346535e-3e23-3035-b144-ec8bd1bdf964.roa
File:                     9346535e-3e23-3035-b144-ec8bd1bdf964.roa (raw, json)
Hash identifier:          3EwqgOaH8237yxtnk+omrkBuh7niTApEVYepdAeZbrU=
Subject key identifier:   5E:DD:05:43:FB:B9:D3:14:18:9D:D6:3D:AB:27:0B:56:8E:33:D8:9D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A8410DD78302967611C80B680
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9346535e-3e23-3035-b144-ec8bd1bdf964.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     19437
IP address blocks:        207.244.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:dd:78:30:29:67:61:1c:80:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c24e52b6-533a-4967-870c-8bb3ff31bc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:41:14:69:f1:e2:e6:60:62:b7:62:db:39:
                    52:94:d0:0f:2c:85:2b:32:81:75:2d:a6:b6:5d:72:
                    3b:84:ed:0e:28:a2:e4:62:f3:ed:7a:d8:db:2a:77:
                    db:9a:88:34:d2:46:4c:1c:0a:dc:e2:a1:60:b0:33:
                    de:7c:7d:b1:1c:be:34:3a:a1:c0:2e:5f:81:dd:90:
                    ca:14:3c:9c:44:51:35:fd:41:f2:e6:2a:2b:59:9a:
                    d4:4d:86:d2:6f:55:65:25:7c:27:66:8a:48:19:4a:
                    5f:8b:35:69:bf:9d:2e:f2:bf:95:4a:1b:8d:15:f7:
                    4a:48:82:dd:d7:26:d6:0d:26:bb:88:a4:a7:23:22:
                    24:66:40:a9:04:0a:77:43:18:7f:09:7d:9e:95:09:
                    73:66:f2:06:fc:05:12:a2:81:87:d7:7e:57:41:61:
                    70:fc:e8:e2:02:38:65:cc:a7:22:0d:b7:65:55:b2:
                    38:ac:39:ef:d5:e6:0f:8d:3f:8f:03:13:ec:84:55:
                    a0:62:8b:0b:6c:be:c7:07:09:66:e2:31:c9:43:da:
                    56:d3:68:4a:ad:ad:d6:c6:ca:cc:68:41:e5:5f:f3:
                    2d:d7:ea:7e:27:99:8a:a9:01:ee:03:f6:7e:c4:98:
                    28:51:9c:93:08:9c:96:d0:d9:f5:77:d9:2c:c4:e0:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DD:05:43:FB:B9:D3:14:18:9D:D6:3D:AB:27:0B:56:8E:33:D8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9346535e-3e23-3035-b144-ec8bd1bdf964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.244.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:53:49:27:b3:a9:61:97:11:ba:55:f5:61:2b:79:6f:75:b7:
         2f:d5:f7:41:1d:c1:b2:69:c4:c2:69:ec:64:b6:83:63:04:52:
         ed:ff:2d:ed:6f:b5:db:fa:55:e8:6f:29:e2:d0:b2:35:b2:31:
         94:6e:ae:87:2d:38:9d:9f:8b:82:d2:88:87:3c:14:7b:92:bf:
         b4:6c:5a:fe:6f:8d:57:86:b1:44:f8:b2:83:5b:ba:be:fa:01:
         f9:a9:c1:70:1f:8e:d7:c0:d2:07:10:3c:73:6c:e6:cf:61:90:
         f1:83:78:f6:ac:86:08:be:26:75:79:cb:4b:0c:e8:0b:10:7b:
         2e:65:c1:f0:ec:0d:40:ef:37:42:ed:dc:79:7c:43:15:e9:22:
         86:55:c8:c5:fb:25:11:cb:b9:38:0d:96:5a:7b:51:49:ad:98:
         04:65:f9:1f:8c:bd:28:e7:d7:80:f6:fa:88:ef:68:e3:a7:dc:
         e5:81:fa:f2:7b:d5:20:ed:9f:4a:72:eb:23:37:6d:b0:e1:98:
         e1:be:51:01:8c:35:ff:47:cd:30:9f:60:09:f3:68:75:b1:60:
         6e:87:c3:29:8d:4a:21:ad:a4:14:9c:df:2c:ef:4b:0d:f2:82:
         1a:56:7f:d0:e2:d2:b7:2b:83:d5:30:58:07:dc:bf:0c:f5:1c:
         12:fe:e3:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEN14MClnYRyAtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YzI0ZTUyYjYtNTMzYS00OTY3LTg3MGMtOGJiM2ZmMzFiYzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqJBFGnx4uZgYrdi2zlSlNAPLIUrMoF1Laa2
XXI7hO0OKKLkYvPtetjbKnfbmog00kZMHArc4qFgsDPefH2xHL40OqHALl+B3ZDK
FDycRFE1/UHy5iorWZrUTYbSb1VlJXwnZopIGUpfizVpv50u8r+VShuNFfdKSILd
1ybWDSa7iKSnIyIkZkCpBAp3Qxh/CX2elQlzZvIG/AUSooGH135XQWFw/OjiAjhl
zKciDbdlVbI4rDnv1eYPjT+PAxPshFWgYosLbL7HBwlm4jHJQ9pW02hKra3WxsrM
aEHlX/Mt1+p+J5mKqQHuA/Z+xJgoUZyTCJyW0Nn1d9ksxOClfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7dBUP7udMUGJ3WPasnC1aOM9idMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOTM0NjUzNWUtM2UyMy0z
MDM1LWIxNDQtZWM4YmQxYmRmOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZTSSezqWGXEbpV9WEreW91ty/V90EdwbJpxMJp7GS2g2MEUu3/Le1v
tdv6VehvKeLQsjWyMZRuroctOJ2fi4LSiIc8FHuSv7RsWv5vjVeGsUT4soNbur76
AfmpwXAfjtfA0gcQPHNs5s9hkPGDePashgi+JnV5y0sM6AsQey5lwfDsDUDvN0Lt
3Hl8QxXpIoZVyMX7JRHLuTgNllp7UUmtmARl+R+MvSjn14D2+ojvaOOn3OWB+vJ7
1SDtn0py6yM3bbDhmOG+UQGMNf9HzTCfYAnzaHWxYG6HwymNSiGtpBSc3yzvSw3y
ghpWf9Di0rcrg9UwWAfcvwz1HBL+4xA=
-----END CERTIFICATE-----
Generated at Wed Jul 30 19:45:08 2025 by rpki-client