Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9b15bd3-db7c-3d34-8686-bf215def334a.roa
File:                     c9b15bd3-db7c-3d34-8686-bf215def334a.roa (raw, json)
Hash identifier:          OkyhixDZa62RF1gojSIJl7zl16IsStaIaQnBoddO6Ng=
Subject key identifier:   14:25:BF:A9:85:25:5C:CE:66:E3:88:85:04:36:FF:BF:EF:67:07:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6E03CB9FDEB69AC7F4100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9b15bd3-db7c-3d34-8686-bf215def334a.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33490
IP address blocks:        76.144.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:e0:3c:b9:fd:eb:69:ac:7f:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=f88d390e-cebb-40d2-acbb-e987e938c5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:3a:1c:ed:1f:65:f2:6a:ff:a2:72:35:76:
                    09:58:88:0a:bf:5d:bf:e8:da:d9:d0:dd:47:ad:ce:
                    29:b8:f4:e9:01:2a:f5:18:e3:36:fc:5d:55:60:15:
                    f7:e6:ba:eb:e1:c8:fa:48:6d:23:d0:2e:72:17:ba:
                    18:64:2a:46:fb:72:9b:29:6f:f1:6a:3b:3a:dd:9a:
                    aa:f9:d8:99:7c:7e:c2:cf:fd:4b:e5:33:4a:bf:97:
                    99:d8:43:34:2f:21:87:b6:8c:35:44:c0:c5:66:47:
                    49:fd:f0:3c:c8:48:1f:76:bf:7f:79:da:e8:0c:c6:
                    e5:7a:bf:ea:55:d5:14:64:67:fd:02:51:dc:61:bc:
                    05:59:c1:a4:44:69:ea:61:90:ea:13:b0:03:1c:d3:
                    9b:40:55:03:b4:4b:b1:52:ed:2e:86:53:8a:99:ae:
                    fe:36:49:c9:c7:85:da:34:53:4e:55:94:23:41:34:
                    9e:08:ed:1e:3a:b5:03:70:71:52:52:ea:39:3a:05:
                    ec:d2:f4:c4:60:06:ad:75:e2:ff:45:d1:fd:c6:5c:
                    14:0a:97:09:f9:6f:e9:e5:af:71:ce:bd:fe:15:83:
                    b6:f5:dc:0a:ea:f4:7f:94:bd:9e:14:63:0f:a1:58:
                    1f:47:80:89:53:86:81:e6:1c:d5:44:0e:0d:b5:c0:
                    5f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:25:BF:A9:85:25:5C:CE:66:E3:88:85:04:36:FF:BF:EF:67:07:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9b15bd3-db7c-3d34-8686-bf215def334a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.144.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:3d:18:ec:6c:04:35:18:de:54:7b:68:64:00:62:db:74:36:
         6d:2b:52:f7:f5:66:84:1a:5b:85:2b:5c:95:cd:11:8c:c6:75:
         d3:ef:df:07:ca:d9:37:9f:22:e4:a1:ad:8b:dc:89:7a:b0:40:
         dc:d6:41:5d:cd:79:f3:aa:f9:b9:8c:cc:6e:b2:17:8f:f6:c6:
         7a:98:2c:7a:45:e5:51:9b:b1:6f:0f:32:53:4f:19:6c:e5:01:
         ef:b3:60:8f:05:90:31:c8:71:db:b7:e8:ef:05:eb:62:4f:b2:
         af:56:b3:2f:f1:94:0e:53:9b:ae:9e:6c:1b:57:79:e1:7f:82:
         38:9c:4b:4d:b0:3b:ac:73:f6:c5:9a:6b:72:6a:40:09:84:9a:
         d8:cd:e3:00:53:b6:9d:13:d6:44:fa:80:d4:0f:8c:29:64:7e:
         5f:88:d8:f3:19:69:b5:04:f5:c5:89:83:ab:43:37:eb:94:1a:
         e3:90:c6:47:ea:17:05:47:d1:37:5a:e9:30:3f:db:7b:27:c8:
         ae:57:de:33:2f:d2:c8:a6:9e:a0:7f:29:06:40:e2:aa:71:2c:
         ab:85:fa:34:c8:41:80:db:a1:80:0d:7c:e9:83:d0:13:6b:b9:
         ba:06:0a:b4:ba:22:d4:22:6d:98:39:83:bf:2d:ba:3c:5f:14:
         82:66:60:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09uA8uf3raax/QQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
Zjg4ZDM5MGUtY2ViYi00MGQyLWFjYmItZTk4N2U5MzhjNWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbQ6HO0fZfJq/6JyNXYJWIgKv12/6NrZ0N1H
rc4puPTpASr1GOM2/F1VYBX35rrr4cj6SG0j0C5yF7oYZCpG+3KbKW/xajs63Zqq
+diZfH7Cz/1L5TNKv5eZ2EM0LyGHtow1RMDFZkdJ/fA8yEgfdr9/edroDMbler/q
VdUUZGf9AlHcYbwFWcGkRGnqYZDqE7ADHNObQFUDtEuxUu0uhlOKma7+NknJx4Xa
NFNOVZQjQTSeCO0eOrUDcHFSUuo5OgXs0vTEYAatdeL/RdH9xlwUCpcJ+W/p5a9x
zr3+FYO29dwK6vR/lL2eFGMPoVgfR4CJU4aB5hzVRA4NtcBfRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQlv6mFJVzOZuOIhQQ2/7/vZweOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzliMTViZDMtZGI3Yy0z
ZDM0LTg2ODYtYmYyMTVkZWYzMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJAMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANc9GOxsBDUY3lR7aGQAYtt0Nm0rUvf1ZoQaW4UrXJXNEYzGddPv3wfK
2TefIuShrYvciXqwQNzWQV3NefOq+bmMzG6yF4/2xnqYLHpF5VGbsW8PMlNPGWzl
Ae+zYI8FkDHIcdu36O8F62JPsq9Wsy/xlA5Tm66ebBtXeeF/gjicS02wO6xz9sWa
a3JqQAmEmtjN4wBTtp0T1kT6gNQPjClkfl+I2PMZabUE9cWJg6tDN+uUGuOQxkfq
FwVH0Tda6TA/23snyK5X3jMv0simnqB/KQZA4qpxLKuF+jTIQYDboYANfOmD0BNr
uboGCrS6ItQibZg5g78tujxfFIJmYGY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:45:50 2025 by rpki-client