Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/be7d8b8f-62e9-31e5-8816-6761c59eca0b.roa
File:                     be7d8b8f-62e9-31e5-8816-6761c59eca0b.roa (raw, json)
Hash identifier:          IaAhQp9GjeBl9XANVR4UMJeuZOfcbqbUrUhyKOgLpg0=
Subject key identifier:   18:E4:50:C7:8D:65:B5:CC:B6:4F:9D:A4:2D:BD:79:8A:F7:EE:65:97
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858490E16C402F4A0245EBB84F200
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/be7d8b8f-62e9-31e5-8816-6761c59eca0b.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     46766
IP address blocks:        148.77.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c4:02:f4:a0:24:5e:bb:84:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=b0f9e3b8-3508-4b88-904f-e77b1cf2e1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:fb:3a:e1:1c:65:21:b6:87:b1:e2:e9:f2:
                    f9:eb:a7:0f:0f:6e:f9:d2:7d:9b:dd:03:68:e1:5a:
                    e9:5a:a8:9f:0d:e1:b8:33:0c:cb:ab:9d:43:80:03:
                    e0:e5:2a:1b:a8:9a:26:ea:c9:bc:78:5b:54:8f:b9:
                    32:1d:68:15:70:e0:96:13:80:d6:48:c8:26:85:ff:
                    57:d3:7a:19:a0:85:62:a6:b1:47:8a:d0:16:9f:c1:
                    92:da:3c:8a:a0:6e:6c:3a:05:43:9c:83:6e:d5:a9:
                    e3:ec:0f:cc:46:6d:ad:94:c7:e7:c6:8e:78:78:ca:
                    46:cd:9b:b5:df:72:99:a8:b2:fc:a9:29:8c:c5:5e:
                    47:4a:fd:f1:87:55:18:95:95:11:32:a2:ed:70:fa:
                    6c:5c:d3:0a:fc:91:c5:c9:85:f5:77:fc:a4:bc:75:
                    1a:3a:13:bd:59:05:04:02:8d:7d:c5:87:26:ad:69:
                    52:83:6d:49:6b:37:40:50:a6:fb:87:36:27:5b:e7:
                    fd:1e:77:eb:02:df:f5:21:52:26:a6:03:33:f3:82:
                    ef:db:e2:b9:9b:c2:46:8b:13:5f:85:96:35:36:e1:
                    d5:11:6e:a3:b6:c9:8e:09:97:73:51:99:dc:85:d5:
                    11:c8:13:f1:a8:66:08:cd:26:fa:72:5d:d3:a7:4e:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E4:50:C7:8D:65:B5:CC:B6:4F:9D:A4:2D:BD:79:8A:F7:EE:65:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/be7d8b8f-62e9-31e5-8816-6761c59eca0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:0a:88:75:89:c5:1f:de:52:c4:fa:05:03:28:f4:64:17:
         88:fd:d9:fe:63:ae:41:a4:01:d6:e5:71:db:4d:e7:d1:f7:cc:
         61:68:4b:9d:51:78:8a:f0:01:64:5b:73:08:d2:f5:c9:76:af:
         be:69:57:c9:4a:58:fd:aa:57:70:5b:7b:0b:f1:05:e5:99:c9:
         2d:88:7b:7d:f5:8a:a1:5f:8e:fe:e4:51:24:4c:d0:af:82:3b:
         eb:b0:5b:67:ff:d5:73:15:17:b7:6d:f2:e2:42:39:1d:bf:92:
         a2:43:d8:02:22:b4:84:3f:ed:fe:61:08:d7:36:a2:37:8b:8d:
         37:73:a2:c6:f5:5b:8f:25:fa:61:b1:74:38:6c:5a:6c:5a:e9:
         8e:90:b5:54:cf:9d:5d:d5:de:dd:8d:89:2a:55:ac:76:0e:e3:
         e6:4b:b9:99:bc:a5:51:7c:7b:b5:39:f3:b5:6f:0b:4e:b5:11:
         7c:30:5b:ac:2e:52:30:96:b0:18:02:1c:82:9f:2e:4a:4b:ad:
         bd:6c:59:4f:b2:ca:18:2b:b5:34:f4:55:3b:f9:9a:4a:6c:ca:
         08:6a:52:8a:35:a4:1a:63:18:0b:5c:a4:d4:3c:15:dc:f6:00:
         95:35:e1:36:50:e8:65:77:9b:50:26:e6:e7:5f:af:58:c7:aa:
         51:36:51:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsQC9KAkXruE8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi
MGRlMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
YjBmOWUzYjgtMzUwOC00Yjg4LTkwNGYtZTc3YjFjZjJlMWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZD7OuEcZSG2h7Hi6fL566cPD2750n2b3QNo
4VrpWqifDeG4MwzLq51DgAPg5SobqJom6sm8eFtUj7kyHWgVcOCWE4DWSMgmhf9X
03oZoIViprFHitAWn8GS2jyKoG5sOgVDnINu1anj7A/MRm2tlMfnxo54eMpGzZu1
33KZqLL8qSmMxV5HSv3xh1UYlZURMqLtcPpsXNMK/JHFyYX1d/ykvHUaOhO9WQUE
Ao19xYcmrWlSg21JazdAUKb7hzYnW+f9HnfrAt/1IVImpgMz84Lv2+K5m8JGixNf
hZY1NuHVEW6jtsmOCZdzUZnchdURyBPxqGYIzSb6cl3Tp05lJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBjkUMeNZbXMtk+dpC29eYr37mWXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1
OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvYmU3ZDhiOGYtNjJlOS0z
MWU1LTg4MTYtNjc2MWM1OWVjYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj
NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx
YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy
MzhmMWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlE1zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABisCoh1icUf3lLE+gUDKPRkF4j92f5jrkGkAdblcdtN59H3zGFoS51R
eIrwAWRbcwjS9cl2r75pV8lKWP2qV3BbewvxBeWZyS2Ie331iqFfjv7kUSRM0K+C
O+uwW2f/1XMVF7dt8uJCOR2/kqJD2AIitIQ/7f5hCNc2ojeLjTdzosb1W48l+mGx
dDhsWmxa6Y6QtVTPnV3V3t2NiSpVrHYO4+ZLuZm8pVF8e7U587VvC061EXwwW6wu
UjCWsBgCHIKfLkpLrb1sWU+yyhgrtTT0VTv5mkpsyghqUoo1pBpjGAtcpNQ8Fdz2
AJU14TZQ6GV3m1Am5udfr1jHqlE2Ua8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:47:06 2025 by rpki-client