Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa
File:                     0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa (raw, json)
Hash identifier:          7TGlRKtEBiY09Lkud5DZEyWaYeQUVxLisJPmgOiMQM0=
Subject key identifier:   27:B9:F7:F2:99:82:F2:75:E2:33:68:FF:63:40:39:78:63:96:87:22
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F43285849350EB014E48316329DE29880
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        173.241.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:b0:14:e4:83:16:32:9d:e2:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=500d0edf-3032-4e4f-b747-2b23c907f3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:0f:9b:a4:cd:a2:05:4c:5e:9f:e9:cb:42:
                    72:f3:f3:da:6e:7c:cd:c8:8e:d3:83:20:88:86:36:
                    d7:6e:63:cd:ff:f8:34:a2:5a:3d:b3:d3:34:2e:a6:
                    de:82:3f:8a:ba:8a:5b:ae:77:68:dd:22:72:f5:80:
                    fe:62:9c:7f:c1:ce:7d:16:21:eb:40:46:96:bb:d5:
                    ce:f8:ce:6e:5b:bd:84:99:01:8f:0a:1b:79:1a:29:
                    15:5a:aa:a5:84:3e:1e:c8:ea:58:10:50:22:6f:ff:
                    b8:26:54:34:37:32:b4:80:1e:71:73:cb:30:dd:b2:
                    3b:fd:fd:ae:99:f0:81:4e:8b:b5:fd:92:45:48:ae:
                    e0:6b:ce:ad:48:4e:a0:39:69:7f:da:0a:04:95:05:
                    08:bb:fe:f7:b7:f8:0a:80:af:13:7d:95:1f:3f:f8:
                    ad:1c:39:64:2f:9d:53:72:a8:98:c4:de:36:52:15:
                    71:14:39:fb:7b:77:1e:8a:c1:b1:31:02:ca:ca:c2:
                    86:4e:83:98:c9:b5:2c:c6:7f:d8:4c:49:c9:61:15:
                    e8:6d:5d:0a:b4:1f:8d:19:00:3d:49:11:ce:10:94:
                    bc:69:dd:06:76:8d:79:ec:65:80:69:08:bb:34:47:
                    23:51:b2:42:55:97:ce:a7:51:36:99:a2:10:63:08:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:F7:F2:99:82:F2:75:E2:33:68:FF:63:40:39:78:63:96:87:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/0fed81d4-a0d2-3f8c-86d1-9f6c467fcf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:70:3e:79:9c:bc:4f:41:6a:61:24:c0:65:61:bd:e7:bf:
         99:12:2f:7b:67:26:46:fc:69:d4:4b:48:52:7a:c1:ab:4f:fb:
         ca:2c:68:22:59:5d:ea:5f:c7:bd:98:87:57:cb:3f:9f:9b:4d:
         0d:04:0c:4c:11:f9:66:c9:2e:97:03:58:63:b5:20:81:0d:9b:
         aa:05:bc:07:d2:cd:a2:9a:99:7e:ac:92:06:69:80:39:58:02:
         35:6c:f5:8a:62:06:62:40:59:1f:5d:e8:08:0b:0f:33:5c:7d:
         de:e0:09:c1:3a:11:c0:f0:5e:b5:29:58:51:e8:31:ba:54:3e:
         94:c7:ca:c7:46:57:8a:9f:44:ce:bd:5e:c2:9c:78:2c:2a:a0:
         27:f1:d2:06:3e:3e:aa:3c:f5:cd:03:47:12:3d:09:78:8f:41:
         75:af:3b:d6:38:9a:0b:c8:9a:21:a8:bd:d3:35:3d:fe:56:50:
         06:cc:7f:f4:be:ab:a0:0e:13:03:88:51:08:a6:58:93:d3:e2:
         38:47:fa:fc:ac:ac:fa:e0:23:94:73:7c:ff:ec:63:ac:92:92:
         b4:7b:4b:0c:0e:2d:98:e9:c2:a8:24:4b:6e:0c:f7:a5:b7:e7:
         7c:e8:af:a0:5a:15:17:8a:f5:7d:f7:38:ff:9e:38:69:dc:e7:
         2a:84:65:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DrAU5IMWMp3imIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBkNTRmMGQtODE1MS00NTAwLTgwYjUtMDA4MTY1Yjc3
NTU1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
NTAwZDBlZGYtMzAzMi00ZTRmLWI3NDctMmIyM2M5MDdmM2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxoPm6TNogVMXp/py0Jy8/PabnzNyI7TgyCI
hjbXbmPN//g0olo9s9M0Lqbegj+Kuopbrndo3SJy9YD+Ypx/wc59FiHrQEaWu9XO
+M5uW72EmQGPCht5GikVWqqlhD4eyOpYEFAib/+4JlQ0NzK0gB5xc8sw3bI7/f2u
mfCBTou1/ZJFSK7ga86tSE6gOWl/2goElQUIu/73t/gKgK8TfZUfP/itHDlkL51T
cqiYxN42UhVxFDn7e3ceisGxMQLKysKGToOYybUsxn/YTEnJYRXobV0KtB+NGQA9
SRHOEJS8ad0Gdo157GWAaQi7NEcjUbJCVZfOp1E2maIQYwjBbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCe59/KZgvJ14jNo/2NAOXhjlociMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMGQ1
NGYwZC04MTUxLTQ1MDAtODBiNS0wMDgxNjViNzc1NTUvMGZlZDgxZDQtYTBkMi0z
ZjhjLTg2ZDEtOWY2YzQ2N2ZjZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTBkNTRmMGQtODE1MS00NTAwLTgw
YjUtMDA4MTY1Yjc3NTU1L2UwZDU0ZjBkLTgxNTEtNDUwMC04MGI1LTAwODE2NWI3
NzU1NS5jcmwwHwYDVR0jBBgwFoAUa7m912tofp5cuk1nda1orFOXENswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lMGQ1NGYwZC04MTUxLTQ1MDAtODBiNS0wMDgx
NjViNzc1NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfEmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoGcD55nLxPQWphJMBlYb3nv5kSL3tnJkb8adRLSFJ6watP+8osaCJZ
Xepfx72Yh1fLP5+bTQ0EDEwR+WbJLpcDWGO1IIENm6oFvAfSzaKamX6skgZpgDlY
AjVs9YpiBmJAWR9d6AgLDzNcfd7gCcE6EcDwXrUpWFHoMbpUPpTHysdGV4qfRM69
XsKceCwqoCfx0gY+Pqo89c0DRxI9CXiPQXWvO9Y4mgvImiGovdM1Pf5WUAbMf/S+
q6AOEwOIUQimWJPT4jhH+vysrPrgI5RzfP/sY6ySkrR7SwwOLZjpwqgkS24M96W3
53zor6BaFReK9X33OP+eOGnc5yqEZdo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:05 2025 by rpki-client