Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/c5d2f4a2-badb-3de2-bde9-c6c0c1cafab0.roa
File:                     c5d2f4a2-badb-3de2-bde9-c6c0c1cafab0.roa (raw, json)
Hash identifier:          M0SslR7wJeVCe42FknJOcyWtM2xH1IH+iyS9nZKMrTI=
Subject key identifier:   48:C2:59:90:96:3C:56:CB:60:BD:62:D1:25:78:61:A6:13:6B:5F:54
Certificate issuer:       /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial:       010D0C9F43285848C9B0DACF44C2EFE76E2B2910
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/c5d2f4a2-badb-3de2-bde9-c6c0c1cafab0.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     1448
IP address blocks:        156.146.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:da:cf:44:c2:ef:e7:6e:2b:29:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=64b9a852-f708-4bde-8aa1-5b35f0efe8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:79:58:0c:23:ee:92:f2:a0:d6:60:cc:72:de:
                    4c:90:0e:21:37:6a:07:d1:09:a4:5f:e4:a9:cc:69:
                    1d:9b:f1:2f:8a:bf:57:ec:d2:8c:73:57:7e:c2:37:
                    72:cd:4d:f6:96:d7:fb:ce:29:b2:c2:9a:ec:e4:f2:
                    85:2b:d5:13:05:ac:af:cf:e0:45:11:4c:20:8f:82:
                    dc:92:80:99:26:4b:e6:82:98:4d:70:fb:53:3a:21:
                    2a:10:e6:d8:d7:45:7b:ff:7a:45:ba:77:56:90:d3:
                    e6:d6:74:bf:5f:44:a5:e7:ba:84:79:dc:51:de:a3:
                    ab:9c:a2:6a:c7:56:84:75:23:fd:0e:25:82:92:e7:
                    4e:50:9c:67:dc:21:53:9e:82:91:dc:9d:7f:75:ee:
                    85:b3:89:53:54:3d:39:16:d3:bc:e6:19:10:37:72:
                    b1:d2:09:4b:10:a8:a2:81:ee:d7:29:5f:d3:62:12:
                    6c:a0:1c:45:7e:20:38:b8:13:f7:7d:e2:64:68:29:
                    1e:6d:f0:40:27:9a:6c:83:05:40:87:eb:26:57:1f:
                    a8:88:c3:6d:19:4f:18:02:b0:ab:4f:fe:bd:04:ad:
                    b3:1f:a5:d2:51:4c:1b:79:e8:73:3f:c2:ef:0b:47:
                    26:26:19:37:b5:83:01:fa:c5:ec:fa:57:ea:a7:23:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C2:59:90:96:3C:56:CB:60:BD:62:D1:25:78:61:A6:13:6B:5F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/c5d2f4a2-badb-3de2-bde9-c6c0c1cafab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl

            X509v3 Authority Key Identifier:
                keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.146.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:62:cd:6d:5f:fe:2a:e0:9a:a8:44:f9:9c:28:66:cc:98:85:
         f2:a9:ff:b0:50:52:53:fc:4c:af:c8:b0:0f:01:3d:98:62:10:
         3d:df:83:20:28:2d:ff:61:1c:84:78:23:7e:43:7b:bc:ac:ff:
         f5:f4:aa:21:9e:34:ae:2d:62:c9:9a:29:2e:ba:53:ac:a7:41:
         48:15:b5:bc:54:6e:8b:24:b1:bf:32:f2:70:09:13:f9:e2:1f:
         3a:0a:ad:6a:50:60:b2:18:e3:fa:d6:07:bd:cc:c7:87:81:44:
         aa:40:4a:b3:c5:ab:15:c5:e7:97:84:0f:8a:ed:26:7c:ef:ce:
         b9:ab:1e:32:1e:3f:fa:e4:7c:61:53:e4:e8:da:62:84:84:6e:
         04:0b:16:eb:be:52:f0:29:57:e6:58:07:20:aa:d5:e2:16:6a:
         a8:52:ea:5f:88:f5:8c:a6:dd:29:07:a6:6f:ea:88:24:2b:d4:
         0e:83:bb:b1:19:5b:35:0c:da:c8:fa:84:a7:06:f2:56:1d:b6:
         ef:4f:9a:85:1b:d1:25:86:9b:cd:9d:57:15:35:91:43:dd:4e:
         c7:18:b5:da:83:fb:6b:d0:88:9f:77:24:63:1b:a7:29:c7:c1:
         4f:0b:e2:2c:c5:58:5a:93:68:86:ce:73:43:4c:48:5d:0c:40:
         60:a2:fa:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsNrPRMLv524rKRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5
Yzk1MB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk
NjRiOWE4NTItZjcwOC00YmRlLThhYTEtNWIzNWYwZWZlOGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXlYDCPukvKg1mDMct5MkA4hN2oH0QmkX+Sp
zGkdm/Evir9X7NKMc1d+wjdyzU32ltf7zimywprs5PKFK9UTBayvz+BFEUwgj4Lc
koCZJkvmgphNcPtTOiEqEObY10V7/3pFundWkNPm1nS/X0Sl57qEedxR3qOrnKJq
x1aEdSP9DiWCkudOUJxn3CFTnoKR3J1/de6Fs4lTVD05FtO85hkQN3Kx0glLEKii
ge7XKV/TYhJsoBxFfiA4uBP3feJkaCkebfBAJ5psgwVAh+smVx+oiMNtGU8YArCr
T/69BK2zH6XSUUwbeehzP8LvC0cmJhk3tYMB+sXs+lfqpyOlxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjCWZCWPFbLYL1i0SV4YaYTa19UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3
Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYzVkMmY0YTItYmFkYi0z
ZGUyLWJkZTktYzZjMGMxY2FmYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2
NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl
OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj
OTFiZTljOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJLRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARizW1f/irgmqhE+ZwoZsyYhfKp/7BQUlP8TK/IsA8BPZhiED3fgyAo
Lf9hHIR4I35De7ys//X0qiGeNK4tYsmaKS66U6ynQUgVtbxUbosksb8y8nAJE/ni
HzoKrWpQYLIY4/rWB73Mx4eBRKpASrPFqxXF55eED4rtJnzvzrmrHjIeP/rkfGFT
5OjaYoSEbgQLFuu+UvApV+ZYByCq1eIWaqhS6l+I9Yym3SkHpm/qiCQr1A6Du7EZ
WzUM2sj6hKcG8lYdtu9PmoUb0SWGm82dVxU1kUPdTscYtdqD+2vQiJ93JGMbpynH
wU8L4izFWFqTaIbOc0NMSF0MQGCi+sQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:40 2025 by rpki-client