Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa
File:                     4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa (raw, json)
Hash identifier:          3AZoKTxtNboZ6Ctvngp5ygURaITKKTZqTnNTXzBzH54=
Subject key identifier:   D8:9D:02:F0:97:B6:81:8D:9A:C2:3A:F2:BB:9B:7B:4C:50:21:4A:C1
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F432858497279AC60A33519D9A1D76EE0
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     15267
IP address blocks:        206.188.160.0/19 maxlen: 19
                          206.188.160.0/20 maxlen: 20
                          206.188.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ac:60:a3:35:19:d9:a1:d7:6e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=1cb17f09-3785-43ca-b9ee-1506a93b8aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:51:dd:e3:f9:30:c9:43:96:6e:72:50:7c:
                    66:b3:e5:f7:c2:67:7e:cc:4c:06:de:49:55:a9:ff:
                    c4:91:5d:b2:8b:c3:f7:cf:96:4d:d1:0a:41:c1:d0:
                    9e:48:e0:0b:b8:2f:ab:d1:41:8c:93:0e:66:47:6a:
                    e6:8e:b2:62:d8:bb:f9:89:38:7c:99:41:3c:11:5b:
                    13:a6:40:b5:2e:48:6d:de:4d:ab:9a:96:4b:3a:31:
                    fe:f4:8a:86:f2:81:2f:f1:0c:cb:a4:f2:be:4c:df:
                    61:db:af:46:ba:31:20:bf:ff:7d:ea:aa:d6:ae:4f:
                    70:ae:c6:3f:55:4c:1c:aa:f5:a9:84:fb:f0:68:fe:
                    ea:f8:f6:8d:de:4f:63:d9:53:b7:73:dc:36:d1:db:
                    71:22:05:29:10:63:95:0a:45:1f:d1:3c:35:7e:58:
                    e8:b7:62:29:16:25:ef:f2:86:f4:9b:17:64:f4:4d:
                    5f:3b:4f:c1:f9:17:f0:6f:81:8f:d9:da:36:94:d9:
                    1b:9e:9a:27:9b:c4:44:de:52:c9:2a:3f:b8:f0:fb:
                    de:bc:63:4a:37:2b:22:97:fe:a1:81:1e:e0:87:a2:
                    14:6d:57:11:c7:ae:39:8d:28:b2:f6:7c:da:e1:78:
                    d0:63:d8:4a:a3:96:28:41:e4:57:cc:eb:22:ff:d8:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9D:02:F0:97:B6:81:8D:9A:C2:3A:F2:BB:9B:7B:4C:50:21:4A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/4e455485-38b5-3a78-b3f4-05ccd8e6e568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:b9:94:69:ba:d8:5d:b3:65:d1:51:71:08:b3:a1:95:81:
         32:9f:d0:ba:b8:89:4b:5e:6d:85:05:f1:58:9e:30:77:67:5f:
         7d:b1:5f:e9:e6:c1:fe:59:5a:de:bb:33:f7:68:bc:91:b6:df:
         50:52:84:56:72:87:1d:fe:2f:c4:7e:45:37:f8:a8:de:cf:b0:
         3e:ee:37:a6:a0:10:b2:3d:2f:67:af:cb:8f:e2:9a:c7:62:9b:
         ab:7e:c0:ad:eb:03:0b:1d:44:d9:8e:64:3a:32:68:78:b8:d7:
         c6:cc:56:9a:78:04:ac:5c:aa:69:20:17:26:77:6d:8e:66:de:
         a3:16:16:94:5f:08:b4:68:20:01:64:26:82:f5:ae:23:12:5c:
         54:4e:7a:7b:79:0b:93:de:76:8c:b5:a9:95:c0:28:24:ee:1f:
         c5:e5:e8:bb:f6:1e:74:40:4c:e9:fc:73:6c:03:f1:d9:49:21:
         a5:87:db:db:d9:82:c1:1a:ed:23:1b:2a:86:9d:01:ea:58:d1:
         8d:e1:99:29:df:97:dd:43:dc:da:b3:d5:a2:7e:90:da:4a:8b:
         05:4e:76:66:c7:bf:18:b4:1e:14:a5:18:18:a0:09:ce:ea:7f:
         c3:d4:ac:bf:21:fc:b8:f5:fe:ec:89:8e:d3:b6:0f:2e:f7:b0:
         5a:0c:11:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeaxgozUZ2aHXbuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw
OGU3MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
MWNiMTdmMDktMzc4NS00M2NhLWI5ZWUtMTUwNmE5M2I4YWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpdR3eP5MMlDlm5yUHxms+X3wmd+zEwG3klV
qf/EkV2yi8P3z5ZN0QpBwdCeSOALuC+r0UGMkw5mR2rmjrJi2Lv5iTh8mUE8EVsT
pkC1Lkht3k2rmpZLOjH+9IqG8oEv8QzLpPK+TN9h269GujEgv/996qrWrk9wrsY/
VUwcqvWphPvwaP7q+PaN3k9j2VO3c9w20dtxIgUpEGOVCkUf0Tw1fljot2IpFiXv
8ob0mxdk9E1fO0/B+Rfwb4GP2do2lNkbnponm8RE3lLJKj+48PvevGNKNysil/6h
gR7gh6IUbVcRx645jSiy9nza4XjQY9hKo5YoQeRXzOsi/9gkXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNidAvCXtoGNmsI68rube0xQIUrBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1
MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvNGU0NTU0ODUtMzhiNS0z
YTc4LWIzZjQtMDVjY2Q4ZTZlNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3
ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh
MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj
NmViYTA4ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzrygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNMuZRputhds2XRUXEIs6GVgTKf0Lq4iUtebYUF8VieMHdnX32xX+nm
wf5ZWt67M/dovJG231BShFZyhx3+L8R+RTf4qN7PsD7uN6agELI9L2evy4/imsdi
m6t+wK3rAwsdRNmOZDoyaHi418bMVpp4BKxcqmkgFyZ3bY5m3qMWFpRfCLRoIAFk
JoL1riMSXFROent5C5Pedoy1qZXAKCTuH8Xl6Lv2HnRATOn8c2wD8dlJIaWH29vZ
gsEa7SMbKoadAepY0Y3hmSnfl91D3Nqz1aJ+kNpKiwVOdmbHvxi0HhSlGBigCc7q
f8PUrL8h/Lj1/uyJjtO2Dy73sFoMESo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:13 2025 by rpki-client