Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4fd855d2-351e-3264-9b5a-d2316a48f9df.roa
File:                     4fd855d2-351e-3264-9b5a-d2316a48f9df.roa (raw, json)
Hash identifier:          tgMRoub5+jukXgD0JKYk4xcGPyG9EhKNv/zXEZcT37s=
Subject key identifier:   BA:DE:38:F7:11:F3:DA:6C:E6:62:23:57:E0:76:69:0B:65:A7:B4:E9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584988CF205A6C69962B31FB0E00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4fd855d2-351e-3264-9b5a-d2316a48f9df.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     25668
IP address blocks:        209.53.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:20:5a:6c:69:96:2b:31:fb:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=324c7658-d778-4710-863a-2fbb028b1f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:d8:58:1d:5b:51:37:a2:43:38:88:25:14:
                    a8:b3:21:1c:d3:4c:fb:45:67:62:85:eb:27:0e:04:
                    f6:44:6f:42:8e:7c:9c:3e:7f:3c:cc:a3:24:5f:86:
                    a2:64:24:18:62:93:67:31:a3:80:6f:d8:cd:5f:6b:
                    c3:1f:0d:29:36:8f:56:8b:9d:ac:b0:0e:5f:04:25:
                    bf:7d:5f:8e:2d:10:0c:58:2b:96:7d:1e:02:7d:d2:
                    d9:38:7c:9c:73:5e:d1:73:45:b4:66:a8:7f:b6:40:
                    bf:9a:d9:6d:b6:da:c4:4c:31:d1:0e:5e:13:9b:de:
                    1f:b6:2a:7c:04:c7:2f:11:4f:e4:68:df:b1:5f:b3:
                    06:e1:d2:f1:1e:07:ec:8b:4c:49:26:b4:44:9d:1b:
                    58:b4:c6:57:c2:4b:d9:ba:c3:bb:bb:2b:7f:0e:9e:
                    ce:71:6b:85:6b:35:2f:ce:5f:05:89:17:96:45:7e:
                    13:49:79:94:e4:22:cb:c7:51:bb:3c:c8:3e:66:43:
                    db:a0:ba:77:59:b7:59:69:5f:e7:94:60:0f:47:d0:
                    81:d9:cc:91:d0:d9:ff:73:6f:1b:4f:3b:fb:5b:73:
                    f3:63:8f:b6:1a:26:4e:83:e1:3d:5d:e7:01:92:bf:
                    ad:91:ff:9b:9a:b8:b3:d5:c0:ae:f0:d6:b4:b5:d9:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:38:F7:11:F3:DA:6C:E6:62:23:57:E0:76:69:0B:65:A7:B4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4fd855d2-351e-3264-9b5a-d2316a48f9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:73:92:f8:80:3a:4b:3a:e0:54:6f:ce:a6:9c:ce:0d:76:a1:
         ec:9f:97:d7:da:d8:ea:e2:e5:49:6c:09:4d:32:f1:aa:31:e9:
         53:6d:5a:cd:28:23:6f:5e:7b:c2:88:23:d2:a5:1e:ca:74:9e:
         9a:84:43:88:8d:93:6f:b8:85:93:1a:bd:ac:95:e9:37:d8:37:
         c8:91:78:8a:03:7e:40:4d:d1:32:78:73:af:c7:be:02:e2:c3:
         bc:12:ea:d3:db:63:53:98:d0:98:59:a7:f7:21:fb:fe:f8:fb:
         d8:9c:04:91:71:89:b8:d8:6f:0d:97:e3:72:8a:a8:ac:2b:34:
         cd:90:99:8e:e3:2f:1d:7a:7c:ff:e7:8a:19:32:22:7f:de:45:
         c8:a5:fb:19:75:84:39:d8:3c:cb:c7:b4:e7:85:b7:2e:ac:2b:
         ab:f7:4d:82:37:5e:36:f4:c9:fd:27:56:6f:73:2f:a8:7d:be:
         89:ee:78:8e:3d:18:4b:7d:b0:67:55:5e:e3:a3:fa:be:6e:bb:
         07:78:c7:f1:fc:2c:1f:47:54:94:39:c1:7c:9f:d7:5c:e0:34:
         e8:00:fe:95:1d:3f:7e:01:fd:4f:48:52:32:29:6c:93:e9:12:
         62:62:96:4d:a0:be:f0:00:e1:d8:22:b5:82:e4:db:32:43:39:
         4b:af:75:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyBabGmWKzH7DgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
MzI0Yzc2NTgtZDc3OC00NzEwLTg2M2EtMmZiYjAyOGIxZjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq47YWB1bUTeiQziIJRSosyEc00z7RWdihesn
DgT2RG9CjnycPn88zKMkX4aiZCQYYpNnMaOAb9jNX2vDHw0pNo9Wi52ssA5fBCW/
fV+OLRAMWCuWfR4CfdLZOHycc17Rc0W0Zqh/tkC/mtltttrETDHRDl4Tm94ftip8
BMcvEU/kaN+xX7MG4dLxHgfsi0xJJrREnRtYtMZXwkvZusO7uyt/Dp7OcWuFazUv
zl8FiReWRX4TSXmU5CLLx1G7PMg+ZkPboLp3WbdZaV/nlGAPR9CB2cyR0Nn/c28b
Tzv7W3PzY4+2GiZOg+E9XecBkr+tkf+bmriz1cCu8Na0tdmJRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLreOPcR89ps5mIjV+B2aQtlp7TpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNGZkODU1ZDItMzUxZS0z
MjY0LTliNWEtZDIzMTZhNDhmOWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0TXUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdzkviAOks64FRvzqaczg12oeyfl9fa2Ori5UlsCU0y8aox6VNtWs0o
I29ee8KII9KlHsp0npqEQ4iNk2+4hZMavayV6TfYN8iReIoDfkBN0TJ4c6/HvgLi
w7wS6tPbY1OY0JhZp/ch+/74+9icBJFxibjYbw2X43KKqKwrNM2QmY7jLx16fP/n
ihkyIn/eRcil+xl1hDnYPMvHtOeFty6sK6v3TYI3Xjb0yf0nVm9zL6h9vonueI49
GEt9sGdVXuOj+r5uuwd4x/H8LB9HVJQ5wXyf11zgNOgA/pUdP34B/U9IUjIpbJPp
EmJilk2gvvAA4dgitYLk2zJDOUuvdVg=
-----END CERTIFICATE-----
Generated at Sat May 10 09:54:01 2025 by rpki-client