Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3aa2c8ff-54be-37bc-8e87-9080c3af699d.roa
File:                     3aa2c8ff-54be-37bc-8e87-9080c3af699d.roa (raw, json)
Hash identifier:          jD/JifO1PK7YugbkXKPqXBu+pS0YAytKmr6NnTBjRa0=
Subject key identifier:   7B:B6:6F:1B:C6:AE:CA:9A:B7:40:84:8B:AB:EB:6F:C3:19:9A:4A:A7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20ADFC8276D50C73E00AAB0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3aa2c8ff-54be-37bc-8e87-9080c3af699d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16787
IP address blocks:        24.30.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:df:c8:27:6d:50:c7:3e:00:aa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=758198c1-3969-4212-a680-2e1df40fa837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:79:5b:0f:05:48:67:25:47:55:62:81:5b:
                    22:47:13:94:8c:8e:d0:a9:20:90:d6:97:85:4c:f1:
                    5c:f4:ee:3d:dc:9e:fc:ca:2f:a7:6e:48:bb:c3:e0:
                    e1:b1:fc:c7:59:f7:72:94:fb:38:01:b0:d6:dc:e9:
                    e9:13:5a:21:ca:f5:9a:3b:42:44:b7:e0:d8:ab:92:
                    db:fd:d3:31:a3:11:7e:92:70:b1:74:e7:77:15:5b:
                    56:92:92:bc:36:db:38:fc:df:3e:64:ef:b8:94:41:
                    67:f3:b0:31:2f:20:b9:96:12:94:00:04:0d:66:e2:
                    5b:ac:ea:0e:c5:9d:66:9c:20:14:2e:e7:c8:c7:b4:
                    d9:3b:55:ba:3e:57:4d:41:58:44:0b:06:35:a3:01:
                    eb:4f:89:71:76:c9:7c:99:b4:c3:4f:45:ca:5b:95:
                    a1:54:b3:4d:7f:0d:3c:24:5a:e9:9d:1c:3e:88:85:
                    7d:5a:b1:17:ab:ec:05:2d:e6:34:87:53:c9:dd:74:
                    a2:28:20:12:13:cd:f9:b7:16:f0:bd:5d:9e:41:92:
                    f8:e7:d0:fb:3c:34:30:f7:34:7c:b6:87:0b:c4:01:
                    9d:30:ae:b9:c4:37:39:22:aa:63:eb:24:27:1c:4c:
                    49:84:63:50:aa:64:b5:2b:a4:45:56:27:19:c2:3b:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B6:6F:1B:C6:AE:CA:9A:B7:40:84:8B:AB:EB:6F:C3:19:9A:4A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3aa2c8ff-54be-37bc-8e87-9080c3af699d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.30.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:74:76:95:d9:ff:c6:61:9c:82:98:5b:fa:59:23:8c:5d:6f:
         bf:69:94:09:8a:62:e5:75:e4:3a:d3:ce:42:29:3b:65:d2:b1:
         30:79:29:67:35:2f:a7:1e:04:2d:3d:4e:49:4e:d6:71:d4:ee:
         08:92:14:16:95:6e:8f:16:b0:a6:63:72:6a:71:e9:f0:a1:d2:
         34:61:3a:bb:04:a2:3b:6c:5d:87:e1:cb:50:f2:f5:11:ae:17:
         74:5c:b6:00:45:2b:ce:c1:39:eb:02:f4:a8:0a:e4:13:55:99:
         39:5a:67:f4:14:15:de:cf:87:ef:4b:8b:f5:6c:40:43:a4:d3:
         ae:b8:20:2e:32:e9:ce:11:cb:7a:d8:47:ac:92:99:33:64:62:
         64:4e:25:8b:b0:a1:d2:46:71:6e:6c:db:27:67:9f:e0:f3:85:
         74:dd:74:fd:bc:7f:f5:b3:41:8a:36:3c:ad:db:68:7c:a0:c0:
         1c:08:8c:8b:1e:a8:51:31:6e:97:11:a3:b5:4b:7a:e7:8b:b3:
         ae:fd:73:99:d4:f4:69:37:b2:77:47:9e:97:dc:8e:bd:c1:a9:
         42:7a:c3:1b:86:36:c7:5b:86:04:e1:c0:33:b1:cf:56:49:bf:
         0f:7e:84:7e:da:1d:ba:42:41:35:92:82:7b:75:3c:fa:b3:af:
         61:a6:4d:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCt/IJ21Qxz4AqrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NzU4MTk4YzEtMzk2OS00MjEyLWE2ODAtMmUxZGY0MGZhODM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvh5Ww8FSGclR1VigVsiRxOUjI7QqSCQ1peF
TPFc9O493J78yi+nbki7w+DhsfzHWfdylPs4AbDW3OnpE1ohyvWaO0JEt+DYq5Lb
/dMxoxF+knCxdOd3FVtWkpK8Nts4/N8+ZO+4lEFn87AxLyC5lhKUAAQNZuJbrOoO
xZ1mnCAULufIx7TZO1W6PldNQVhECwY1owHrT4lxdsl8mbTDT0XKW5WhVLNNfw08
JFrpnRw+iIV9WrEXq+wFLeY0h1PJ3XSiKCASE835txbwvV2eQZL459D7PDQw9zR8
tocLxAGdMK65xDc5Iqpj6yQnHExJhGNQqmS1K6RFVicZwjsNdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHu2bxvGrsqat0CEi6vrb8MZmkqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2FhMmM4ZmYtNTRiZS0z
N2JjLThlODctOTA4MGMzYWY2OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGB7SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ0dpXZ/8ZhnIKYW/pZI4xdb79plAmKYuV15DrTzkIpO2XSsTB5KWc1
L6ceBC09TklO1nHU7giSFBaVbo8WsKZjcmpx6fCh0jRhOrsEojtsXYfhy1Dy9RGu
F3RctgBFK87BOesC9KgK5BNVmTlaZ/QUFd7Ph+9Li/VsQEOk0664IC4y6c4Ry3rY
R6ySmTNkYmROJYuwodJGcW5s2ydnn+DzhXTddP28f/WzQYo2PK3baHygwBwIjIse
qFExbpcRo7VLeueLs679c5nU9Gk3sndHnpfcjr3BqUJ6wxuGNsdbhgThwDOxz1ZJ
vw9+hH7aHbpCQTWSgnt1PPqzr2GmTRw=
-----END CERTIFICATE-----
Generated at Mon May 12 23:04:49 2025 by rpki-client