Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa
File:                     971182dd-1422-30d6-98cf-97e0afc19304.roa (raw, json)
Hash identifier:          l/crJNFOwuotVWlXwLscfBXu+nnaZPbVNE5GR7hvS/Y=
Subject key identifier:   7F:86:69:F9:50:AD:80:54:C5:1F:13:8E:E3:35:62:4B:BA:58:46:AE
Certificate issuer:       /CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
Certificate serial:       010D0C9F43285849ABB49ADDDD6392FD0DD40500
Authority key identifier: 23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     15280
IP address blocks:        205.166.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9a:dd:dd:63:92:fd:0d:d4:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=30ade1e2-c461-4414-b25f-a1706cca4b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:af:6d:d5:09:cf:f5:88:f0:ce:e7:5f:98:ad:
                    18:3d:f3:2d:5a:a6:42:95:3b:5a:5f:30:b2:b0:7c:
                    1a:bd:32:4f:3d:e4:d4:0d:80:d5:29:85:8d:b6:11:
                    ac:e7:14:a1:59:6d:a6:14:7a:6a:dc:df:ea:d9:f9:
                    dd:c8:6f:4a:d0:e6:ff:ab:a4:6f:45:07:2d:59:21:
                    83:5a:33:46:a0:e8:22:50:93:aa:0b:62:5e:07:ab:
                    3a:2d:38:71:90:97:1e:4c:c1:db:1c:b6:02:65:ae:
                    fd:57:7b:43:09:b7:88:8d:38:60:5b:ac:12:5c:f3:
                    2e:e3:80:56:0d:93:f2:fa:e3:5b:ca:c9:9b:cb:15:
                    c1:e6:3c:39:c0:6b:88:c2:cb:fc:ff:0a:fe:8e:4b:
                    3e:cd:83:ef:0f:80:4d:98:81:72:de:fd:70:98:82:
                    92:06:69:fe:94:52:07:27:0e:a2:c9:37:a6:c2:51:
                    a4:42:cb:e8:80:83:41:5b:0f:78:30:f3:05:35:69:
                    23:39:90:3f:40:cd:af:5f:5a:37:f0:78:68:74:f4:
                    8c:b5:58:2f:d9:3c:8c:47:60:91:2b:28:39:27:cb:
                    8a:3d:4a:48:b8:c6:78:41:0b:ce:c1:34:75:18:12:
                    e2:b5:f5:91:47:06:0e:60:a3:41:cb:b5:9d:28:a9:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:86:69:F9:50:AD:80:54:C5:1F:13:8E:E3:35:62:4B:BA:58:46:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/971182dd-1422-30d6-98cf-97e0afc19304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl

            X509v3 Authority Key Identifier:
                keyid:23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1f:dc:e5:91:65:b1:f0:26:4a:c7:7b:0e:5a:ef:4e:bf:38:
         6c:c0:17:f0:45:be:aa:01:f9:d3:50:56:1f:a9:c5:5d:b9:2c:
         0b:7e:a0:bb:2a:56:c2:7e:6e:a6:0e:5b:8a:34:d4:a1:df:66:
         d7:c4:18:ac:d3:4e:61:7c:dc:e3:95:8c:cc:d0:5d:59:56:7c:
         5c:fc:eb:6c:d1:60:80:d3:97:19:35:08:d8:13:1f:2d:95:10:
         5f:0d:77:fa:cb:4d:35:d2:7b:fa:a2:f0:9a:f8:3a:d1:8e:4f:
         e3:2e:f6:49:b7:62:bc:98:10:65:d8:1e:0d:c7:ba:ec:28:0b:
         e2:97:79:dc:e7:cf:8a:0f:57:14:65:f9:8c:b5:a5:56:c0:0a:
         9c:ed:1c:71:f3:a1:5b:e4:b3:19:24:3e:29:9a:d7:0d:1e:ea:
         a1:72:9f:3c:fa:9a:d2:66:0e:d0:df:ae:80:ec:31:36:59:97:
         53:c0:43:b5:dd:14:3d:f7:a1:5a:2c:91:5b:9b:b1:d4:b8:33:
         2a:2a:88:a7:5d:f1:99:52:16:fe:df:07:2b:8b:9e:1f:7d:e0:
         23:48:66:d0:2b:ea:47:35:46:2c:da:d1:8a:ec:91:7b:bd:1f:
         b1:86:df:d4:05:06:ba:7d:d5:15:90:53:54:af:14:c5:34:b4:
         60:70:e3:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJrd3WOS/Q3UBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNhZWZhN2EtMTQ2OS00MWIxLWExNGYtNmZjMjUxYjU1
ODIzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
MzBhZGUxZTItYzQ2MS00NDE0LWIyNWYtYTE3MDZjY2E0YjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga9t1QnP9YjwzudfmK0YPfMtWqZClTtaXzCy
sHwavTJPPeTUDYDVKYWNthGs5xShWW2mFHpq3N/q2fndyG9K0Ob/q6RvRQctWSGD
WjNGoOgiUJOqC2JeB6s6LThxkJceTMHbHLYCZa79V3tDCbeIjThgW6wSXPMu44BW
DZPy+uNbysmbyxXB5jw5wGuIwsv8/wr+jks+zYPvD4BNmIFy3v1wmIKSBmn+lFIH
Jw6iyTemwlGkQsvogINBWw94MPMFNWkjOZA/QM2vX1o38HhodPSMtVgv2TyMR2CR
Kyg5J8uKPUpIuMZ4QQvOwTR1GBLitfWRRwYOYKNBy7WdKKnJSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+GaflQrYBUxR8TjuM1Yku6WEauMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lM2Fl
ZmE3YS0xNDY5LTQxYjEtYTE0Zi02ZmMyNTFiNTU4MjMvOTcxMTgyZGQtMTQyMi0z
MGQ2LTk4Y2YtOTdlMGFmYzE5MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTNhZWZhN2EtMTQ2OS00MWIxLWEx
NGYtNmZjMjUxYjU1ODIzL2UzYWVmYTdhLTE0NjktNDFiMS1hMTRmLTZmYzI1MWI1
NTgyMy5jcmwwHwYDVR0jBBgwFoAUI6Fu/KLsWtanqAWr/erfaF8HIZMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lM2FlZmE3YS0xNDY5LTQxYjEtYTE0Zi02ZmMy
NTFiNTU4MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzab6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkf3OWRZbHwJkrHew5a706/OGzAF/BFvqoB+dNQVh+pxV25LAt+oLsq
VsJ+bqYOW4o01KHfZtfEGKzTTmF83OOVjMzQXVlWfFz862zRYIDTlxk1CNgTHy2V
EF8Nd/rLTTXSe/qi8Jr4OtGOT+Mu9km3YryYEGXYHg3HuuwoC+KXedznz4oPVxRl
+Yy1pVbACpztHHHzoVvksxkkPima1w0e6qFynzz6mtJmDtDfroDsMTZZl1PAQ7Xd
FD33oVoskVubsdS4MyoqiKdd8ZlSFv7fByuLnh994CNIZtAr6kc1Riza0YrskXu9
H7GG39QFBrp91RWQU1SvFMU0tGBw45I=
-----END CERTIFICATE-----
Generated at Mon May 12 06:41:07 2025 by rpki-client