Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa
File:                     67f904de-0911-32b9-bf9c-27f543b6f323.roa (raw, json)
Hash identifier:          KQpArtUQoibX2Uol9LdgPbT1xE6JArGNdM8qBmYd6Ds=
Subject key identifier:   C0:94:2E:F1:29:4C:70:87:9C:49:0C:DA:36:0D:79:FC:5E:04:2F:CD
Certificate issuer:       /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial:       010D0C9F4328584A41104BBB0F80B76466A63E80
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     54113
IP address blocks:        162.247.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:4b:bb:0f:80:b7:64:66:a6:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=a908615d-6d23-43b0-92b6-4b2886e8376f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:88:d2:d0:0e:cc:98:93:52:7c:98:c6:e3:9b:
                    b4:b7:6f:8b:a3:d5:34:3b:c2:bc:b0:3f:71:51:12:
                    95:53:d5:dc:d4:1e:33:fb:9a:e8:35:1a:8a:7e:83:
                    f4:81:83:0b:f1:a0:e4:45:49:5a:83:ba:6c:38:a8:
                    cf:59:61:d7:46:b4:2f:61:a0:2b:69:2f:e0:39:74:
                    4c:c0:ee:1f:76:9f:cf:5d:13:2e:c3:7f:ea:27:2b:
                    dc:8a:cd:a1:fe:c3:d7:c1:28:9f:8c:4f:1d:65:59:
                    35:ff:e1:14:8f:1a:cf:09:af:b8:6a:08:1d:34:4d:
                    1b:45:34:7f:45:9c:20:4d:2d:41:b3:bf:39:44:da:
                    1e:58:fd:70:33:0a:b9:1a:47:57:1a:83:07:36:d3:
                    0d:f8:a7:05:81:4c:ab:3c:1a:eb:ae:59:60:17:08:
                    ff:2c:fc:03:46:b7:92:48:8b:4e:9a:c3:e0:1c:0a:
                    bf:62:c7:bb:e8:31:f0:b4:d4:c3:5e:a4:a1:3e:9f:
                    d3:e4:7d:9d:b3:55:60:de:e8:2b:0c:de:f0:fa:3f:
                    ab:3d:b0:87:25:7e:1e:26:e4:36:4b:fa:1c:32:4f:
                    25:48:05:76:b3:7b:99:be:0b:6d:de:64:81:7a:8e:
                    91:a2:82:a9:be:3f:11:dd:c8:12:1d:d3:6a:f0:5c:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:94:2E:F1:29:4C:70:87:9C:49:0C:DA:36:0D:79:FC:5E:04:2F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl

            X509v3 Authority Key Identifier:
                keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:24:94:64:54:3e:fb:2a:74:76:47:71:d2:a5:fe:f0:6c:
         5e:c3:03:5f:d5:2e:d6:9a:ef:8a:86:b6:f9:e9:92:f8:28:dd:
         a7:09:6e:06:c7:e5:71:d2:e1:00:15:24:27:6a:c1:49:1e:a2:
         44:2e:5f:0f:3e:5c:a4:bf:03:9c:e6:f9:00:22:d6:4d:03:c8:
         dd:d3:08:f8:d1:7a:ab:73:ea:ab:ee:e6:53:8b:42:5a:df:30:
         4a:d9:69:2a:a1:a2:54:dd:a1:f2:4b:4a:ae:90:c6:92:65:60:
         e5:46:0f:91:be:1c:60:b5:21:62:d3:61:a0:89:1d:34:c6:61:
         58:81:d6:e6:ed:d7:d4:b8:d6:f7:57:66:ec:33:e8:b5:11:7e:
         b8:12:11:d0:17:b1:ac:33:cc:06:ee:59:8a:42:5d:7a:f2:0d:
         af:c1:8e:db:4f:76:e5:46:bd:0f:5f:23:53:bb:ff:5c:70:26:
         47:c3:14:d5:54:19:8b:c3:b3:2f:bf:83:75:1d:c2:e3:dd:6e:
         f3:e7:59:cb:50:67:63:97:c9:9d:af:d4:1f:cb:07:cb:7c:cd:
         1e:e2:e4:82:e1:87:d1:20:cd:f5:c0:00:b6:ec:39:a7:c3:01:
         43:2a:7f:fe:a2:89:fb:03:f5:d0:7b:e2:99:9e:d3:2a:6d:0f:
         01:77:89:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEEu7D4C3ZGamPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2
ZjIyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
YTkwODYxNWQtNmQyMy00M2IwLTkyYjYtNGIyODg2ZTgzNzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ojS0A7MmJNSfJjG45u0t2+Lo9U0O8K8sD9x
URKVU9Xc1B4z+5roNRqKfoP0gYML8aDkRUlag7psOKjPWWHXRrQvYaAraS/gOXRM
wO4fdp/PXRMuw3/qJyvcis2h/sPXwSifjE8dZVk1/+EUjxrPCa+4aggdNE0bRTR/
RZwgTS1Bs785RNoeWP1wMwq5GkdXGoMHNtMN+KcFgUyrPBrrrllgFwj/LPwDRreS
SItOmsPgHAq/Yse76DHwtNTDXqShPp/T5H2ds1Vg3ugrDN7w+j+rPbCHJX4eJuQ2
S/ocMk8lSAV2s3uZvgtt3mSBeo6RooKpvj8R3cgSHdNq8Fyf/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCULvEpTHCHnEkM2jYNefxeBC/NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx
NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNjdmOTA0ZGUtMDkxMS0z
MmI5LWJmOWMtMjdmNTQzYjZmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk
YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi
NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl
NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1wJJRkVD77KnR2R3HSpf7wbF7DA1/VLtaa74qGtvnpkvgo3acJbgbH
5XHS4QAVJCdqwUkeokQuXw8+XKS/A5zm+QAi1k0DyN3TCPjReqtz6qvu5lOLQlrf
MErZaSqholTdofJLSq6QxpJlYOVGD5G+HGC1IWLTYaCJHTTGYViB1ubt19S41vdX
Zuwz6LURfrgSEdAXsawzzAbuWYpCXXryDa/BjttPduVGvQ9fI1O7/1xwJkfDFNVU
GYvDsy+/g3UdwuPdbvPnWctQZ2OXyZ2v1B/LB8t8zR7i5ILhh9EgzfXAALbsOafD
AUMqf/6iifsD9dB74pme0yptDwF3iYM=
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:35:43 2025 by rpki-client