Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa
File:                     f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa (raw, json)
Hash identifier:          zjiaLUn9Wtl1uSy2z9OMy7KACVQNioCtrOXkXXgrE8o=
Subject key identifier:   72:5C:D0:1F:87:46:10:57:8A:2B:2F:37:20:97:DF:CC:B9:C9:D5:EE
Certificate issuer:       /CN=93749f69-84ba-4630-9f77-9e566d620da4
Certificate serial:       010D0C9F43285849E38A3BBA0AC83BC960A2B380
Authority key identifier: F8:5B:85:82:93:F7:BE:32:22:0A:86:6F:23:41:EC:2F:E9:7F:91:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa
Signing time:             Sun 18 May 2025 01:00:47 +0000
ROA not before:           Sun 18 May 2025 01:00:47 +0000
ROA not after:            Sat 16 Aug 2025 01:00:47 +0000
asID:                     36539
IP address blocks:        208.79.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/93749f69-84ba-4630-9f77-9e566d620da4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/93749f69-84ba-4630-9f77-9e566d620da4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e3:8a:3b:ba:0a:c8:3b:c9:60:a2:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93749f69-84ba-4630-9f77-9e566d620da4
        Validity
            Not Before: May 18 01:00:47 2025 GMT
            Not After : Aug 16 01:00:47 2025 GMT
        Subject: CN=4d814709-a0c3-4c53-9098-22635eee24d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:f6:f6:3a:48:5b:d9:ff:c0:90:eb:89:bd:
                    76:a4:0d:85:92:ca:dc:79:f0:40:c3:9f:68:e5:57:
                    6e:a7:6d:2b:89:5c:21:b9:0d:8e:33:f2:24:34:fb:
                    ee:f2:23:f7:aa:e2:83:0e:71:7e:0f:a7:dc:30:fa:
                    8d:34:fc:d9:3b:d7:0d:0b:2a:14:62:02:59:34:6f:
                    dd:61:15:e0:0c:af:18:f4:f9:5e:60:44:29:1b:08:
                    bf:bb:ef:e2:89:37:d9:63:8c:03:33:b6:17:e8:ce:
                    58:af:72:9e:8f:1c:55:33:79:81:50:61:b7:08:0a:
                    7f:79:55:89:37:69:79:57:db:5b:c0:bf:53:7d:f1:
                    5b:d2:1b:a6:bb:84:91:c7:cf:4f:65:51:38:77:ea:
                    9c:7a:e8:54:b0:78:58:af:11:51:08:2e:36:be:c1:
                    88:65:e9:3e:c2:82:ba:04:72:6a:3d:e5:9b:2d:6a:
                    8c:18:4a:39:5c:63:11:8d:e8:ee:81:7b:47:40:a5:
                    9a:2c:0e:21:a3:fc:c6:93:00:47:29:30:0f:c2:5d:
                    4f:86:15:34:31:c5:70:ba:21:0b:13:a0:8c:5f:4d:
                    8b:17:b9:1c:67:ee:07:e2:d8:a6:24:4e:e2:36:b6:
                    ba:a3:68:5a:94:4e:b8:d6:df:86:9e:de:91:b7:54:
                    62:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:D0:1F:87:46:10:57:8A:2B:2F:37:20:97:DF:CC:B9:C9:D5:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/93749f69-84ba-4630-9f77-9e566d620da4.crl

            X509v3 Authority Key Identifier:
