Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/bbd4cb41-6ea5-35cc-b3e3-849c353930f2.roa
File:                     bbd4cb41-6ea5-35cc-b3e3-849c353930f2.roa (raw, json)
Hash identifier:          hHhLVOJ3y0jjnunD20c91H4OLO1rxdcBq9aKPSnaEL8=
Subject key identifier:   DC:89:BC:D6:81:98:0A:A8:C8:E8:8B:FD:32:96:3A:58:02:80:22:61
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F432858490E16B5A89D8ED35FD0F23100
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/bbd4cb41-6ea5-35cc-b3e3-849c353930f2.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     395766
IP address blocks:        192.102.255.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:b5:a8:9d:8e:d3:5f:d0:f2:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=195969fe-c17b-4ef7-abc6-3e2de3d6a2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:60:b3:94:a8:7e:08:f2:a7:d4:5a:88:db:
                    c2:b5:ca:a7:18:22:e4:43:3f:1a:04:97:3b:b5:da:
                    80:b7:9c:f4:2b:1e:6a:c7:af:51:a3:17:4e:3f:4d:
                    b6:40:d3:26:17:f2:4a:8c:6c:98:d7:1a:e4:a6:0d:
                    fe:53:b6:ac:36:54:66:20:a1:ef:57:f7:21:6a:89:
                    1a:66:72:62:bc:06:0c:68:19:bf:3f:08:29:7e:0e:
                    a6:1f:53:c6:04:d1:8b:bb:35:8a:ca:14:0c:c9:22:
                    97:5a:34:62:db:a2:55:a1:0f:75:38:2a:1d:73:1b:
                    fb:f8:7e:76:d3:60:c8:f9:16:64:80:e8:af:f2:77:
                    6c:94:93:cb:40:e4:90:2f:a0:7d:ed:0b:22:d8:d2:
                    a2:cc:4d:c7:4e:13:57:a6:fe:79:0a:db:e8:94:9f:
                    59:68:4f:8a:86:72:f2:3e:f4:73:3a:15:e2:4c:18:
                    38:9e:45:8d:18:be:8b:d0:0c:05:11:d7:bf:af:9a:
                    cd:9c:71:4d:1a:fe:97:ff:40:51:69:e2:ae:cd:88:
                    67:23:7e:19:24:dd:8e:d7:0c:01:16:bc:9f:17:27:
                    58:6e:aa:b9:e0:a0:e5:0c:e2:88:ef:72:43:d5:52:
                    94:28:f1:4a:ee:c4:fd:cc:f1:0b:b5:e2:70:74:b1:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:89:BC:D6:81:98:0A:A8:C8:E8:8B:FD:32:96:3A:58:02:80:22:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/bbd4cb41-6ea5-35cc-b3e3-849c353930f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.255.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:78:66:cc:d0:cf:af:69:4d:05:15:ea:85:68:3c:db:7a:5c:
         ac:eb:53:0e:71:99:5e:0c:36:a1:8d:4d:94:69:ed:2d:6d:8a:
         cb:86:46:84:ae:31:d9:8c:f7:7e:de:13:55:8f:09:a0:87:5f:
         73:ea:41:92:e6:c4:01:e5:40:35:f1:3e:60:b4:5b:66:8f:5b:
         63:71:ae:15:ad:b2:55:76:20:d4:5d:c0:89:3e:bc:f1:3c:bd:
         76:1d:3c:8f:20:df:8a:98:95:d7:23:7a:47:21:d1:e6:c6:67:
         4f:b6:02:3b:3e:ee:8a:1e:15:29:74:f7:1b:9c:95:f9:d5:26:
         d4:06:82:56:d0:a4:97:c7:d0:42:24:02:2e:40:4c:32:6c:ac:
         d9:51:ce:1c:ec:c0:ef:58:bc:30:b3:80:37:29:a0:02:b6:19:
         e6:f4:3a:c4:9b:a4:d5:fe:8f:e2:f7:60:7e:32:98:1c:43:6b:
         c6:9d:53:4f:f5:cd:25:48:b6:6c:4e:aa:3a:67:70:8b:53:82:
         d3:a9:3a:b5:b1:cf:01:7b:0a:c8:36:7e:75:84:84:37:ca:e9:
         3a:cb:d3:08:39:0a:e7:17:09:ea:63:9c:a7:fb:3f:d0:69:ea:
         d2:f8:24:b8:a4:93:f1:7d:a5:26:f7:cd:1c:75:6b:98:21:f9:
         11:8a:c4:56
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEkOFrWonY7TX9DyMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjMzZDhlZWYtNTFkZi00ODdiLTllZGItZjE2YmE0MDNm
NDQyMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTk1OTY5ZmUtYzE3Yi00ZWY3LWFiYzYtM2UyZGUzZDZhMmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWRgs5Sofgjyp9RaiNvCtcqnGCLkQz8aBJc7
tdqAt5z0Kx5qx69RoxdOP022QNMmF/JKjGyY1xrkpg3+U7asNlRmIKHvV/chaoka
ZnJivAYMaBm/Pwgpfg6mH1PGBNGLuzWKyhQMySKXWjRi26JVoQ91OCodcxv7+H52
02DI+RZkgOiv8ndslJPLQOSQL6B97Qsi2NKizE3HThNXpv55CtvolJ9ZaE+KhnLy
PvRzOhXiTBg4nkWNGL6L0AwFEde/r5rNnHFNGv6X/0BRaeKuzYhnI34ZJN2O1wwB
FryfFydYbqq54KDlDOKI73JD1VKUKPFK7sT9zPELteJwdLE0dQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFNyJvNaBmAqoyOiL/TKWOlgCgCJhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNk
OGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZiYTQwM2Y0NDIvYmJkNGNiNDEtNmVhNS0z
NWNjLWIzZTMtODQ5YzM1MzkzMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjMzZDhlZWYtNTFkZi00ODdiLTll
ZGItZjE2YmE0MDNmNDQyLzIzM2Q4ZWVmLTUxZGYtNDg3Yi05ZWRiLWYxNmJhNDAz
ZjQ0Mi5jcmwwHwYDVR0jBBgwFoAUVoUG6oo0R7YSsaIf3t1ae2CBbzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzNkOGVlZi01MWRmLTQ4N2ItOWVkYi1mMTZi
YTQwM2Y0NDIuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAwGb/MBYE
AgACMBADBgAmBzOAAAMGACYHM4AQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANp4ZszQz69pTQUV6oVoPNt6
XKzrUw5xmV4MNqGNTZRp7S1tisuGRoSuMdmM937eE1WPCaCHX3PqQZLmxAHlQDXx
PmC0W2aPW2NxrhWtslV2INRdwIk+vPE8vXYdPI8g34qYldcjekch0ebGZ0+2Ajs+
7ooeFSl09xuclfnVJtQGglbQpJfH0EIkAi5ATDJsrNlRzhzswO9YvDCzgDcpoAK2
Geb0OsSbpNX+j+L3YH4ymBxDa8adU0/1zSVItmxOqjpncItTgtOpOrWxzwF7Csg2
fnWEhDfK6TrL0wg5CucXCepjnKf7P9Bp6tL4JLikk/F9pSb3zRx1a5gh+RGKxFY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:16:08 2025 by rpki-client