Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0fff36e8-ca8b-3a28-895a-c80522fffdbb.roa
File:                     0fff36e8-ca8b-3a28-895a-c80522fffdbb.roa (raw, json)
Hash identifier:          I22nzDbttpqZc/Wy6H8HD10mHv5pv6uRVcaUv4ny2ls=
Subject key identifier:   4C:0C:BA:5B:07:1A:16:28:BF:33:B9:7F:08:36:EF:72:E2:77:E9:93
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849C904F613327C4CB2FD65B6C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0fff36e8-ca8b-3a28-895a-c80522fffdbb.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     64267
IP address blocks:        68.234.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f6:13:32:7c:4c:b2:fd:65:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=df58a9bb-7906-4507-8ce5-ff63ad882b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:d1:e2:92:4e:ab:05:a7:b8:39:2c:27:20:
                    e6:eb:30:45:46:7e:2b:8a:6d:5e:9a:0d:8f:fd:c4:
                    e0:b2:0c:74:84:c3:a4:21:cf:83:f1:19:30:a8:b9:
                    69:dc:63:0f:da:a3:9f:95:c8:d4:1a:37:9e:d8:db:
                    91:35:c5:d6:77:f7:60:6a:37:54:5c:0b:e8:5d:1d:
                    a4:47:04:e2:f0:1c:b3:8e:79:2b:9e:d7:58:df:65:
                    e8:11:18:dc:a6:fb:ca:a0:54:e8:21:5c:5a:84:ce:
                    15:20:e1:e0:79:ed:ea:7e:2f:c8:d7:a2:09:aa:65:
                    99:d7:b3:f1:11:38:49:84:b8:f0:18:7e:f0:38:9c:
                    ec:c1:3f:96:5c:08:64:82:13:ca:a7:d7:3a:f4:3b:
                    3e:35:8b:d5:ee:63:31:c7:f7:26:1f:37:12:09:ec:
                    81:65:d2:7e:dd:15:fe:1e:d0:b8:f8:11:a1:83:2d:
                    3a:6c:7e:94:ce:00:2b:af:45:33:2e:b7:09:c4:6c:
                    ad:b8:a6:d9:15:3a:63:69:d3:7c:3e:ed:60:84:b8:
                    ac:d8:dd:dd:27:fe:08:b0:9e:99:ac:99:0d:55:63:
                    8e:0c:ac:b9:41:24:72:f6:01:cc:a0:41:74:f6:77:
                    35:1b:92:77:b0:a7:a5:2e:b4:71:fe:78:c8:6a:58:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:BA:5B:07:1A:16:28:BF:33:B9:7F:08:36:EF:72:E2:77:E9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/0fff36e8-ca8b-3a28-895a-c80522fffdbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7e:47:31:78:49:1b:e9:99:de:8b:7d:38:6d:9a:cc:01:c3:
         a2:fc:67:3b:68:f6:54:5e:77:41:7b:cb:97:34:fe:3a:35:09:
         37:44:e3:d0:2a:50:ba:7d:0f:10:9e:25:64:1f:89:f8:d4:fe:
         ea:51:86:39:0a:72:88:1e:f0:3f:07:04:8d:55:4f:70:9d:d8:
         7c:fc:4d:f4:66:6f:1f:5f:82:1b:b1:26:2c:a1:6a:b6:ac:60:
         39:63:11:da:04:62:67:76:7b:7b:df:26:0e:c0:cc:58:37:4f:
         ac:3f:6e:f0:64:86:b0:ca:4d:15:b0:ee:51:75:ff:21:fd:72:
         19:4e:70:f9:f6:72:39:cf:d8:26:83:4f:70:5e:cd:f7:ca:d6:
         65:27:74:6e:0a:84:a4:52:54:1c:96:bd:91:f7:03:83:1d:b6:
         00:6a:93:0f:92:38:d2:54:a7:ba:ee:71:2f:23:48:d9:70:fc:
         9a:3a:25:f0:79:1c:07:e5:ec:25:3b:4e:e9:ad:76:5b:0e:e8:
         ff:97:73:92:bf:fa:62:f4:01:97:c9:e7:18:72:78:a6:13:bf:
         be:3e:83:a5:ea:33:8f:d5:93:94:0e:b9:fc:8d:f7:0e:be:7c:
         99:39:cc:a3:c1:5c:e8:87:94:ab:f4:75:15:1a:cc:e2:9a:97:
         d0:6b:e2:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPYTMnxMsv1ltsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZGY1OGE5YmItNzkwNi00NTA3LThjZTUtZmY2M2FkODgyYjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYPR4pJOqwWnuDksJyDm6zBFRn4rim1emg2P
/cTgsgx0hMOkIc+D8RkwqLlp3GMP2qOflcjUGjee2NuRNcXWd/dgajdUXAvoXR2k
RwTi8ByzjnkrntdY32XoERjcpvvKoFToIVxahM4VIOHgee3qfi/I16IJqmWZ17Px
EThJhLjwGH7wOJzswT+WXAhkghPKp9c69Ds+NYvV7mMxx/cmHzcSCeyBZdJ+3RX+
HtC4+BGhgy06bH6UzgArr0UzLrcJxGytuKbZFTpjadN8Pu1ghLis2N3dJ/4IsJ6Z
rJkNVWOODKy5QSRy9gHMoEF09nc1G5J3sKelLrRx/njIalgD8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwMulsHGhYovzO5fwg273Lid+mTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMGZmZjM2ZTgtY2E4Yi0z
YTI4LTg5NWEtYzgwNTIyZmZmZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROorMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAN+RzF4SRvpmd6LfThtmswBw6L8Zzto9lRed0F7y5c0/jo1CTdE49Aq
ULp9DxCeJWQfifjU/upRhjkKcoge8D8HBI1VT3Cd2Hz8TfRmbx9fghuxJiyharas
YDljEdoEYmd2e3vfJg7AzFg3T6w/bvBkhrDKTRWw7lF1/yH9chlOcPn2cjnP2CaD
T3BezffK1mUndG4KhKRSVByWvZH3A4MdtgBqkw+SONJUp7rucS8jSNlw/Jo6JfB5
HAfl7CU7TumtdlsO6P+Xc5K/+mL0AZfJ5xhyeKYTv74+g6XqM4/Vk5QOufyN9w6+
fJk5zKPBXOiHlKv0dRUazOKal9Br4m8=
-----END CERTIFICATE-----
Generated at Mon May 12 10:27:01 2025 by rpki-client