Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/598aa086-31b5-360b-bfdb-b608dcc5e3d4.roa
File:                     598aa086-31b5-360b-bfdb-b608dcc5e3d4.roa (raw, json)
Hash identifier:          NMxns0fIoc23nEOzoiQJJgd/gJ2eWWaNjoJn0z9lKO8=
Subject key identifier:   B6:0D:6E:C1:26:44:89:6B:7F:20:14:84:50:AD:59:5C:52:12:B3:AD
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584A18953F5952372732C8239700
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/598aa086-31b5-360b-bfdb-b608dcc5e3d4.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     11127
IP address blocks:        207.241.174.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:3f:59:52:37:27:32:c8:23:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=9a1ac6e2-29d8-4310-9fad-5a92c4b299c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:65:6e:88:c0:61:8b:de:21:f4:cf:15:07:ee:
                    c2:63:53:0c:ea:07:75:44:9d:0b:d7:de:88:4d:e2:
                    af:d2:94:90:44:c4:55:59:ec:77:66:38:96:c3:4d:
                    a8:f7:4e:94:d5:20:56:70:59:c4:36:e4:e4:76:f0:
                    fd:da:c3:d0:03:df:2a:92:24:5f:21:98:0e:93:09:
                    13:36:5b:cf:6f:09:f0:51:dd:bb:3a:54:d0:91:99:
                    f2:20:f4:8d:ee:86:9e:70:33:3c:25:14:af:cd:23:
                    67:c5:d8:19:6d:73:48:e7:61:31:d0:18:ad:4a:4a:
                    87:6a:8a:86:71:54:fb:a5:31:4b:7b:77:fe:e5:ea:
                    0c:b4:74:34:3c:c7:03:4a:86:07:e7:ae:c3:c4:b5:
                    22:70:34:d2:07:23:1e:f7:0f:47:9a:c2:fb:6a:1f:
                    6f:8e:87:f0:15:7b:5d:89:49:db:73:81:66:f0:4a:
                    42:3b:a8:e6:1a:d7:3a:5d:3a:8d:28:ae:e4:a6:c1:
                    09:6e:55:01:98:3f:78:c6:e4:5b:44:28:c2:29:dd:
                    c7:5b:b0:a9:d7:42:12:cf:62:27:88:bb:e2:d3:d7:
                    0e:a9:e9:f6:9e:f4:89:23:fc:86:30:5b:01:ce:de:
                    d9:3c:84:a7:13:33:e9:3e:5b:43:5b:e7:d9:24:1d:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:6E:C1:26:44:89:6B:7F:20:14:84:50:AD:59:5C:52:12:B3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/598aa086-31b5-360b-bfdb-b608dcc5e3d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ed:01:4c:a2:eb:0d:4e:11:6e:e9:26:03:fc:e3:07:f9:1b:
         9d:22:6c:8d:e2:67:f9:6c:ac:0e:0a:9e:c7:59:98:8a:ed:4c:
         83:3e:da:7c:e2:e4:c8:34:ae:e2:60:19:8e:ac:c4:9e:3e:65:
         be:94:30:9e:4a:29:23:55:91:1a:73:2b:6c:7a:20:43:d8:4d:
         2e:88:6b:19:4b:66:62:bf:3a:94:35:b4:17:79:d2:fe:1f:f8:
         19:02:7d:b3:c7:0f:82:b3:00:38:9c:6f:fe:ec:5a:d2:48:0d:
         28:92:20:4a:85:d1:65:12:cd:83:74:f0:59:a3:33:30:11:79:
         69:67:d6:74:84:8b:7a:d9:f6:40:88:aa:c3:22:5a:31:9a:45:
         32:c0:c8:4a:53:38:ed:fb:bb:85:e3:6f:fe:27:3f:08:48:1a:
         88:a6:86:c9:43:e8:b3:57:a8:b5:58:2e:cb:99:a0:07:9e:2e:
         f9:cc:ba:f9:97:64:82:cf:f8:97:02:59:b2:e7:77:6d:74:4f:
         72:c8:b8:56:1c:92:1f:4f:57:40:4c:09:74:b9:2c:17:81:ca:
         21:a6:f0:3c:5d:57:86:ca:30:4c:67:57:13:06:1b:87:25:f9:
         80:76:95:68:06:10:f0:af:b5:88:b5:75:f2:0e:c0:e9:8f:9d:
         a0:06:44:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlT9ZUjcnMsgjlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx
OGUzMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
OWExYWM2ZTItMjlkOC00MzEwLTlmYWQtNWE5MmM0YjI5OWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WVuiMBhi94h9M8VB+7CY1MM6gd1RJ0L196I
TeKv0pSQRMRVWex3ZjiWw02o906U1SBWcFnENuTkdvD92sPQA98qkiRfIZgOkwkT
NlvPbwnwUd27OlTQkZnyIPSN7oaecDM8JRSvzSNnxdgZbXNI52Ex0BitSkqHaoqG
cVT7pTFLe3f+5eoMtHQ0PMcDSoYH567DxLUicDTSByMe9w9HmsL7ah9vjofwFXtd
iUnbc4Fm8EpCO6jmGtc6XTqNKK7kpsEJblUBmD94xuRbRCjCKd3HW7Cp10ISz2In
iLvi09cOqen2nvSJI/yGMFsBzt7ZPISnEzPpPltDW+fZJB0sPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYNbsEmRIlrfyAUhFCtWVxSErOtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx
MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvNTk4YWEwODYtMzFiNS0z
NjBiLWJmZGItYjYwOGRjYzVlM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk
YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj
MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4
MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/GuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7tAUyi6w1OEW7pJgP84wf5G50ibI3iZ/lsrA4KnsdZmIrtTIM+2nzi
5Mg0ruJgGY6sxJ4+Zb6UMJ5KKSNVkRpzK2x6IEPYTS6IaxlLZmK/OpQ1tBd50v4f
+BkCfbPHD4KzADicb/7sWtJIDSiSIEqF0WUSzYN08FmjMzAReWln1nSEi3rZ9kCI
qsMiWjGaRTLAyEpTOO37u4Xjb/4nPwhIGoimhslD6LNXqLVYLsuZoAeeLvnMuvmX
ZILP+JcCWbLnd210T3LIuFYckh9PV0BMCXS5LBeByiGm8DxdV4bKMExnVxMGG4cl
+YB2lWgGEPCvtYi1dfIOwOmPnaAGRAw=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:27:45 2025 by rpki-client