Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1bb9b-ad50-3e98-b5f3-29d601791d23.roa
File:                     68d1bb9b-ad50-3e98-b5f3-29d601791d23.roa (raw, json)
Hash identifier:          GlfwEBYDPEeIdeXOlK+nzwrgqTgRKSi/2suDTqqI/a8=
Subject key identifier:   C8:02:0F:A7:ED:BB:4F:C9:D7:60:20:5B:75:28:00:F1:14:37:97:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D594F977E6C6F2CB7510CA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1bb9b-ad50-3e98-b5f3-29d601791d23.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     36183
IP address blocks:        172.224.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:f9:77:e6:c6:f2:cb:75:10:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=f244485e-ef71-45cc-8052-f414f3942104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:52:51:6d:35:32:3c:97:62:59:bf:20:83:
                    0b:8a:8c:d1:0a:20:9a:89:70:ce:86:00:d7:68:16:
                    b8:17:1f:b0:99:61:27:87:50:65:d5:da:bc:4b:c8:
                    6d:20:44:c1:d3:53:fa:49:ca:83:f5:40:c4:32:97:
                    ee:3c:95:c8:07:99:23:6a:0b:e4:fc:b2:e2:8c:46:
                    78:17:c1:52:ab:b1:40:3c:d9:31:6c:3f:aa:c6:3a:
                    98:f7:8e:1e:e6:3e:5b:1a:9a:35:05:c9:65:de:42:
                    81:4d:14:33:be:e6:36:92:f7:26:13:16:ac:53:53:
                    6b:53:92:f5:19:df:db:d9:61:ad:ef:ef:fd:5e:35:
                    fa:44:c9:80:06:1c:0f:b8:06:d5:e8:2f:c4:d1:fb:
                    3d:e0:08:14:37:d5:03:91:62:2a:a8:87:d0:16:4b:
                    a6:82:3e:bd:d0:00:e2:18:74:2c:bd:b9:a6:b3:73:
                    ca:c3:e3:ff:ac:c9:7d:e6:fc:c0:3e:63:80:11:65:
                    0d:95:85:f9:9a:e3:e0:a5:0d:59:fb:6b:3a:f5:ff:
                    d9:ba:c0:21:b3:d6:e5:74:81:d2:ed:49:21:fc:d0:
                    54:93:71:d7:a6:31:5f:33:5b:32:b1:a8:37:f8:e5:
                    ef:2b:70:09:ad:7d:34:d6:c0:d5:7e:55:fe:98:ac:
                    b0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:02:0F:A7:ED:BB:4F:C9:D7:60:20:5B:75:28:00:F1:14:37:97:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d1bb9b-ad50-3e98-b5f3-29d601791d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:27:4c:c8:4a:cb:1c:f3:f5:52:20:6f:58:f7:f8:a6:5a:cf:
         6a:b8:8c:1e:30:17:19:80:d6:ca:5f:d0:dc:ec:75:d7:fd:6c:
         61:83:50:64:65:44:67:e3:23:fc:26:90:3a:23:a5:7a:4c:de:
         5b:ea:86:a4:17:2a:ea:50:8c:c0:a2:6d:17:a2:c0:36:80:b4:
         af:d2:bc:b8:2d:3f:b5:ba:49:13:ed:8e:d7:b0:22:1e:55:f2:
         5c:e2:cd:ec:71:5e:ec:85:40:a4:17:fa:0b:3a:ab:4a:6d:aa:
         cf:81:3f:c9:d0:6b:71:19:4d:88:9b:b8:9a:91:d7:cc:8b:86:
         ca:20:4c:fe:cb:f0:ca:31:3a:a0:11:eb:76:08:a1:85:be:99:
         99:65:48:44:c4:2a:99:41:58:14:fa:29:0c:d8:58:0b:0a:69:
         68:9f:8b:15:2c:6b:cb:1c:ef:e5:4c:7c:5e:45:e1:ac:55:9e:
         23:10:66:c2:a5:be:8b:50:af:65:c1:57:ff:8d:33:bf:6e:fc:
         23:65:c4:a6:3b:78:28:1f:03:9c:ef:41:10:2f:5c:95:f4:e0:
         da:86:94:39:64:02:ac:1d:21:a6:a9:d9:02:74:16:d2:35:9d:
         8c:37:b2:51:d4:f0:7e:66:48:e9:90:04:23:96:7b:41:84:26:
         c4:cc:cb:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPl35sbyy3UQygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZjI0NDQ4NWUtZWY3MS00NWNjLTgwNTItZjQxNGYzOTQyMTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5lSUW01MjyXYlm/IIMLiozRCiCaiXDOhgDX
aBa4Fx+wmWEnh1Bl1dq8S8htIETB01P6ScqD9UDEMpfuPJXIB5kjagvk/LLijEZ4
F8FSq7FAPNkxbD+qxjqY944e5j5bGpo1Bcll3kKBTRQzvuY2kvcmExasU1NrU5L1
Gd/b2WGt7+/9XjX6RMmABhwPuAbV6C/E0fs94AgUN9UDkWIqqIfQFkumgj690ADi
GHQsvbmms3PKw+P/rMl95vzAPmOAEWUNlYX5muPgpQ1Z+2s69f/ZusAhs9bldIHS
7Ukh/NBUk3HXpjFfM1sysag3+OXvK3AJrX001sDVflX+mKywdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMgCD6ftu0/J12AgW3UoAPEUN5fZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjhkMWJiOWItYWQ1MC0z
ZTk4LWI1ZjMtMjlkNjAxNzkxZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEknTMhKyxzz9VIgb1j3+KZaz2q4jB4wFxmA1spf0Nzsddf9bGGDUGRl
RGfjI/wmkDojpXpM3lvqhqQXKupQjMCibReiwDaAtK/SvLgtP7W6SRPtjtewIh5V
8lzizexxXuyFQKQX+gs6q0ptqs+BP8nQa3EZTYibuJqR18yLhsogTP7L8MoxOqAR
63YIoYW+mZllSETEKplBWBT6KQzYWAsKaWifixUsa8sc7+VMfF5F4axVniMQZsKl
votQr2XBV/+NM79u/CNlxKY7eCgfA5zvQRAvXJX04NqGlDlkAqwdIaap2QJ0FtI1
nYw3slHU8H5mSOmQBCOWe0GEJsTMy1o=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:10 2025 by rpki-client