Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File:                     826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier:          2TA69Tc826e0THVWurOWZhFlZK41cd+VL7OB/qUvg/Y=
Subject key identifier:   70:AC:58:89:D3:E8:48:01:7A:65:44:4B:AD:55:5B:3E:94:DA:CC:07
Certificate issuer:       /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial:       010D0C9F43285849C0A4EB0065C501D556604900
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     33099
IP address blocks:        207.167.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:eb:00:65:c5:01:d5:56:60:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=136d0b00-69c2-4419-a6d8-a4c14ca45f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:5a:74:a0:91:35:77:9d:a0:68:29:5e:11:
                    c7:db:f1:86:cd:17:7a:4a:bf:94:29:b0:c9:3e:6e:
                    c7:7e:56:97:fb:2a:83:65:49:bd:8b:41:16:f9:df:
                    4b:25:80:ea:51:fd:11:6e:1e:a4:b9:40:f7:50:90:
                    00:08:4a:d3:b4:8e:44:85:a9:29:bb:18:c1:a3:25:
                    61:a6:09:39:76:ff:56:26:2a:71:73:8a:e5:ce:e7:
                    49:17:5c:a0:cb:70:16:a7:d2:0c:62:22:09:b8:a1:
                    3b:8e:a3:9b:07:12:57:20:aa:1e:0e:e3:3d:5b:d2:
                    7d:a7:2c:01:44:22:c8:8b:68:d9:4c:cb:0f:3e:74:
                    e0:a3:61:8d:ba:8b:5e:7e:6e:21:1c:30:9b:09:23:
                    3f:d6:5b:b9:71:c0:6c:c7:d4:7c:aa:44:31:be:90:
                    6a:1b:00:82:d9:04:0f:d3:30:ea:9c:6d:11:24:10:
                    25:fc:6b:83:9b:b9:d5:f6:ec:37:4b:ed:d5:aa:3c:
                    ae:fd:73:27:16:82:87:b3:53:07:48:2f:98:06:28:
                    6b:cb:4d:f4:19:4d:2a:68:2c:7e:71:ab:62:8d:51:
                    89:52:c1:8b:83:90:26:47:ff:45:25:f9:2d:f5:cd:
                    aa:f9:90:23:9f:d9:7b:41:cc:de:8b:56:6f:f5:5b:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AC:58:89:D3:E8:48:01:7A:65:44:4B:AD:55:5B:3E:94:DA:CC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl

            X509v3 Authority Key Identifier:
                keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7f:36:d1:03:b7:5b:04:45:1d:6f:ea:c5:fd:60:30:cb:23:
         e5:59:c8:8e:b7:d3:87:a9:d3:b2:e7:66:e7:9e:37:94:ab:9b:
         b4:89:ef:48:47:bc:b8:bc:8f:65:7a:bd:85:86:7f:a6:b0:8b:
         1f:dd:cb:03:f0:8d:ed:7a:a8:43:65:05:8a:72:23:c6:78:c5:
         15:de:8d:42:30:68:a3:f0:28:37:b5:72:b3:b1:c9:18:eb:fe:
         63:0c:13:7a:a3:55:f5:b2:99:90:05:c2:7a:32:20:77:b7:55:
         e5:13:4a:92:3c:49:50:25:26:c5:c2:e1:45:9d:f9:d4:f9:3f:
         5f:6f:1f:11:f7:43:b0:7f:5f:b8:4a:ec:88:ee:51:e5:6c:16:
         e9:53:06:99:50:fe:5d:2b:5f:06:14:78:02:2d:3c:d5:5b:6d:
         eb:ce:dc:7c:8c:08:52:e5:3a:7f:f0:28:b4:04:ae:3c:5f:e5:
         47:9e:73:22:ef:c1:40:8a:f1:04:ed:6c:32:4b:16:bc:b1:51:
         2b:b8:fa:f8:23:29:97:59:9e:56:e5:ec:86:93:46:99:43:b7:
         1b:ba:98:a5:d9:af:97:b1:f3:2e:08:0c:8b:6c:52:bb:d5:74:
         c9:ff:9e:a4:2c:28:ea:43:6c:ee:18:be:4e:ff:44:99:cd:70:
         8b:27:3a:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOsAZcUB1VZgSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGE4MWU5MjQtN2UxOC00MzEyLTk1ZmQtMDlkNmQwYjA4
YmNlMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
MTM2ZDBiMDAtNjljMi00NDE5LWE2ZDgtYTRjMTRjYTQ1ZjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2tadKCRNXedoGgpXhHH2/GGzRd6Sr+UKbDJ
Pm7HflaX+yqDZUm9i0EW+d9LJYDqUf0Rbh6kuUD3UJAACErTtI5EhakpuxjBoyVh
pgk5dv9WJipxc4rlzudJF1ygy3AWp9IMYiIJuKE7jqObBxJXIKoeDuM9W9J9pywB
RCLIi2jZTMsPPnTgo2GNuotefm4hHDCbCSM/1lu5ccBsx9R8qkQxvpBqGwCC2QQP
0zDqnG0RJBAl/GuDm7nV9uw3S+3Vqjyu/XMnFoKHs1MHSC+YBihry030GU0qaCx+
catijVGJUsGLg5AmR/9FJfkt9c2q+ZAjn9l7Qczei1Zv9VupTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCsWInT6EgBemVES61VWz6U2swHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YTgx
ZTkyNC03ZTE4LTQzMTItOTVmZC0wOWQ2ZDBiMDhiY2UvODI2YWIzMDMtNWYzMC0z
NDJkLTkxYWUtZDIwMzkzZjgxZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGE4MWU5MjQtN2UxOC00MzEyLTk1
ZmQtMDlkNmQwYjA4YmNlLzRhODFlOTI0LTdlMTgtNDMxMi05NWZkLTA5ZDZkMGIw
OGJjZS5jcmwwHwYDVR0jBBgwFoAUM5cdkreQKkWZkVjW1vkM+qV2RlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YTgxZTkyNC03ZTE4LTQzMTItOTVmZC0wOWQ2
ZDBiMDhiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6dsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACl/NtEDt1sERR1v6sX9YDDLI+VZyI6304ep07LnZueeN5Srm7SJ70hH
vLi8j2V6vYWGf6awix/dywPwje16qENlBYpyI8Z4xRXejUIwaKPwKDe1crOxyRjr
/mMME3qjVfWymZAFwnoyIHe3VeUTSpI8SVAlJsXC4UWd+dT5P19vHxH3Q7B/X7hK
7IjuUeVsFulTBplQ/l0rXwYUeAItPNVbbevO3HyMCFLlOn/wKLQErjxf5UeecyLv
wUCK8QTtbDJLFryxUSu4+vgjKZdZnlbl7IaTRplDtxu6mKXZr5ex8y4IDItsUrvV
dMn/nqQsKOpDbO4Yvk7/RJnNcIsnOmI=
-----END CERTIFICATE-----
Generated at Wed May 7 11:53:47 2025 by rpki-client