Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27d844c1-cb4b-3176-878c-d014e29db089.roa
File:                     27d844c1-cb4b-3176-878c-d014e29db089.roa (raw, json)
Hash identifier:          fmjQ6UuFKzFCbqBwYa7BxvmA00PHG5nwI382RWyGDpk=
Subject key identifier:   A3:55:82:1B:87:33:A6:A1:0C:D1:05:05:BE:30:13:B8:69:55:01:77
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858495C246F8770570B7989FAA480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27d844c1-cb4b-3176-878c-d014e29db089.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     397223
IP address blocks:        192.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:6f:87:70:57:0b:79:89:fa:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=3a0e8920-81ed-45aa-ac4a-dab31cbc7506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:ca:7b:38:c3:71:54:37:e8:15:47:e6:df:
                    8f:0e:d3:2c:0b:ba:26:19:6f:a7:fd:35:c6:b2:d5:
                    ad:b5:3e:66:3b:df:42:4a:04:c8:2c:8c:d3:4f:99:
                    c4:7c:d8:17:0f:d3:ce:cc:64:c2:45:ac:3b:e3:4d:
                    b2:70:8d:bc:7a:c1:c1:d8:61:3a:51:54:5d:94:5f:
                    f7:3c:b8:40:e4:c9:58:9f:97:90:d2:94:5e:58:f7:
                    3a:7e:fd:55:a9:66:8a:c8:55:b8:80:40:22:95:55:
                    f2:f8:12:97:62:ec:51:98:f8:30:e1:f9:50:55:d9:
                    79:6e:33:24:d4:7f:b7:5c:c5:3c:75:22:6a:cc:6e:
                    39:1c:4c:1b:73:06:e6:30:da:ab:f3:0c:34:9f:3d:
                    7a:68:30:e8:71:bb:8f:04:47:80:44:1e:4a:7e:d5:
                    8b:19:7f:01:19:4a:8b:29:97:72:3f:eb:0b:4b:65:
                    4e:71:33:03:0f:17:d5:60:9e:fe:2b:cf:ec:5a:a1:
                    36:14:de:87:9d:ab:58:70:d9:32:c8:b6:16:96:cc:
                    18:fd:0c:6e:35:af:19:c2:bf:02:e4:f1:09:36:88:
                    23:04:bb:d9:55:ab:75:cc:40:79:5f:e1:66:5e:6e:
                    86:d5:ce:aa:b9:e0:4a:ed:77:fe:4b:64:c7:d3:ed:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:82:1B:87:33:A6:A1:0C:D1:05:05:BE:30:13:B8:69:55:01:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27d844c1-cb4b-3176-878c-d014e29db089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a9:75:35:8f:df:9b:8e:93:45:e5:b8:cf:65:a1:1d:59:7d:
         e3:bb:9e:55:db:76:d0:63:82:28:75:6c:f9:99:bf:db:00:05:
         de:d5:b7:46:4a:40:ae:70:fa:25:19:1f:98:3d:1b:a9:3b:c6:
         da:9f:2e:02:89:21:c9:16:49:3d:c7:76:8b:64:5e:b1:2d:82:
         55:ce:63:8d:af:a2:b5:96:87:19:8d:1f:a9:10:8f:0d:d5:d7:
         00:8f:74:4b:68:ea:24:ae:8f:39:a5:5a:f2:4b:49:46:67:38:
         92:b6:8e:30:dd:8a:47:da:e6:a8:fd:16:5e:fd:5d:4d:04:88:
         59:7e:2a:15:ee:50:b7:c4:35:6c:bd:13:b5:f8:47:53:1a:46:
         53:21:73:45:bc:cb:56:79:75:d0:9c:6d:d9:20:40:bc:05:ff:
         f5:ae:0f:e0:f4:1c:57:82:fb:f4:15:28:97:d0:71:62:fb:aa:
         87:25:63:5e:06:4c:07:89:d3:8a:6c:32:3a:00:ed:90:98:c5:
         5c:12:72:98:5c:5b:6f:07:d7:ef:6f:3a:09:ec:45:bc:ed:e7:
         9b:ff:68:86:57:de:db:2b:80:79:4c:59:a4:6f:d0:f5:ba:97:
         0d:27:9a:d5:7a:fd:f9:e3:2a:e8:62:d2:70:ed:e3:e0:95:6b:
         30:48:3e:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJG+HcFcLeYn6pIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
M2EwZTg5MjAtODFlZC00NWFhLWFjNGEtZGFiMzFjYmM3NTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjKezjDcVQ36BVH5t+PDtMsC7omGW+n/TXG
stWttT5mO99CSgTILIzTT5nEfNgXD9POzGTCRaw7402ycI28esHB2GE6UVRdlF/3
PLhA5MlYn5eQ0pReWPc6fv1VqWaKyFW4gEAilVXy+BKXYuxRmPgw4flQVdl5bjMk
1H+3XMU8dSJqzG45HEwbcwbmMNqr8ww0nz16aDDocbuPBEeARB5KftWLGX8BGUqL
KZdyP+sLS2VOcTMDDxfVYJ7+K8/sWqE2FN6HnatYcNkyyLYWlswY/QxuNa8Zwr8C
5PEJNogjBLvZVat1zEB5X+FmXm6G1c6queBK7Xf+S2TH0+21FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNVghuHM6ahDNEFBb4wE7hpVQF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjdkODQ0YzEtY2I0Yi0z
MTc2LTg3OGMtZDAxNGUyOWRiMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGQ7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOpdTWP35uOk0XluM9loR1ZfeO7nlXbdtBjgih1bPmZv9sABd7Vt0ZK
QK5w+iUZH5g9G6k7xtqfLgKJIckWST3HdotkXrEtglXOY42vorWWhxmNH6kQjw3V
1wCPdEto6iSujzmlWvJLSUZnOJK2jjDdikfa5qj9Fl79XU0EiFl+KhXuULfENWy9
E7X4R1MaRlMhc0W8y1Z5ddCcbdkgQLwF//WuD+D0HFeC+/QVKJfQcWL7qoclY14G
TAeJ04psMjoA7ZCYxVwScphcW28H1+9vOgnsRbzt55v/aIZX3tsrgHlMWaRv0PW6
lw0nmtV6/fnjKuhi0nDt4+CVazBIPhI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:47:55 2025 by rpki-client