Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa
File:                     bd4733f9-619d-3341-8788-1eee40224373.roa (raw, json)
Hash identifier:          miLupxkiiy6+1vMiI2duWlm7Lo+nBJ6fUO/sAjFpy7k=
Subject key identifier:   1E:D3:05:5B:A5:A5:CB:17:45:EA:3A:32:DC:90:C1:78:97:F8:03:6C
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584961B99A79FA0D9246D030A380
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     11105
IP address blocks:        206.12.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9a:79:fa:0d:92:46:d0:30:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=041b9d76-9b66-4a54-9e40-25361ab0a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:0a:8e:1f:bc:2b:31:43:46:90:76:5c:21:
                    9a:47:53:16:94:d7:c4:8f:b3:85:d7:23:64:64:1a:
                    a0:b3:9a:e0:d2:8d:b4:06:45:b4:8c:e4:7a:29:e6:
                    f1:4b:9e:d4:0f:e2:d9:87:06:e8:46:2d:14:2a:dd:
                    8f:0c:93:19:ca:4e:d6:e5:23:80:4b:2b:b7:37:7e:
                    eb:96:67:bd:ad:e4:79:2e:5e:0c:6f:24:66:29:7f:
                    70:c1:35:24:9e:08:37:7f:40:16:98:53:de:e9:ea:
                    1e:d5:f5:ce:48:d9:a2:cd:81:ac:ff:b6:4d:4f:98:
                    00:7e:3e:c6:05:cd:99:da:f0:44:18:fd:b7:9c:00:
                    5d:5d:d0:bf:70:cb:93:10:f1:ef:4c:41:1d:30:88:
                    f9:51:5f:43:a5:44:19:09:91:ae:a6:a3:9d:cf:d8:
                    30:ff:45:7a:19:4b:b8:d0:27:83:bb:a0:ff:9f:82:
                    f9:da:3f:a6:2f:10:f1:c2:86:d3:e7:0e:64:3e:31:
                    a3:aa:0b:b5:83:b7:0c:c6:23:d8:ff:8f:d1:47:40:
                    ff:4d:8a:80:7c:75:9b:6e:d9:6c:99:56:3e:3f:30:
                    81:24:fa:3a:48:f3:b8:ee:ba:15:7e:ef:55:a0:46:
                    3f:7e:07:6c:49:e6:22:ee:6c:a4:9c:82:05:d7:6c:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D3:05:5B:A5:A5:CB:17:45:EA:3A:32:DC:90:C1:78:97:F8:03:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd4733f9-619d-3341-8788-1eee40224373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:12:1b:59:fe:64:e4:fc:fa:aa:fd:e9:50:87:39:31:cf:ea:
         9c:74:77:c2:23:c9:af:61:ca:29:e9:e9:c1:96:7c:2a:e0:bf:
         00:06:79:14:a1:43:ea:01:6e:a2:6f:24:09:ed:28:67:2b:09:
         be:8a:ad:77:4d:ac:e7:a8:84:8b:09:2d:63:b6:50:b0:6d:56:
         8d:ce:05:f5:c4:46:f2:fe:cd:63:b1:82:38:c3:aa:54:d8:9d:
         b1:df:86:fc:fc:27:c9:bd:7a:cf:45:61:67:ed:f0:8f:45:0e:
         77:17:0c:c5:8e:ff:bd:25:29:77:0c:03:e0:65:52:b8:de:20:
         b7:07:c6:12:59:a1:ec:4f:6e:11:97:fc:57:f4:6a:40:5b:c8:
         f0:60:84:7f:48:07:24:64:a8:50:9c:f4:10:1f:39:9b:b6:bf:
         c8:e9:fa:db:8f:d5:e0:23:69:03:42:95:59:d6:3b:63:6c:a7:
         39:fc:12:53:75:5e:a7:3a:14:50:74:fe:6f:6e:cf:24:56:8d:
         9d:3f:ca:c3:3e:4f:13:d7:c3:a3:05:c5:b4:04:ed:00:43:6b:
         8f:01:96:7d:bf:f1:54:20:04:c9:92:90:45:e9:99:6e:63:a2:
         53:2c:d0:97:d4:d6:c4:31:b8:c6:a5:b1:0d:cf:95:73:e3:68:
         b9:a3:e7:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZp5+g2SRtAwo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
MDQxYjlkNzYtOWI2Ni00YTU0LTllNDAtMjUzNjFhYjBhMTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbsKjh+8KzFDRpB2XCGaR1MWlNfEj7OF1yNk
ZBqgs5rg0o20BkW0jOR6KebxS57UD+LZhwboRi0UKt2PDJMZyk7W5SOASyu3N37r
lme9reR5Ll4MbyRmKX9wwTUkngg3f0AWmFPe6eoe1fXOSNmizYGs/7ZNT5gAfj7G
Bc2Z2vBEGP23nABdXdC/cMuTEPHvTEEdMIj5UV9DpUQZCZGupqOdz9gw/0V6GUu4
0CeDu6D/n4L52j+mLxDxwobT5w5kPjGjqgu1g7cMxiPY/4/RR0D/TYqAfHWbbtls
mVY+PzCBJPo6SPO47roVfu9VoEY/fgdsSeYi7myknIIF12z/ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7TBVulpcsXReo6MtyQwXiX+ANsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYmQ0NzMzZjktNjE5ZC0z
MzQxLTg3ODgtMWVlZTQwMjI0MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzgx4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYSG1n+ZOT8+qr96VCHOTHP6px0d8Ijya9hyinp6cGWfCrgvwAGeRSh
Q+oBbqJvJAntKGcrCb6KrXdNrOeohIsJLWO2ULBtVo3OBfXERvL+zWOxgjjDqlTY
nbHfhvz8J8m9es9FYWft8I9FDncXDMWO/70lKXcMA+BlUrjeILcHxhJZoexPbhGX
/Ff0akBbyPBghH9IByRkqFCc9BAfOZu2v8jp+tuP1eAjaQNClVnWO2Nspzn8ElN1
Xqc6FFB0/m9uzyRWjZ0/ysM+TxPXw6MFxbQE7QBDa48Bln2/8VQgBMmSkEXpmW5j
olMs0JfU1sQxuMalsQ3PlXPjaLmj52w=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:46 2025 by rpki-client