Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/864d6ce7-b793-35b9-9667-c8ba0f0d4121.roa
File:                     864d6ce7-b793-35b9-9667-c8ba0f0d4121.roa (raw, json)
Hash identifier:          WKIYqericJPEvY+s+EntoRV7C9DnDptSOZyVLtfnJ/c=
Subject key identifier:   11:B2:8F:79:BF:2B:5C:5F:E3:86:04:A0:7E:92:13:CC:DC:1F:E5:41
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584965E97D4ACD2D3CDDB09B8EA0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/864d6ce7-b793-35b9-9667-c8ba0f0d4121.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     20001
IP address blocks:        150.224.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7d:4a:cd:2d:3c:dd:b0:9b:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=a51ccf5d-39e8-4ede-9674-f39567cfdd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:27:51:03:56:3e:40:29:e4:4e:70:41:05:cd:
                    65:bb:67:46:a6:28:e7:86:4c:ea:47:a1:3a:d5:f0:
                    bc:1a:af:d3:6b:53:a7:37:10:06:fd:65:05:94:56:
                    4f:94:40:08:0e:27:76:dd:9e:6c:7d:fa:17:76:04:
                    11:d2:d6:b6:79:eb:14:50:67:34:64:f8:b7:e6:6b:
                    42:6a:3a:20:8f:bb:75:50:43:2f:c8:9f:b5:09:84:
                    5e:85:55:56:c1:d4:34:93:7b:08:2a:24:90:f1:65:
                    f5:21:d3:e5:10:e4:1c:10:0d:a2:f1:22:c3:ac:26:
                    c1:af:29:ec:55:12:fa:f9:3b:f2:04:ad:77:8d:d1:
                    e0:0d:ac:8f:7c:8e:0b:bd:74:39:04:8f:7f:77:b5:
                    50:dc:a2:3d:e3:b7:91:fc:79:37:4a:1b:c8:77:66:
                    57:4d:44:1f:26:26:50:7c:93:d8:af:b8:f3:55:d0:
                    8e:65:f0:1d:93:38:25:93:da:0b:90:3e:c5:10:0e:
                    e6:1c:f0:b0:7f:7a:85:85:99:e0:40:10:3d:66:bf:
                    f8:ab:7c:35:af:ac:80:79:fc:fc:90:b0:17:38:88:
                    4e:59:03:8f:48:09:83:2e:26:36:f3:4b:1f:d3:5b:
                    14:56:bc:48:1d:54:da:5b:6f:c4:cd:92:cc:9e:ef:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:8F:79:BF:2B:5C:5F:E3:86:04:A0:7E:92:13:CC:DC:1F:E5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/864d6ce7-b793-35b9-9667-c8ba0f0d4121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.224.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:50:cc:89:80:01:f5:0b:fe:3b:d4:57:28:11:44:0e:c5:18:
         18:23:36:e3:ea:85:52:04:bd:de:71:02:33:99:1c:a1:35:15:
         dc:1d:7f:2a:42:6a:98:71:1e:72:8b:b0:56:8a:af:1d:23:90:
         ee:60:a6:88:47:77:df:ba:ad:66:5d:b6:c8:b4:89:2b:79:70:
         96:2c:e1:07:c5:84:96:01:39:54:14:f6:b7:87:19:47:bb:45:
         c7:e3:64:ec:bd:53:f6:69:2b:42:9e:33:86:7e:b8:20:c8:c1:
         95:c5:2c:a2:74:9d:27:92:54:1d:80:04:93:1a:37:6d:eb:e8:
         0d:7e:2b:84:05:71:1c:e6:f3:1a:d8:c6:71:56:bb:05:88:d1:
         2d:c1:b8:cb:87:37:8a:d8:ec:52:93:fa:de:51:8b:28:74:3e:
         55:c4:94:c8:ca:8f:00:d4:c2:63:14:d0:c3:a7:88:be:34:12:
         f1:c4:71:45:24:a7:73:92:31:a1:6a:2c:fc:35:06:fd:4b:41:
         3b:3a:44:8e:04:11:8e:d8:e5:2c:fa:c8:4c:94:16:3d:2e:24:
         65:30:b5:c3:fd:02:51:9c:26:5d:e7:b9:0a:cc:0c:ea:22:af:
         4e:6f:f3:90:ec:0e:62:38:89:44:4a:f2:d1:3e:af:6f:5a:79:
         d5:13:d1:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6X1KzS083bCbjqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk
YTUxY2NmNWQtMzllOC00ZWRlLTk2NzQtZjM5NTY3Y2ZkZDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiidRA1Y+QCnkTnBBBc1lu2dGpijnhkzqR6E6
1fC8Gq/Ta1OnNxAG/WUFlFZPlEAIDid23Z5sffoXdgQR0ta2eesUUGc0ZPi35mtC
ajogj7t1UEMvyJ+1CYRehVVWwdQ0k3sIKiSQ8WX1IdPlEOQcEA2i8SLDrCbBryns
VRL6+TvyBK13jdHgDayPfI4LvXQ5BI9/d7VQ3KI947eR/Hk3ShvId2ZXTUQfJiZQ
fJPYr7jzVdCOZfAdkzglk9oLkD7FEA7mHPCwf3qFhZngQBA9Zr/4q3w1r6yAefz8
kLAXOIhOWQOPSAmDLiY280sf01sUVrxIHVTaW2/EzZLMnu88mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGyj3m/K1xf44YEoH6SE8zcH+VBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODY0ZDZjZTctYjc5My0z
NWI5LTk2NjctYzhiYTBmMGQ0MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAluD4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFQzImAAfUL/jvUVygRRA7FGBgjNuPqhVIEvd5xAjOZHKE1FdwdfypC
aphxHnKLsFaKrx0jkO5gpohHd9+6rWZdtsi0iSt5cJYs4QfFhJYBOVQU9reHGUe7
RcfjZOy9U/ZpK0KeM4Z+uCDIwZXFLKJ0nSeSVB2ABJMaN23r6A1+K4QFcRzm8xrY
xnFWuwWI0S3BuMuHN4rY7FKT+t5Riyh0PlXElMjKjwDUwmMU0MOniL40EvHEcUUk
p3OSMaFqLPw1Bv1LQTs6RI4EEY7Y5Sz6yEyUFj0uJGUwtcP9AlGcJl3nuQrMDOoi
r05v85DsDmI4iURK8tE+r29aedUT0e8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:14:12 2025 by rpki-client