                keyid:F8:5B:85:82:93:F7:BE:32:22:0A:86:6F:23:41:EC:2F:E9:7F:91:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:e5:fb:5c:bb:96:de:a2:57:fe:b3:48:b5:dc:63:83:1d:
         8a:3e:41:db:21:da:7f:da:e5:ac:1b:8a:89:88:40:f9:87:81:
         5e:6a:4c:00:e0:b2:e1:d1:a1:1e:93:02:29:ee:07:74:4c:7e:
         85:40:1a:2c:9f:2a:b7:96:a4:a7:b2:f2:28:bc:68:6c:55:a3:
         be:e9:86:93:fc:5a:6d:86:ac:c0:01:a5:bc:7d:cf:0c:c2:21:
         bc:93:f8:49:92:c3:41:d4:8f:5d:ae:a8:a5:66:55:88:33:3f:
         a5:18:51:7d:38:48:be:f4:32:74:29:29:e5:9f:2a:a7:1e:3b:
         05:a1:a3:e7:a4:58:0c:5f:7e:94:07:28:4d:e0:c7:e2:39:61:
         cc:88:1b:2e:76:34:cc:2c:c8:78:a7:2f:c6:d2:23:aa:bc:42:
         53:dc:aa:bd:0f:01:4c:28:d7:18:7d:b4:95:2e:da:47:4f:88:
         d0:b0:43:3d:fa:c5:44:dd:0a:78:74:a8:21:5f:e5:05:04:87:
         74:6e:fd:73:97:af:0a:cf:ab:e0:98:fb:1e:f3:64:7a:9b:e1:
         12:fe:a3:22:09:c8:76:3d:35:ec:ce:7e:7a:e6:a5:c0:fc:ed:
         e6:c7:6e:36:1c:92:49:c3:f1:b3:2c:6e:27:84:01:d8:a4:cf:
         22:47:cf:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnjiju6Csg7yWCis4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM3NDlmNjktODRiYS00NjMwLTlmNzctOWU1NjZkNjIw
ZGE0MB4XDTI1MDUxODAxMDA0N1oXDTI1MDgxNjAxMDA0N1owLzEtMCsGA1UEAxMk
NGQ4MTQ3MDktYTBjMy00YzUzLTkwOTgtMjI2MzVlZWUyNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti329jpIW9n/wJDrib12pA2FksrcefBAw59o
5Vdup20riVwhuQ2OM/IkNPvu8iP3quKDDnF+D6fcMPqNNPzZO9cNCyoUYgJZNG/d
YRXgDK8Y9PleYEQpGwi/u+/iiTfZY4wDM7YX6M5Yr3KejxxVM3mBUGG3CAp/eVWJ
N2l5V9tbwL9TffFb0humu4SRx89PZVE4d+qceuhUsHhYrxFRCC42vsGIZek+woK6
BHJqPeWbLWqMGEo5XGMRjejugXtHQKWaLA4ho/zGkwBHKTAPwl1PhhU0McVwuiEL
E6CMX02LF7kcZ+4H4timJE7iNra6o2halE641t+Gnt6Rt1RinQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHJc0B+HRhBXiisvNyCX38y5ydXuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzc0
OWY2OS04NGJhLTQ2MzAtOWY3Ny05ZTU2NmQ2MjBkYTQvZjRjNzIwZjQtZWMyMS0z
YmJmLTlkZTctM2M0NDE2NGFlOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3NDlmNjktODRiYS00NjMwLTlm
NzctOWU1NjZkNjIwZGE0LzkzNzQ5ZjY5LTg0YmEtNDYzMC05Zjc3LTllNTY2ZDYy
MGRhNC5jcmwwHwYDVR0jBBgwFoAU+FuFgpP3vjIiCoZvI0HsL+l/keYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85Mzc0OWY2OS04NGJhLTQ2MzAtOWY3Ny05ZTU2
NmQ2MjBkYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E98MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2h5ftcu5beolf+s0i13GODHYo+Qdsh2n/a5awbiomIQPmHgV5qTADg
suHRoR6TAinuB3RMfoVAGiyfKreWpKey8ii8aGxVo77phpP8Wm2GrMABpbx9zwzC
IbyT+EmSw0HUj12uqKVmVYgzP6UYUX04SL70MnQpKeWfKqceOwWho+ekWAxffpQH
KE3gx+I5YcyIGy52NMwsyHinL8bSI6q8QlPcqr0PAUwo1xh9tJUu2kdPiNCwQz36
xUTdCnh0qCFf5QUEh3Ru/XOXrwrPq+CY+x7zZHqb4RL+oyIJyHY9NezOfnrmpcD8
7ebHbjYckknD8bMsbieEAdikzyJHz2A=
-----END CERTIFICATE-----
Generated at Thu Jul 3 16:38:24 2025 by rpki-client