Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa
File:                     cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa (raw, json)
Hash identifier:          Gb5oG0PatWI7ioWJOf5n2fCWUqax+wLV2oJHYLde3Sk=
Subject key identifier:   62:22:50:57:31:DA:67:0D:0A:27:33:87:F0:27:21:06:F9:54:80:83
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858491246BA562CE9DF93D02D9580
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3360
IP address blocks:        192.46.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ba:56:2c:e9:df:93:d0:2d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=0d800d8a-7871-47b2-ab36-21c3bb30a259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8c:49:3c:bc:4e:2e:30:ea:4a:5d:c5:bd:83:
                    cb:f7:e8:fd:73:ab:a9:17:be:3f:2f:71:e0:6f:33:
                    d6:37:fe:0c:ab:0c:f6:fc:bf:70:92:7c:83:30:9a:
                    70:8d:90:a4:c7:d7:93:14:eb:84:6b:c8:0d:2c:58:
                    d5:45:b6:b5:fe:37:bc:69:18:6b:19:91:45:a9:8f:
                    f5:48:0b:6a:e0:58:0b:8c:12:fe:67:bd:8c:24:fe:
                    04:7b:12:61:cc:72:f5:24:5b:aa:86:42:9f:37:18:
                    14:f3:d0:45:a0:1a:3b:b8:bd:30:f9:01:d1:f1:62:
                    73:67:99:f2:90:06:b4:d9:32:03:59:8d:93:6c:2a:
                    b5:0e:b1:30:b0:d7:3a:3a:98:dc:54:fc:59:9f:ef:
                    36:79:4b:b8:65:eb:0f:8d:3c:8e:77:71:c5:53:d3:
                    c6:72:c3:57:db:e0:1f:c8:89:67:23:12:02:86:76:
                    01:0f:01:2b:74:7e:1c:c6:6a:62:30:7e:68:12:44:
                    ab:64:53:f4:c5:9b:3c:12:52:c7:8d:6d:2e:d5:99:
                    51:0d:2d:13:0e:0f:6f:48:20:eb:1b:28:13:12:6d:
                    b3:f4:6f:26:19:12:f4:04:6a:76:49:bf:7b:e0:3f:
                    05:d2:d0:e0:d0:32:d4:80:9c:a7:b5:2f:f3:b9:7c:
                    b5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:22:50:57:31:DA:67:0D:0A:27:33:87:F0:27:21:06:F9:54:80:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/cd102c2e-82fb-3732-8bfb-acffe257b6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:86:65:7d:b4:31:c0:23:73:7d:93:70:31:0a:3b:e9:33:b7:
         81:c3:29:ec:d0:f7:89:95:75:ab:95:86:04:d3:4d:13:37:97:
         e8:7b:2e:87:e8:51:b5:72:41:e3:05:06:75:49:cc:59:f5:a9:
         68:d4:64:36:a0:c9:b4:64:a3:d0:c3:5c:f3:44:e7:d6:97:33:
         9d:2b:f8:1e:23:24:70:6d:79:3a:66:09:16:0e:3f:79:34:21:
         e6:48:94:9b:2c:90:7a:c8:54:c5:f0:ca:21:41:c6:cc:b2:28:
         e0:de:eb:45:c2:7f:bf:3f:0e:d7:f6:df:7c:7c:2f:6b:f5:34:
         44:d7:e3:e2:db:8a:60:94:c3:f4:72:68:b9:1d:52:e4:28:a3:
         7a:e8:2e:3e:99:84:24:db:e0:93:83:6c:b4:07:b4:3c:2a:23:
         ac:48:32:de:07:e2:77:e8:6c:ea:d9:de:40:21:a2:e2:fb:66:
         a6:c5:5d:f4:fa:5d:f9:6a:86:6b:ff:87:fe:47:5e:bb:a2:ea:
         51:6a:b2:0d:8c:61:32:aa:89:bf:ee:26:d2:e7:50:60:e4:5b:
         51:15:df:96:03:02:d6:22:54:bb:f5:72:9c:96:d7:55:8d:69:
         6e:86:18:65:b5:5b:d1:ee:84:bc:e2:e0:7c:f6:aa:10:ab:c5:
         f4:9b:d9:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrpWLOnfk9AtlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
MGQ4MDBkOGEtNzg3MS00N2IyLWFiMzYtMjFjM2JiMzBhMjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YxJPLxOLjDqSl3FvYPL9+j9c6upF74/L3Hg
bzPWN/4Mqwz2/L9wknyDMJpwjZCkx9eTFOuEa8gNLFjVRba1/je8aRhrGZFFqY/1
SAtq4FgLjBL+Z72MJP4EexJhzHL1JFuqhkKfNxgU89BFoBo7uL0w+QHR8WJzZ5ny
kAa02TIDWY2TbCq1DrEwsNc6OpjcVPxZn+82eUu4ZesPjTyOd3HFU9PGcsNX2+Af
yIlnIxIChnYBDwErdH4cxmpiMH5oEkSrZFP0xZs8ElLHjW0u1ZlRDS0TDg9vSCDr
GygTEm2z9G8mGRL0BGp2Sb974D8F0tDg0DLUgJyntS/zuXy1FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIiUFcx2mcNCiczh/AnIQb5VICDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvY2QxMDJjMmUtODJmYi0z
NzMyLThiZmItYWNmZmUyNTdiNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC7MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmGZX20McAjc32TcDEKO+kzt4HDKezQ94mVdauVhgTTTRM3l+h7Lofo
UbVyQeMFBnVJzFn1qWjUZDagybRko9DDXPNE59aXM50r+B4jJHBteTpmCRYOP3k0
IeZIlJsskHrIVMXwyiFBxsyyKODe60XCf78/Dtf233x8L2v1NETX4+LbimCUw/Ry
aLkdUuQoo3roLj6ZhCTb4JODbLQHtDwqI6xIMt4H4nfobOrZ3kAhouL7ZqbFXfT6
Xflqhmv/h/5HXrui6lFqsg2MYTKqib/uJtLnUGDkW1EV35YDAtYiVLv1cpyW11WN
aW6GGGW1W9HuhLzi4Hz2qhCrxfSb2Tk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:16:49 2025 by rpki-client