Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa
File:                     5050e10f-3603-3531-ae6a-2649953d3026.roa (raw, json)
Hash identifier:          qu4emHL74xqVrZvOukIR7jrkE4IxVuh65qNGgTthBeQ=
Subject key identifier:   09:1C:B6:1E:D3:E4:B5:D0:4F:42:D0:3F:2A:E3:6B:03:35:92:AA:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581FD14CE115532908CA5C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        198.45.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:fd:14:ce:11:55:32:90:8c:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=848505d3-cada-4b92-9d3e-9159389a7c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:31:ae:1b:83:f3:b6:6d:66:86:bd:3d:46:
                    f5:89:a1:5a:8d:6e:70:71:f0:89:14:25:7f:34:9f:
                    aa:53:bd:09:a2:ff:bb:a1:b5:e8:25:17:b5:f9:32:
                    ad:76:57:4c:88:e7:7c:99:af:b1:d4:59:38:0b:60:
                    74:5a:38:25:30:ae:bd:69:cc:94:97:16:48:85:dd:
                    c9:85:03:5d:97:1c:fc:4d:a0:b4:50:b8:5d:e1:a9:
                    39:1a:fe:26:43:76:f0:86:03:ed:44:e8:cd:12:45:
                    24:b8:4f:ab:2d:51:31:7a:eb:2f:f3:bc:97:14:db:
                    66:0a:c2:00:78:14:72:f2:00:6d:73:32:39:e4:68:
                    67:f6:f7:a6:0e:ca:c0:ed:f7:db:f6:93:e9:3c:07:
                    6c:b2:2a:02:e3:96:84:64:41:09:8e:0c:0e:9a:9b:
                    54:41:1e:87:bc:e5:ad:40:42:31:3b:ac:a0:d3:70:
                    ef:dd:52:a5:7e:24:b4:7b:39:cf:3b:9c:f9:ee:9b:
                    79:53:46:75:0c:37:89:6f:ed:7c:65:5b:23:5d:c0:
                    95:8a:5e:13:06:7a:54:32:a8:04:f0:ca:b2:44:08:
                    95:25:60:60:02:cc:42:76:fd:4a:0d:09:c3:b4:c7:
                    f0:a7:61:f4:bc:a2:fe:dc:05:6d:39:7e:1a:ad:ce:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:B6:1E:D3:E4:B5:D0:4F:42:D0:3F:2A:E3:6B:03:35:92:AA:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fa:9f:8b:50:37:00:26:eb:c6:5e:0f:96:95:d1:c0:6e:4a:
         62:d0:5b:6a:f5:8e:e7:f6:7a:f8:d3:89:16:90:ff:57:22:8a:
         4c:44:d6:bf:97:ba:dd:d0:ab:68:68:f5:70:7b:86:80:0e:41:
         1a:45:03:0c:a6:11:91:f0:6c:81:80:9a:b4:90:f3:bf:14:0f:
         bf:1f:1b:90:8b:9b:4a:9a:22:1c:66:bd:82:06:19:64:e3:9e:
         4f:c3:0d:0a:9b:4d:a7:72:c3:f2:01:8e:1e:d8:41:2e:e0:f0:
         02:e1:79:c9:b0:a7:0c:f6:d1:23:9b:2d:f0:17:44:41:ad:cc:
         c1:ee:02:74:73:ea:fc:60:be:6d:5d:66:cb:40:ee:8d:7e:0a:
         a3:ed:83:cf:11:f5:51:1e:7b:a6:2d:00:70:f9:bf:c1:57:3e:
         18:fb:63:6f:f4:5a:44:fe:b8:0a:bc:16:b3:07:be:70:72:21:
         de:7d:a7:7d:80:3c:c8:38:9b:61:c9:a8:7a:34:12:e5:36:d6:
         38:22:a1:5a:5e:84:13:d6:75:a8:c1:bd:67:94:16:6e:cc:a2:
         93:82:c2:8c:f9:24:1e:ce:c5:68:93:36:78:f6:f0:73:ff:fc:
         39:ee:c2:b1:05:70:f9:36:a9:4e:26:7b:26:c7:b8:a5:23:59:
         16:f9:de:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf0UzhFVMpCMpcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODQ4NTA1ZDMtY2FkYS00YjkyLTlkM2UtOTE1OTM4OWE3YzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSgxrhuD87ZtZoa9PUb1iaFajW5wcfCJFCV/
NJ+qU70Jov+7obXoJRe1+TKtdldMiOd8ma+x1Fk4C2B0WjglMK69acyUlxZIhd3J
hQNdlxz8TaC0ULhd4ak5Gv4mQ3bwhgPtROjNEkUkuE+rLVExeusv87yXFNtmCsIA
eBRy8gBtczI55Ghn9vemDsrA7ffb9pPpPAdssioC45aEZEEJjgwOmptUQR6HvOWt
QEIxO6yg03Dv3VKlfiS0eznPO5z57pt5U0Z1DDeJb+18ZVsjXcCVil4TBnpUMqgE
8MqyRAiVJWBgAsxCdv1KDQnDtMfwp2H0vKL+3AVtOX4arc4BPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkcth7T5LXQT0LQPyrjawM1kqoIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTA1MGUxMGYtMzYwMy0z
NTMxLWFlNmEtMjY0OTk1M2QzMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJb6n4tQNwAm68ZeD5aV0cBuSmLQW2r1juf2evjTiRaQ/1ciikxE1r+X
ut3Qq2ho9XB7hoAOQRpFAwymEZHwbIGAmrSQ878UD78fG5CLm0qaIhxmvYIGGWTj
nk/DDQqbTadyw/IBjh7YQS7g8ALhecmwpwz20SObLfAXREGtzMHuAnRz6vxgvm1d
ZstA7o1+CqPtg88R9VEee6YtAHD5v8FXPhj7Y2/0WkT+uAq8FrMHvnById59p32A
PMg4m2HJqHo0EuU21jgioVpehBPWdajBvWeUFm7MopOCwoz5JB7OxWiTNnj28HP/
/DnuwrEFcPk2qU4meybHuKUjWRb53uk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:35 2025 by rpki-client