Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/fcefb301-c499-3267-ac4e-ebad1f786e73.roa
File:                     fcefb301-c499-3267-ac4e-ebad1f786e73.roa (raw, json)
Hash identifier:          kaK8/kLrgIPSyGS7dMuzpsVYxckt4Bwpa3UWEUE6cws=
Subject key identifier:   34:A8:59:C3:57:42:C0:34:98:D6:77:F7:69:85:C0:6D:DD:4F:C0:76
Certificate issuer:       /CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
Certificate serial:       010D0C9F43285848FA8BEE774E5E49F7881B8400
Authority key identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/fcefb301-c499-3267-ac4e-ebad1f786e73.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     199610
IP address blocks:        162.244.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:ee:77:4e:5e:49:f7:88:1b:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=0c04b3fe-a889-4709-97ea-9ecd856c2dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:95:b0:f3:2f:ed:50:ad:eb:0e:0b:b6:7d:
                    c1:d3:77:41:31:d8:31:e5:2f:67:49:50:bf:e0:77:
                    f0:81:b5:c3:c0:7a:92:25:f4:53:35:d6:7e:79:77:
                    6f:32:86:9a:b4:70:70:f7:a3:1d:cf:97:3d:f9:b9:
                    c3:44:fe:1c:37:72:c7:bc:1b:67:f1:12:07:c8:37:
                    95:5a:91:e1:54:cc:d7:af:0e:d2:07:62:a8:61:6a:
                    27:6e:73:ac:cb:82:1a:13:a1:6f:92:df:4a:c1:39:
                    a9:1c:41:03:43:1e:ff:d4:a4:1b:c2:b5:78:f5:ac:
                    30:a8:6c:13:95:44:2b:bc:e5:de:94:59:49:2e:84:
                    66:e8:12:b4:5d:1c:54:ac:95:c4:14:b8:f6:0a:59:
                    c7:f5:00:5c:29:17:28:8f:6c:a2:a4:38:d9:0a:ee:
                    5d:f9:1f:b6:a8:4f:26:a4:a0:23:82:e4:bf:2f:3d:
                    9c:3c:b9:bc:ce:91:7c:d1:be:42:c7:ff:2d:5b:88:
                    97:c2:81:a4:bb:6f:f9:d1:5f:31:f2:47:01:cb:9c:
                    e4:97:9a:5c:69:5e:97:35:70:d8:af:23:ad:07:46:
                    36:bc:f8:33:2d:6a:05:d4:96:a6:5e:ca:7c:7f:fc:
                    23:f6:61:a9:e6:d2:09:8e:5f:d3:8e:6a:ed:a5:d7:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A8:59:C3:57:42:C0:34:98:D6:77:F7:69:85:C0:6D:DD:4F:C0:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/fcefb301-c499-3267-ac4e-ebad1f786e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl

            X509v3 Authority Key Identifier:
                keyid:8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:be:11:fb:52:4a:72:cf:09:d4:5d:df:2d:a5:17:e1:1f:2f:
         28:7c:7f:67:1b:8d:23:11:bc:f8:3f:53:8b:13:92:3d:41:a4:
         9b:da:ed:bc:72:22:d7:3c:c8:fc:c9:5f:fb:53:4b:f9:50:24:
         68:b8:a2:8e:ec:63:86:a4:b2:e7:d7:1c:13:cf:5d:12:4d:f6:
         62:62:b4:c5:90:59:ac:fb:58:bd:2f:d2:4d:9b:9f:f0:3a:a7:
         5e:3c:22:46:04:f1:4a:33:a0:13:0c:8a:4c:ce:6f:3c:5a:09:
         a8:ec:80:3a:f6:86:29:cd:f4:b0:94:9d:f6:a2:66:6b:fd:0a:
         be:94:61:6c:0a:59:f8:cd:9e:b4:18:6b:34:26:b2:7d:5c:6d:
         f2:ba:df:66:3f:29:45:b9:2b:72:5a:85:eb:b1:7c:9c:a2:25:
         87:7d:9e:91:f5:58:f5:89:1a:e4:c4:ad:7e:71:c6:76:ad:b3:
         9f:59:5a:b9:1e:62:b2:a0:75:09:29:76:ff:b2:9d:4a:91:77:
         2b:09:e3:47:37:fa:df:12:0f:0f:ff:32:26:64:d6:e4:ee:30:
         e3:91:c2:e0:0e:e5:5c:08:b3:99:d2:59:3c:29:af:17:55:ac:
         3c:54:82:f8:d2:f5:ec:f3:12:ed:80:81:00:ca:f4:3d:6e:92:
         66:8d:62:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj6i+53Tl5J94gbhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYwMDc4Y2UtMDgyZC00ZmY0LTk1NTgtZDFhMGYwZDFl
Y2RkMB4XDTI1MDIyMzE0MDA1MVoXDTI1MDUyNDEzMDA1MVowLzEtMCsGA1UEAxMk
MGMwNGIzZmUtYTg4OS00NzA5LTk3ZWEtOWVjZDg1NmMyZGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon2VsPMv7VCt6w4Ltn3B03dBMdgx5S9nSVC/
4HfwgbXDwHqSJfRTNdZ+eXdvMoaatHBw96Mdz5c9+bnDRP4cN3LHvBtn8RIHyDeV
WpHhVMzXrw7SB2KoYWonbnOsy4IaE6Fvkt9KwTmpHEEDQx7/1KQbwrV49awwqGwT
lUQrvOXelFlJLoRm6BK0XRxUrJXEFLj2ClnH9QBcKRcoj2yipDjZCu5d+R+2qE8m
pKAjguS/Lz2cPLm8zpF80b5Cx/8tW4iXwoGku2/50V8x8kcBy5zkl5pcaV6XNXDY
ryOtB0Y2vPgzLWoF1JamXsp8f/wj9mGp5tIJjl/Tjmrtpde9kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSoWcNXQsA0mNZ392mFwG3dT8B2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAw
NzhjZS0wODJkLTRmZjQtOTU1OC1kMWEwZjBkMWVjZGQvZmNlZmIzMDEtYzQ5OS0z
MjY3LWFjNGUtZWJhZDFmNzg2ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYwMDc4Y2UtMDgyZC00ZmY0LTk1
NTgtZDFhMGYwZDFlY2RkLzI2MDA3OGNlLTA4MmQtNGZmNC05NTU4LWQxYTBmMGQx
ZWNkZC5jcmwwHwYDVR0jBBgwFoAUjnxU7fH4qSjSSrSrh3nYQxhLqeUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAwNzhjZS0wODJkLTRmZjQtOTU1OC1kMWEw
ZjBkMWVjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovSkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACe+EftSSnLPCdRd3y2lF+EfLyh8f2cbjSMRvPg/U4sTkj1BpJva7bxy
Itc8yPzJX/tTS/lQJGi4oo7sY4aksufXHBPPXRJN9mJitMWQWaz7WL0v0k2bn/A6
p148IkYE8UozoBMMikzObzxaCajsgDr2hinN9LCUnfaiZmv9Cr6UYWwKWfjNnrQY
azQmsn1cbfK632Y/KUW5K3JaheuxfJyiJYd9npH1WPWJGuTErX5xxnats59ZWrke
YrKgdQkpdv+ynUqRdysJ40c3+t8SDw//MiZk1uTuMOORwuAO5VwIs5nSWTwprxdV
rDxUgvjS9ezzEu2AgQDK9D1ukmaNYrw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:31 2025 by rpki-client