Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e5cf1526-cf32-3d4f-b326-e7aeeebfa97a.roa
File:                     e5cf1526-cf32-3d4f-b326-e7aeeebfa97a.roa (raw, json)
Hash identifier:          /x5GkDHR2nFOtNRhxVb6KfWDFqAlHtTrpg7qgy3dG64=
Subject key identifier:   D4:84:D9:4F:FE:F8:81:40:DC:EB:88:0A:52:16:AC:A0:FC:CE:84:DB
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584950F96014ACD63817119CD660
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e5cf1526-cf32-3d4f-b326-e7aeeebfa97a.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     396253
IP address blocks:        149.19.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:60:14:ac:d6:38:17:11:9c:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=dde9691c-cf08-4139-97d4-ddfaccd8ce9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b3:74:67:e7:5f:21:e6:a5:b8:94:48:53:1d:
                    5c:71:4f:45:d7:92:60:7f:ce:61:b1:d7:5a:c2:8c:
                    4d:4f:a6:76:80:a4:61:b4:76:9a:36:46:23:ee:96:
                    60:68:a8:1c:fc:04:c5:23:c3:07:11:ed:2d:bb:da:
                    c3:9f:b7:ce:c4:28:7a:9a:a2:21:0b:78:7e:17:ef:
                    37:41:80:dd:50:ac:02:a8:11:2f:5b:2b:ff:31:68:
                    e5:14:78:6a:24:a2:59:c8:5b:ab:c5:69:4f:52:4f:
                    d1:f1:ba:8c:2f:a8:4d:50:e0:41:7b:f2:b0:34:cd:
                    34:d1:70:6b:9c:3f:f4:71:ef:d2:57:03:a9:a2:de:
                    83:c3:12:74:c4:b1:6c:9c:76:5c:f4:26:77:ba:2a:
                    5e:97:d7:ef:17:a8:22:52:04:91:8d:c3:11:74:c1:
                    aa:cb:02:94:a8:ca:4a:04:e9:67:e5:27:eb:9d:92:
                    5a:aa:ce:c3:4e:ac:f0:dd:7e:8a:53:a1:43:af:77:
                    86:af:da:22:2a:e4:b8:88:80:ad:b4:fb:06:23:8e:
                    1a:e3:5e:75:c0:37:54:24:a6:39:fa:dc:84:7d:6d:
                    9f:8f:00:8d:49:02:d0:50:ef:23:6b:37:05:34:12:
                    4c:f5:61:e7:e7:d9:3e:a3:53:56:68:e7:9a:0f:4c:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:D9:4F:FE:F8:81:40:DC:EB:88:0A:52:16:AC:A0:FC:CE:84:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/e5cf1526-cf32-3d4f-b326-e7aeeebfa97a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d6:27:0b:61:b0:0a:f4:95:9c:3b:fb:91:b6:ce:08:ba:54:
         54:53:1f:6c:7e:f9:f4:6f:9a:0a:e6:91:ea:82:69:93:59:d3:
         24:39:a9:3d:df:16:3c:be:51:ee:29:3c:1f:9e:15:f7:ab:0b:
         ab:6e:64:de:98:5b:d4:38:e7:fe:61:74:a5:0d:db:e3:f7:e9:
         25:1f:ab:ae:88:a7:98:2b:1b:28:fd:e6:01:a5:12:0e:dd:47:
         1d:49:0b:bb:36:b0:53:7b:88:20:d2:7a:86:39:0a:d6:3d:c1:
         e3:3a:8d:8e:ba:65:79:a0:d6:02:d4:17:9b:f3:fc:ea:8f:a8:
         59:c9:88:cf:a6:57:c3:0f:f0:bf:34:99:9e:fe:29:e6:56:d0:
         03:54:97:92:41:cc:71:0f:ff:18:02:cb:46:4f:b0:aa:b8:da:
         f9:e3:5f:3a:6c:1b:29:12:fa:93:02:48:69:e4:05:1f:5e:23:
         c9:e8:c1:91:b7:39:ce:75:6d:34:4f:73:e7:a1:0e:91:84:9c:
         0d:3e:07:a5:11:e9:07:89:a1:10:02:61:69:85:6a:00:df:b3:
         02:09:52:25:15:b0:b1:26:c8:5e:f6:ed:72:f7:c7:39:ff:03:
         63:91:31:7b:01:36:79:b5:f4:5d:d3:79:ed:00:eb:ea:61:c6:
         8f:c2:a0:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WAUrNY4FxGc1mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
ZGRlOTY5MWMtY2YwOC00MTM5LTk3ZDQtZGRmYWNjZDhjZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LN0Z+dfIealuJRIUx1ccU9F15Jgf85hsdda
woxNT6Z2gKRhtHaaNkYj7pZgaKgc/ATFI8MHEe0tu9rDn7fOxCh6mqIhC3h+F+83
QYDdUKwCqBEvWyv/MWjlFHhqJKJZyFurxWlPUk/R8bqML6hNUOBBe/KwNM000XBr
nD/0ce/SVwOpot6DwxJ0xLFsnHZc9CZ3uipel9fvF6giUgSRjcMRdMGqywKUqMpK
BOln5SfrnZJaqs7DTqzw3X6KU6FDr3eGr9oiKuS4iICttPsGI44a4151wDdUJKY5
+tyEfW2fjwCNSQLQUO8jazcFNBJM9WHn59k+o1NWaOeaD0xG7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSE2U/++IFA3OuIClIWrKD8zoTbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZTVjZjE1MjYtY2YzMi0z
ZDRmLWIzMjYtZTdhZWVlYmZhOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRMtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbWJwthsAr0lZw7+5G2zgi6VFRTH2x++fRvmgrmkeqCaZNZ0yQ5qT3f
Fjy+Ue4pPB+eFferC6tuZN6YW9Q45/5hdKUN2+P36SUfq66Ip5grGyj95gGlEg7d
Rx1JC7s2sFN7iCDSeoY5CtY9weM6jY66ZXmg1gLUF5vz/OqPqFnJiM+mV8MP8L80
mZ7+KeZW0ANUl5JBzHEP/xgCy0ZPsKq42vnjXzpsGykS+pMCSGnkBR9eI8nowZG3
Oc51bTRPc+ehDpGEnA0+B6UR6QeJoRACYWmFagDfswIJUiUVsLEmyF727XL3xzn/
A2ORMXsBNnm19F3Tee0A6+phxo/CoHg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:08 2025 by rpki-client