Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ca633633-73e5-3b37-b797-c894645051a9.roa
File:                     ca633633-73e5-3b37-b797-c894645051a9.roa (raw, json)
Hash identifier:          fPF4WRgv4+p7/S1mUdyjOUCGEX9H3X0T3SWxvLx4C1U=
Subject key identifier:   42:3C:28:79:6B:D6:5F:D8:5E:8C:9C:04:79:67:DE:D4:3E:9D:DB:EC
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F432858495D896A6583599374394D7000
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ca633633-73e5-3b37-b797-c894645051a9.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     0
IP address blocks:        192.67.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:6a:65:83:59:93:74:39:4d:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=910ad21a-8485-48fb-823b-c6cfb95f5b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:2f:90:47:4f:6b:34:22:9c:07:18:7b:46:
                    6a:9c:dc:cb:ad:1f:f5:4f:02:27:f3:33:71:38:17:
                    37:96:20:ae:7e:87:a7:a4:5e:c3:d1:a6:12:0a:f3:
                    7e:c1:1b:14:bd:25:3d:75:30:bd:b6:b1:a7:f0:ef:
                    c8:93:df:87:5e:5e:31:e7:66:cf:68:28:ff:9a:8d:
                    7d:d7:da:9d:3c:84:9e:c1:85:1d:7c:a9:87:b6:d9:
                    0c:7f:7b:31:4b:03:5a:d8:d5:18:77:e9:a0:5f:17:
                    e7:93:df:2d:c3:a5:85:04:27:62:bd:e1:b9:b8:0c:
                    65:e5:ab:1b:11:aa:1b:e2:4c:5b:2c:76:2c:f7:1f:
                    f1:c3:03:cb:a6:af:3b:3e:31:79:ba:8e:82:4a:c6:
                    8e:e3:3f:7f:70:ad:cb:7b:2b:69:67:ad:b9:b6:83:
                    7a:a6:48:81:ad:18:2c:70:4c:f0:e3:4f:40:bc:e8:
                    ba:ec:7f:5e:c2:cc:91:6b:db:59:d1:8d:54:5f:72:
                    5c:73:2d:ad:38:6a:1e:87:ff:66:3c:72:35:23:10:
                    33:57:ff:b7:77:fe:ff:43:5f:2a:59:28:8d:99:6d:
                    fd:01:fe:a7:ca:22:f5:fc:49:9a:7f:1a:70:44:da:
                    9e:e6:41:dc:a5:78:b8:c9:31:28:60:11:3e:12:6c:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3C:28:79:6B:D6:5F:D8:5E:8C:9C:04:79:67:DE:D4:3E:9D:DB:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ca633633-73e5-3b37-b797-c894645051a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:41:04:a0:42:ce:c4:f5:c2:e1:0c:3e:07:c9:3b:d8:05:
         9d:df:64:1e:9d:92:61:4a:0f:86:53:ce:bd:76:c4:d9:85:ab:
         42:1c:e7:47:d1:8e:c8:88:28:72:24:49:c4:42:11:f2:c0:1c:
         4c:08:cd:21:da:6d:0b:3c:7e:8b:92:7f:94:d3:47:bd:42:96:
         89:4c:73:ce:0c:ab:e4:18:24:b8:47:7d:85:cf:64:65:24:63:
         e6:33:65:42:1c:c0:7e:a2:e3:e2:0b:1d:17:fa:f7:66:22:ac:
         f2:c1:16:ac:87:02:75:0e:77:15:e4:4a:00:1b:fe:db:58:06:
         c0:26:cf:e1:b9:26:54:8a:74:f4:b0:90:d8:0c:67:c2:db:6e:
         7f:0f:14:a5:2a:08:a7:6b:78:3c:25:c2:0c:6a:1d:57:e9:ba:
         a4:6c:1f:92:af:9d:60:f7:43:e6:69:c5:0e:92:ef:a6:90:ca:
         35:ac:82:1b:b8:70:07:7f:c2:93:56:db:21:54:6d:8f:b7:48:
         6a:e8:63:e8:51:0d:83:6f:f3:fa:bc:bc:82:8d:ae:44:98:9f:
         6c:b3:02:81:14:34:4a:0b:16:e5:46:9f:0e:71:db:a0:be:12:
         bc:fd:64:04:9a:65:09:a9:e1:aa:12:d6:c5:92:15:ad:91:ca:
         c2:e3:e9:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWplg1mTdDlNcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk
OTEwYWQyMWEtODQ4NS00OGZiLTgyM2ItYzZjZmI5NWY1Yjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk04vkEdPazQinAcYe0ZqnNzLrR/1TwIn8zNx
OBc3liCufoenpF7D0aYSCvN+wRsUvSU9dTC9trGn8O/Ik9+HXl4x52bPaCj/mo19
19qdPISewYUdfKmHttkMf3sxSwNa2NUYd+mgXxfnk98tw6WFBCdiveG5uAxl5asb
Eaob4kxbLHYs9x/xwwPLpq87PjF5uo6CSsaO4z9/cK3LeytpZ625toN6pkiBrRgs
cEzw409AvOi67H9ewsyRa9tZ0Y1UX3Jccy2tOGoeh/9mPHI1IxAzV/+3d/7/Q18q
WSiNmW39Af6nyiL1/EmafxpwRNqe5kHcpXi4yTEoYBE+EmyJSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEI8KHlr1l/YXoycBHln3tQ+ndvsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvY2E2MzM2MzMtNzNlNS0z
YjM3LWI3OTctYzg5NDY0NTA1MWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEO3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmaQQSgQs7E9cLhDD4HyTvYBZ3fZB6dkmFKD4ZTzr12xNmFq0Ic50fR
jsiIKHIkScRCEfLAHEwIzSHabQs8fouSf5TTR71ClolMc84Mq+QYJLhHfYXPZGUk
Y+YzZUIcwH6i4+ILHRf692YirPLBFqyHAnUOdxXkSgAb/ttYBsAmz+G5JlSKdPSw
kNgMZ8Lbbn8PFKUqCKdreDwlwgxqHVfpuqRsH5KvnWD3Q+ZpxQ6S76aQyjWsghu4
cAd/wpNW2yFUbY+3SGroY+hRDYNv8/q8vIKNrkSYn2yzAoEUNEoLFuVGnw5x26C+
Erz9ZASaZQmp4aoS1sWSFa2RysLj6bM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:14 2025 by rpki-client