Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa
File:                     6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa (raw, json)
Hash identifier:          xYHUpg/eXpmIHNz08XY0dCbVY8CfhU395nsk6DNntc8=
Subject key identifier:   B5:98:6C:C7:25:AA:D6:A9:08:6A:7C:6D:35:31:F1:12:9D:A2:96:34
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F43285849C0A4D7392CB2A1917F6A5600
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     4005
IP address blocks:        204.59.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d7:39:2c:b2:a1:91:7f:6a:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=5dd0c05c-867d-46e0-853a-2f0557afc515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:6b:e1:11:70:87:4f:62:1f:a0:41:f7:63:
                    98:97:75:ca:e7:ca:d7:0d:a5:0b:64:00:24:26:74:
                    28:6f:4e:fa:35:8e:07:a1:b3:c6:5d:f7:70:9c:a9:
                    d9:90:41:42:ab:b7:9c:f9:45:1f:c6:ec:34:4f:3b:
                    1a:c1:49:7a:e6:25:e4:de:6b:2c:66:e9:f5:94:6a:
                    06:f2:a9:c9:37:c1:5e:1a:43:f9:0e:85:e0:7b:17:
                    3e:a3:37:f4:76:80:60:8b:88:37:c9:bb:e3:9e:92:
                    50:2e:97:33:4a:cd:c4:0c:03:3d:2c:73:34:8c:b9:
                    34:ac:49:1a:19:ac:9f:8e:f1:36:c0:cf:e7:70:94:
                    a5:5a:62:a5:88:e7:55:80:bf:fb:fb:a4:89:96:46:
                    12:2b:75:27:66:35:f5:27:41:40:62:39:34:34:32:
                    9b:26:e0:c6:24:35:bc:b8:9a:cd:98:f7:d1:ee:05:
                    8a:11:bb:87:80:27:a1:65:17:86:ab:65:d3:ab:86:
                    46:3d:17:ff:99:5e:86:3e:4c:23:4b:a2:a5:4c:16:
                    70:53:6c:7f:fa:61:f3:f7:e8:06:62:5c:7d:4e:af:
                    d9:ef:1e:45:b3:8e:8e:fa:72:07:40:c2:b8:01:4b:
                    3c:ea:4d:7a:17:a6:36:02:ea:e0:6a:80:30:96:5c:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:6C:C7:25:AA:D6:A9:08:6A:7C:6D:35:31:F1:12:9D:A2:96:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.59.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:ac:3b:e0:21:c2:b8:8b:5f:bb:9f:75:c4:d3:ff:73:a4:d5:
         ac:ce:7e:96:99:78:f7:c6:85:d3:25:12:6b:4f:c9:c7:6f:38:
         c0:4a:d1:df:2c:16:a9:59:f5:bd:29:33:85:0b:76:99:0e:f6:
         0d:c5:c0:0c:91:e2:f4:41:a5:4a:4d:25:b4:0c:06:ac:f5:1f:
         6b:e1:78:08:49:fd:17:cd:ae:77:43:e1:4e:a7:fb:49:10:30:
         fe:cb:ec:06:cb:72:93:71:ad:ea:8e:e7:be:8a:e6:ce:2a:67:
         07:4b:5c:05:28:bf:68:7a:bc:e3:e1:40:62:77:59:f3:8c:2e:
         26:ef:33:82:79:e1:1a:2d:ae:a6:8e:11:85:c3:a0:74:31:37:
         84:92:a6:8a:f0:e6:54:04:c5:61:2f:7c:65:93:e0:41:c1:74:
         58:0f:a8:d5:b4:7b:93:37:8a:35:de:4d:39:36:be:ab:19:7a:
         99:b5:d5:c1:e5:87:67:3f:37:85:f3:fb:5f:9e:7c:29:45:c7:
         44:ef:e9:91:df:a6:d2:9e:5b:04:ce:c7:38:5e:6c:f5:f4:b2:
         de:68:be:7b:c7:53:bf:13:f4:5e:66:3d:41:37:ee:e1:c9:f1:
         56:ac:cb:57:ad:76:d7:74:fb:10:64:39:b0:30:a7:9e:ea:5e:
         9d:c1:4b:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApNc5LLKhkX9qVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
NWRkMGMwNWMtODY3ZC00NmUwLTg1M2EtMmYwNTU3YWZjNTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkhr4RFwh09iH6BB92OYl3XK58rXDaULZAAk
JnQob076NY4HobPGXfdwnKnZkEFCq7ec+UUfxuw0TzsawUl65iXk3mssZun1lGoG
8qnJN8FeGkP5DoXgexc+ozf0doBgi4g3ybvjnpJQLpczSs3EDAM9LHM0jLk0rEka
GayfjvE2wM/ncJSlWmKliOdVgL/7+6SJlkYSK3UnZjX1J0FAYjk0NDKbJuDGJDW8
uJrNmPfR7gWKEbuHgCehZReGq2XTq4ZGPRf/mV6GPkwjS6KlTBZwU2x/+mHz9+gG
Ylx9Tq/Z7x5Fs46O+nIHQMK4AUs86k16F6Y2AurgaoAwllz5ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWYbMclqtapCGp8bTUx8RKdopY0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNmY1NTg1YjQtOGNlZC0z
NDFjLWIzZTItZTY0YThjZmJjNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDsiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANysO+AhwriLX7ufdcTT/3Ok1azOfpaZePfGhdMlEmtPycdvOMBK0d8s
FqlZ9b0pM4ULdpkO9g3FwAyR4vRBpUpNJbQMBqz1H2vheAhJ/RfNrndD4U6n+0kQ
MP7L7AbLcpNxreqO576K5s4qZwdLXAUov2h6vOPhQGJ3WfOMLibvM4J54RotrqaO
EYXDoHQxN4SSporw5lQExWEvfGWT4EHBdFgPqNW0e5M3ijXeTTk2vqsZepm11cHl
h2c/N4Xz+1+efClFx0Tv6ZHfptKeWwTOxzhebPX0st5ovnvHU78T9F5mPUE37uHJ
8Vasy1etdtd0+xBkObAwp57qXp3BS9g=
-----END CERTIFICATE-----
Generated at Sun May 11 05:41:14 2025 by rpki-client