Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9d9353a5-3847-3be4-9820-60c3d164c836.roa
File:                     9d9353a5-3847-3be4-9820-60c3d164c836.roa (raw, json)
Hash identifier:          rwqvpO4ePy0QH3AwM0qGZ3J0mo1n+dTKqddlcEGxkL4=
Subject key identifier:   96:D8:05:09:E7:68:54:7F:27:B9:6F:A3:84:26:BC:31:72:D0:12:97
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584878488BDEE2907CC45E0A2780
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9d9353a5-3847-3be4-9820-60c3d164c836.roa
Signing time:             Tue 07 Jan 2025 22:10:04 +0000
ROA not before:           Tue 07 Jan 2025 22:10:04 +0000
ROA not after:            Mon 07 Apr 2025 21:10:04 +0000
asID:                     2914
IP address blocks:        140.228.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:48:8b:de:e2:90:7c:c4:5e:0a:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jan  7 22:10:04 2025 GMT
            Not After : Apr  7 21:10:04 2025 GMT
        Subject: CN=5af9a6ac-4a2e-4249-bd61-d8c9b9129b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:e1:3d:4a:46:7c:82:2c:bd:a7:0b:99:23:
                    14:60:b7:e5:d9:6f:9f:50:4e:ba:7d:4c:bb:ba:6b:
                    7f:c6:51:eb:ae:ea:52:2e:34:74:2e:97:55:d4:3a:
                    a9:a1:30:84:2a:4a:25:67:ac:3e:15:47:72:ee:57:
                    59:a0:c7:45:b4:6c:c5:07:01:69:16:da:c3:3a:74:
                    07:fb:83:bc:03:99:f4:04:06:62:30:20:1b:5f:fe:
                    25:8a:59:53:eb:4d:73:94:fd:77:fd:e1:0a:00:59:
                    11:d7:43:3f:11:98:ad:ea:00:b7:cb:6b:62:fb:fa:
                    b7:24:0b:ea:b9:44:7f:e5:c0:09:48:c2:2d:f8:08:
                    9c:f4:9a:36:b1:73:73:ff:a3:67:cb:14:0d:f7:49:
                    16:5d:6f:50:1b:71:10:35:30:16:ed:25:c5:39:70:
                    80:69:23:8e:1f:d2:5a:eb:64:fd:fb:f1:f4:77:11:
                    4d:2c:46:db:0f:9b:c9:b4:a0:9d:59:fc:8e:f6:b0:
                    2d:15:2d:5f:09:f1:75:a2:8f:a2:8e:4a:b7:75:68:
                    fc:c6:61:03:d1:19:04:d9:77:97:41:da:b3:b8:6b:
                    dc:89:79:a4:b1:8d:d1:97:6c:11:37:e4:6e:ef:af:
                    9c:cd:3d:bf:24:a0:f1:cb:f2:e4:c0:10:68:04:19:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D8:05:09:E7:68:54:7F:27:B9:6F:A3:84:26:BC:31:72:D0:12:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9d9353a5-3847-3be4-9820-60c3d164c836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:65:c7:08:db:a6:aa:ca:6a:4a:68:26:8d:8a:ad:ee:1b:
         e8:29:1a:7c:cb:ce:2a:43:83:2e:9e:6a:71:e2:56:0e:a7:ea:
         22:44:c7:87:1e:3c:79:92:9a:1d:dc:35:b1:bf:96:ce:90:6e:
         5c:45:31:eb:42:ca:6b:a2:70:c2:f6:5c:c6:aa:2f:2f:6d:6b:
         db:83:16:3d:50:bb:bf:0b:9d:ea:15:c0:f2:61:f3:66:08:fa:
         24:e2:11:2a:8d:b5:c9:82:1d:87:a7:43:5d:24:c5:b4:47:5f:
         f2:06:b6:3f:cd:5e:dc:6c:bc:98:0f:05:38:01:8f:c3:ec:67:
         10:1a:18:7c:d3:38:51:2d:96:c1:7e:7d:a3:10:ed:d1:96:fc:
         7e:0c:e2:b7:2a:1c:7c:00:ed:c5:24:fc:e7:c5:fe:26:bf:85:
         66:60:4c:e5:4c:d0:ef:53:95:15:3d:7f:e0:79:f7:a9:89:d6:
         7a:ee:77:e3:bf:1b:3e:cf:8a:7d:fa:80:9e:80:6f:18:bc:eb:
         0d:50:7e:ab:80:46:fc:bb:e0:b6:84:13:1c:97:bd:5c:6c:5e:
         b9:11:90:91:2e:6a:b9:79:59:68:a0:ef:52:df:ea:f8:7d:b3:
         8d:77:0c:f0:bb:65:2e:c5:c3:c6:77:3b:92:84:44:9f:20:78:
         ea:4c:a7:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4SIve4pB8xF4KJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDEwNzIyMTAwNFoXDTI1MDQwNzIxMTAwNFowLzEtMCsGA1UEAxMk
NWFmOWE2YWMtNGEyZS00MjQ5LWJkNjEtZDhjOWI5MTI5YjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGfhPUpGfIIsvacLmSMUYLfl2W+fUE66fUy7
umt/xlHrrupSLjR0LpdV1DqpoTCEKkolZ6w+FUdy7ldZoMdFtGzFBwFpFtrDOnQH
+4O8A5n0BAZiMCAbX/4lillT601zlP13/eEKAFkR10M/EZit6gC3y2ti+/q3JAvq
uUR/5cAJSMIt+Aic9Jo2sXNz/6NnyxQN90kWXW9QG3EQNTAW7SXFOXCAaSOOH9Ja
62T9+/H0dxFNLEbbD5vJtKCdWfyO9rAtFS1fCfF1oo+ijkq3dWj8xmED0RkE2XeX
QdqzuGvciXmksY3Rl2wRN+Ru76+czT2/JKDxy/LkwBBoBBlEcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbYBQnnaFR/J7lvo4QmvDFy0BKXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvOWQ5MzUzYTUtMzg0Ny0z
YmU0LTk4MjAtNjBjM2QxNjRjODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGLAZccI26aqympKaCaNiq3uG+gpGnzLzipDgy6eanHiVg6n6iJEx4ce
PHmSmh3cNbG/ls6QblxFMetCymuicML2XMaqLy9ta9uDFj1Qu78LneoVwPJh82YI
+iTiESqNtcmCHYenQ10kxbRHX/IGtj/NXtxsvJgPBTgBj8PsZxAaGHzTOFEtlsF+
faMQ7dGW/H4M4rcqHHwA7cUk/OfF/ia/hWZgTOVM0O9TlRU9f+B596mJ1nrud+O/
Gz7Pin36gJ6Abxi86w1QfquARvy74LaEExyXvVxsXrkRkJEuarl5WWig71Lf6vh9
s413DPC7ZS7Fw8Z3O5KERJ8geOpMpws=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:33 2025 by rpki-client