Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa
File:                     1351a206-7659-3d84-bdf1-3748c7102b44.roa (raw, json)
Hash identifier:          gsknMHMAiCNpCW3RFlcpaNEf4Ph58k8WV8WPGOczAYU=
Subject key identifier:   BE:13:DA:DC:D7:DD:6F:9B:97:24:CD:EF:93:03:04:F0:D8:F3:C4:C0
Certificate issuer:       /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial:       010D0C9F4328584A3A158502DD294B9861460740
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     40788
IP address blocks:        24.54.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:85:02:dd:29:4b:98:61:46:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=ed0a0357-1d20-4ab8-924c-fe77a5ab180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8f:d9:b7:ac:ff:44:cd:b2:74:53:ea:1b:21:
                    fa:2c:78:15:f4:2a:53:e4:ed:16:19:da:b2:07:69:
                    f0:3f:2d:6d:97:33:6c:ca:4f:33:00:83:dd:5a:1d:
                    ed:69:d0:91:0b:c3:b6:16:1e:52:55:2b:3b:33:b7:
                    a8:42:dc:d6:ad:65:a2:51:a2:50:e0:e5:04:97:e5:
                    3a:58:ad:46:e2:5e:07:1d:ba:80:47:39:6f:ad:c9:
                    b5:b5:85:b2:82:d1:8f:d0:65:0e:64:2c:ca:54:ba:
                    25:91:2a:36:e2:48:f0:a0:8e:46:ef:a7:f9:ab:8c:
                    f3:0d:e9:ee:3a:1c:b2:6a:a3:ff:ab:c7:a4:34:3f:
                    28:d1:fe:55:13:f8:e7:3f:46:8b:9e:c2:4d:b1:d7:
                    e3:f5:c7:cb:2d:45:2d:37:b8:1e:b8:21:7f:b7:17:
                    53:50:fa:42:af:55:cd:82:9e:df:00:e1:b0:28:df:
                    56:6d:81:63:c0:12:50:e7:ea:bf:fd:2c:e9:33:e7:
                    03:8e:2f:6e:25:08:1a:a0:24:1d:47:65:8e:79:96:
                    5a:43:19:c9:fb:ed:6f:26:19:a1:6f:e1:80:31:da:
                    2d:2d:fe:30:1e:c7:b2:6f:59:e3:65:5f:e8:53:e2:
                    28:90:c9:9b:d5:bd:69:7d:37:00:1a:0e:53:66:7e:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:13:DA:DC:D7:DD:6F:9B:97:24:CD:EF:93:03:04:F0:D8:F3:C4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl

            X509v3 Authority Key Identifier:
                keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.54.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:00:57:69:90:e2:cc:e0:73:1f:65:86:23:45:68:11:21:c3:
         e6:db:94:13:e9:95:63:6f:05:e2:7a:58:e3:01:24:c6:0f:0c:
         f0:be:d6:a7:c9:86:19:96:a4:26:60:61:9b:a6:22:66:0b:0a:
         8c:65:2a:a0:b0:1a:78:73:75:e5:6f:7b:4a:49:fb:55:83:66:
         ad:da:5b:e0:8b:ba:c8:24:a0:2a:36:8c:cd:40:bf:0a:75:7a:
         59:26:b1:bb:ae:a1:21:40:4a:ba:be:0f:9c:3e:bc:a1:e1:b9:
         35:c6:fb:a5:87:d5:80:fa:3e:7b:6b:f4:9b:5e:38:d3:98:49:
         38:87:70:66:74:a0:31:8c:cd:f4:20:2f:a5:11:42:be:72:f4:
         e7:44:59:f4:67:08:de:2c:e1:64:33:2b:d6:6e:01:11:49:ee:
         f4:7f:2d:87:0b:a9:f1:c0:d1:40:be:d5:ff:b2:c3:60:13:28:
         22:e8:4b:4b:4b:df:d6:5b:f0:d7:c0:90:74:9b:20:a3:44:a1:
         53:a0:9e:4f:f8:25:a6:11:54:07:5f:eb:fe:2a:a5:b0:e5:57:
         f2:98:7d:72:aa:95:05:c5:b8:4b:da:b4:07:fe:33:27:46:b3:
         5c:e7:ed:b8:8c:b1:9d:9d:32:0f:74:d3:f9:6a:ef:62:86:f0:
         d1:2a:59:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYUC3SlLmGFGB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl
MDU5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
ZWQwYTAzNTctMWQyMC00YWI4LTkyNGMtZmU3N2E1YWIxODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo/Zt6z/RM2ydFPqGyH6LHgV9CpT5O0WGdqy
B2nwPy1tlzNsyk8zAIPdWh3tadCRC8O2Fh5SVSs7M7eoQtzWrWWiUaJQ4OUEl+U6
WK1G4l4HHbqARzlvrcm1tYWygtGP0GUOZCzKVLolkSo24kjwoI5G76f5q4zzDenu
OhyyaqP/q8ekND8o0f5VE/jnP0aLnsJNsdfj9cfLLUUtN7geuCF/txdTUPpCr1XN
gp7fAOGwKN9WbYFjwBJQ5+q//SzpM+cDji9uJQgaoCQdR2WOeZZaQxnJ++1vJhmh
b+GAMdotLf4wHseyb1njZV/oU+IokMmb1b1pfTcAGg5TZn42DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL4T2tzX3W+blyTN75MDBPDY88TAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5
YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMTM1MWEyMDYtNzY1OS0z
ZDg0LWJkZjEtMzc0OGM3MTAyYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj
MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh
ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy
NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGDZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUAV2mQ4szgcx9lhiNFaBEhw+bblBPplWNvBeJ6WOMBJMYPDPC+1qfJ
hhmWpCZgYZumImYLCoxlKqCwGnhzdeVve0pJ+1WDZq3aW+CLusgkoCo2jM1Avwp1
elkmsbuuoSFASrq+D5w+vKHhuTXG+6WH1YD6Pntr9JteONOYSTiHcGZ0oDGMzfQg
L6URQr5y9OdEWfRnCN4s4WQzK9ZuARFJ7vR/LYcLqfHA0UC+1f+yw2ATKCLoS0tL
39Zb8NfAkHSbIKNEoVOgnk/4JaYRVAdf6/4qpbDlV/KYfXKqlQXFuEvatAf+MydG
s1zn7biMsZ2dMg900/lq72KG8NEqWTw=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:32:10 2025 by rpki-client