Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/dac097e5-874f-3d7d-9e60-501c8b2c3f15.roa
File:                     dac097e5-874f-3d7d-9e60-501c8b2c3f15.roa (raw, json)
Hash identifier:          +suGxIFqcqxj1wRc7LyfqcspK+Y7ZCqlgKIqH+XgPY4=
Subject key identifier:   9C:5E:F8:FF:D9:9D:55:5D:A6:05:3F:1C:BB:4E:0D:32:2D:BE:34:CF
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F43285849BB0F6B1EB794FDB1CEC7E1C0
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/dac097e5-874f-3d7d-9e60-501c8b2c3f15.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     10996
IP address blocks:        69.17.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:6b:1e:b7:94:fd:b1:ce:c7:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=b8b6dd88-f3de-4201-963b-e37a3795e736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:3d:1b:03:e8:9f:57:97:a1:08:c3:7a:43:
                    f3:a6:2c:ac:f5:f1:19:ef:68:8c:a9:07:67:c2:cf:
                    fe:bd:c8:13:c8:72:42:a7:b3:26:09:56:aa:28:90:
                    ef:6f:8e:c3:14:f9:7c:2f:3f:e5:62:98:92:2e:12:
                    ef:02:c4:04:33:f4:33:00:2c:09:27:d7:2b:d1:a4:
                    e7:1e:be:58:9e:a1:9f:1c:c5:30:6d:7c:64:32:42:
                    03:0a:6d:75:a2:3e:a7:3a:7f:dd:25:ed:26:b0:ce:
                    c9:c3:cd:5f:cb:18:d0:1c:52:6f:72:97:13:5c:65:
                    03:bd:d3:95:85:31:3b:c9:de:44:af:0e:a6:43:6c:
                    3c:b0:7c:5d:50:16:68:9d:4e:ff:29:65:14:bc:a8:
                    a5:43:59:6e:eb:2e:ae:e9:dc:41:be:1a:7d:de:32:
                    cd:0f:d0:76:ea:15:10:39:df:ac:8e:a9:be:07:77:
                    57:ec:19:2c:37:5d:31:3b:bb:3f:3b:ba:e1:23:ef:
                    71:f8:09:6a:0f:98:33:75:0e:8d:65:66:80:91:b1:
                    a6:c1:d7:b3:f5:6c:46:41:25:24:29:1d:cf:bd:f1:
                    9d:0a:98:35:47:ca:01:be:e5:dd:c1:88:ca:24:c4:
                    f6:79:a3:5a:51:5c:e3:4b:3d:2e:8e:16:97:e4:b4:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:F8:FF:D9:9D:55:5D:A6:05:3F:1C:BB:4E:0D:32:2D:BE:34:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/dac097e5-874f-3d7d-9e60-501c8b2c3f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a4:ee:b9:c8:73:98:f3:e3:78:f6:6e:29:ba:0d:18:ca:78:
         e1:cf:46:52:01:9a:e1:0f:b5:16:96:40:08:08:68:d0:6e:ae:
         78:d4:d6:c9:28:a4:5b:00:df:6f:a1:40:a6:58:9c:b1:c7:82:
         0b:ef:5b:01:f8:8f:5c:12:96:a4:39:3e:b5:b6:e6:15:c4:8f:
         66:fb:99:bf:f5:1d:eb:ae:2b:8b:78:3c:fe:aa:71:6c:62:ca:
         d5:7a:62:54:6d:29:8d:6c:b5:22:d2:f8:b8:57:e6:68:9b:84:
         33:af:0d:51:cd:f8:fa:af:95:54:b5:90:18:c4:9b:9b:23:42:
         7b:34:ab:02:2e:72:f5:81:c9:97:97:dd:00:d5:3b:cc:c7:2e:
         ad:ea:e6:63:98:c4:e1:d9:c9:d7:63:47:c7:46:67:2c:4d:29:
         9f:97:d0:88:88:06:06:29:cf:15:34:8d:03:6a:82:35:2e:c6:
         e1:0e:89:b2:d1:ec:76:93:3d:fb:1c:24:4e:2d:e8:96:12:6b:
         74:b9:7b:e7:70:47:84:e6:9a:c0:b1:e9:f2:08:15:cb:82:38:
         fd:a2:b5:a4:1d:4f:fb:e9:36:6c:3d:af:f0:5f:1e:4f:2d:0a:
         1a:08:7c:ec:c6:dc:fd:d0:fd:bd:53:0d:8d:0b:98:76:60:04:
         43:03:b7:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D2set5T9sc7H4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy
YWQwMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk
YjhiNmRkODgtZjNkZS00MjAxLTk2M2ItZTM3YTM3OTVlNzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSU9GwPon1eXoQjDekPzpiys9fEZ72iMqQdn
ws/+vcgTyHJCp7MmCVaqKJDvb47DFPl8Lz/lYpiSLhLvAsQEM/QzACwJJ9cr0aTn
Hr5YnqGfHMUwbXxkMkIDCm11oj6nOn/dJe0msM7Jw81fyxjQHFJvcpcTXGUDvdOV
hTE7yd5Erw6mQ2w8sHxdUBZonU7/KWUUvKilQ1lu6y6u6dxBvhp93jLND9B26hUQ
Od+sjqm+B3dX7BksN10xO7s/O7rhI+9x+AlqD5gzdQ6NZWaAkbGmwdez9WxGQSUk
KR3PvfGdCpg1R8oBvuXdwYjKJMT2eaNaUVzjSz0ujhaX5LQKlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJxe+P/ZnVVdpgU/HLtODTItvjTPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi
Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvZGFjMDk3ZTUtODc0Zi0z
ZDdkLTllNjAtNTAxYzhiMmMzZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm
NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0
MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3
ZjAyNDJhZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRRHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6k7rnIc5jz43j2bim6DRjKeOHPRlIBmuEPtRaWQAgIaNBurnjU1sko
pFsA32+hQKZYnLHHggvvWwH4j1wSlqQ5PrW25hXEj2b7mb/1HeuuK4t4PP6qcWxi
ytV6YlRtKY1stSLS+LhX5mibhDOvDVHN+PqvlVS1kBjEm5sjQns0qwIucvWByZeX
3QDVO8zHLq3q5mOYxOHZyddjR8dGZyxNKZ+X0IiIBgYpzxU0jQNqgjUuxuEOibLR
7HaTPfscJE4t6JYSa3S5e+dwR4TmmsCx6fIIFcuCOP2itaQdT/vpNmw9r/BfHk8t
ChoIfOzG3P3Q/b1TDY0LmHZgBEMDt/I=
-----END CERTIFICATE-----
Generated at Tue May 6 15:00:25 2025 by rpki-client