Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad74458d-89f9-3870-9155-8651e7e7bf95.roa
File:                     ad74458d-89f9-3870-9155-8651e7e7bf95.roa (raw, json)
Hash identifier:          oSvmja3RTPTgCENeKFCuCeuQcYtTQaQTHY7GFIypjjw=
Subject key identifier:   F5:FD:28:77:67:02:02:D3:52:55:B7:22:B3:21:B4:E5:B3:F1:84:C9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584915115676FB7251AABFBB4B40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad74458d-89f9-3870-9155-8651e7e7bf95.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        199.182.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:56:76:fb:72:51:aa:bf:bb:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=2fac4c60-8182-4206-90a2-238b3153e9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:c0:77:45:a4:e7:07:30:81:dd:ec:e5:4b:
                    98:49:34:d4:ca:7e:ef:86:95:e5:04:60:ea:e4:3a:
                    a9:fb:fa:8a:dd:f5:02:3e:c5:9d:e1:81:00:49:9d:
                    99:62:9a:01:ec:5f:c2:40:ba:c1:d0:c9:99:7a:d7:
                    63:92:dd:46:35:7d:91:66:85:66:2b:93:21:59:8c:
                    c2:d9:0c:43:2c:32:99:92:a1:b1:20:f9:22:72:d2:
                    2a:c3:ff:12:0d:d0:d3:0f:25:98:6d:dc:06:cb:97:
                    33:a6:49:04:a3:d6:4a:bd:84:d1:e5:84:3c:03:64:
                    c3:49:50:7a:57:dd:06:7d:aa:7d:ba:2c:39:1f:0d:
                    74:24:88:99:5b:b5:8a:ea:0c:e0:d5:15:76:0d:7c:
                    47:29:cf:43:08:97:86:0f:44:8e:57:3f:f1:53:be:
                    fb:c5:b2:56:0d:c0:b4:05:db:56:77:6b:21:13:bb:
                    54:e1:df:6a:54:67:34:d1:9d:8a:2f:63:ba:66:98:
                    bf:ce:bf:0b:69:0f:48:fe:8e:4b:23:14:4e:1b:ab:
                    74:28:a7:2c:43:03:7a:64:e2:1f:0b:dd:59:26:b7:
                    f2:f8:45:65:2b:9d:bc:e1:36:8c:00:97:c1:f5:be:
                    99:6c:d8:a9:89:74:61:1d:ab:85:7f:0e:14:c9:ca:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FD:28:77:67:02:02:D3:52:55:B7:22:B3:21:B4:E5:B3:F1:84:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad74458d-89f9-3870-9155-8651e7e7bf95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d9:31:4e:90:c0:9b:10:0d:d3:5c:86:9c:30:12:cb:71:73:
         eb:73:20:ec:f7:c0:3c:0b:45:60:e6:9e:f4:da:b1:f9:dc:3b:
         c4:7f:13:ac:b2:56:62:c3:84:8f:58:ee:e4:1f:7c:f8:d4:b0:
         e6:c0:4c:e1:15:29:e4:97:a4:59:e8:fc:94:60:99:98:fb:cc:
         f3:3e:67:60:9f:4d:8f:ee:22:b9:6b:ec:f3:2f:c8:c0:70:ce:
         44:3a:05:40:49:a0:de:d6:ee:23:c4:5d:d5:26:fd:b0:8e:62:
         43:b6:2e:9f:ca:da:ed:ab:0a:2f:62:02:02:ea:e3:12:70:9d:
         45:1f:38:e3:a3:16:22:0f:42:12:77:fd:12:3d:ec:b7:66:b4:
         de:96:da:da:95:8b:26:9f:55:90:41:39:09:0a:04:40:58:a0:
         1c:e5:61:c0:71:d3:30:f2:35:a9:ac:78:72:93:94:95:fc:44:
         ad:69:6d:19:aa:ce:9c:2d:af:3a:5e:78:07:89:a5:ce:b7:66:
         1c:8c:bb:79:17:73:bd:04:08:da:a9:54:cd:8e:ab:04:8c:a5:
         11:e9:91:d6:23:9c:5b:b2:16:08:76:8b:eb:d8:79:68:d0:c1:
         ef:5d:0f:90:2f:1e:6f:d9:51:fa:9b:f2:10:08:7e:ed:d7:a8:
         fb:94:48:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEVZ2+3JRqr+7S0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
MmZhYzRjNjAtODE4Mi00MjA2LTkwYTItMjM4YjMxNTNlOWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOfAd0Wk5wcwgd3s5UuYSTTUyn7vhpXlBGDq
5Dqp+/qK3fUCPsWd4YEASZ2ZYpoB7F/CQLrB0MmZetdjkt1GNX2RZoVmK5MhWYzC
2QxDLDKZkqGxIPkictIqw/8SDdDTDyWYbdwGy5czpkkEo9ZKvYTR5YQ8A2TDSVB6
V90Gfap9uiw5Hw10JIiZW7WK6gzg1RV2DXxHKc9DCJeGD0SOVz/xU777xbJWDcC0
BdtWd2shE7tU4d9qVGc00Z2KL2O6Zpi/zr8LaQ9I/o5LIxROG6t0KKcsQwN6ZOIf
C91ZJrfy+EVlK5284TaMAJfB9b6ZbNipiXRhHauFfw4UycqfswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPX9KHdnAgLTUlW3IrMhtOWz8YTJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYWQ3NDQ1OGQtODlmOS0z
ODcwLTkxNTUtODY1MWU3ZTdiZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7auMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL7ZMU6QwJsQDdNchpwwEstxc+tzIOz3wDwLRWDmnvTasfncO8R/E6yy
VmLDhI9Y7uQffPjUsObATOEVKeSXpFno/JRgmZj7zPM+Z2CfTY/uIrlr7PMvyMBw
zkQ6BUBJoN7W7iPEXdUm/bCOYkO2Lp/K2u2rCi9iAgLq4xJwnUUfOOOjFiIPQhJ3
/RI97LdmtN6W2tqViyafVZBBOQkKBEBYoBzlYcBx0zDyNamseHKTlJX8RK1pbRmq
zpwtrzpeeAeJpc63ZhyMu3kXc70ECNqpVM2OqwSMpRHpkdYjnFuyFgh2i+vYeWjQ
we9dD5AvHm/ZUfqb8hAIfu3XqPuUSMA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 21:12:21 2025 by rpki-client