Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
File:                     f3449d09-d701-35da-bb14-a8ab89190e72.roa (raw, json)
Hash identifier:          pGdWQiZ3EYNUWYBpyH31HN8BQoeS5oeUIWVxfUJqi/M=
Subject key identifier:   45:36:DC:02:B1:AC:9B:B8:AD:6F:2D:E3:49:B1:0B:C9:A9:D9:E1:F0
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F43285849DC8FBABFEF3D200153176740
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        168.151.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:ba:bf:ef:3d:20:01:53:17:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=b4ad1e94-426b-4a9f-99a1-979022fae3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:c8:5b:33:c0:de:49:b9:10:34:f2:d5:37:
                    b2:9e:02:f2:1a:aa:a5:24:94:f7:d2:c2:80:b7:e9:
                    c5:7f:d8:3f:98:0a:fd:fc:4b:9b:e5:43:40:36:bc:
                    7f:de:5e:38:c2:aa:01:d5:4b:17:5d:6f:e2:12:be:
                    b5:75:ab:4b:5c:5a:91:e3:fb:7a:6f:e5:90:53:91:
                    de:90:e0:fc:59:dc:2a:1e:fa:25:e3:f6:65:3a:a3:
                    58:ce:2c:8e:c2:a4:f8:5e:fa:c6:b8:8f:a5:99:1a:
                    29:0e:4b:bf:6c:4d:c2:7e:1f:1e:14:52:f4:af:c1:
                    2a:f1:85:50:69:8a:1f:fd:bd:fe:6b:56:13:d2:9f:
                    73:15:04:08:19:bb:d5:a9:da:4b:15:86:1c:6c:7b:
                    2a:4d:1c:49:36:cf:7b:57:63:f2:fd:e8:b9:93:0c:
                    34:e5:c5:8c:a3:68:85:4f:03:ba:55:e2:23:20:38:
                    ed:37:c2:85:7a:11:e9:73:8a:84:32:44:a9:74:ad:
                    19:88:98:0c:fd:a1:9d:34:5e:18:60:e6:28:96:b0:
                    71:b7:52:a9:06:8f:a6:92:bb:8f:b4:ae:40:6e:24:
                    f1:f9:66:9b:42:6c:01:f1:20:6a:e1:e9:72:b7:d3:
                    25:2b:e8:36:91:36:37:83:5d:3a:8a:b6:ef:53:c2:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:36:DC:02:B1:AC:9B:B8:AD:6F:2D:E3:49:B1:0B:C9:A9:D9:E1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f3449d09-d701-35da-bb14-a8ab89190e72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d2:24:2c:e9:82:84:b2:49:73:c6:03:40:30:5a:9c:5d:fa:
         da:1b:ec:c6:7f:04:ad:ff:65:c9:24:f2:1e:fc:3b:20:8a:fd:
         76:c9:b1:fe:29:05:fc:c9:ff:b7:8a:8b:77:5b:01:98:ab:22:
         0a:d5:01:c0:b0:66:7d:57:26:fc:70:ff:34:24:11:e8:6f:12:
         2a:e6:cf:8b:aa:5b:99:e4:92:7f:46:fd:d5:23:a6:a9:e6:14:
         9d:10:5b:6f:fa:3d:c4:18:2f:b1:08:d2:fc:0e:33:fe:93:2d:
         03:ee:53:fd:e2:55:6c:b0:ca:a5:77:c8:50:43:f7:bd:4d:04:
         e0:4a:09:6b:15:39:bd:ec:20:ab:f8:fd:ac:7d:41:96:3b:56:
         cc:d9:bd:45:a2:f5:ef:7a:03:85:62:fd:b6:67:a2:d4:9a:50:
         81:5e:d7:dc:cc:28:e6:e1:fa:d9:5a:97:33:00:9a:a3:04:be:
         4d:35:12:0b:2c:b3:a8:e8:81:da:9d:1c:5f:ab:87:bf:98:b3:
         69:4a:09:40:98:9d:c8:08:0d:f4:bf:88:9c:4e:e4:a8:9f:a0:
         af:f8:28:38:b0:b6:6c:54:62:e5:64:e9:70:f8:8d:3e:3e:25:
         2a:81:7a:88:05:20:54:39:d5:0b:60:47:71:1e:8f:7d:94:37:
         7e:e7:13:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7q/7z0gAVMXZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5
M2E4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
YjRhZDFlOTQtNDI2Yi00YTlmLTk5YTEtOTc5MDIyZmFlM2Q2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VHIWzPA3km5EDTy1TeyngLyGqqlJJT30sKA
t+nFf9g/mAr9/Eub5UNANrx/3l44wqoB1UsXXW/iEr61datLXFqR4/t6b+WQU5He
kOD8WdwqHvol4/ZlOqNYziyOwqT4XvrGuI+lmRopDku/bE3Cfh8eFFL0r8Eq8YVQ
aYof/b3+a1YT0p9zFQQIGbvVqdpLFYYcbHsqTRxJNs97V2Py/ei5kww05cWMo2iF
TwO6VeIjIDjtN8KFehHpc4qEMkSpdK0ZiJgM/aGdNF4YYOYolrBxt1KpBo+mkruP
tK5AbiTx+WabQmwB8SBq4elyt9MlK+g2kTY3g106irbvU8I0gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEU23AKxrJu4rW8t40mxC8mp2eHwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw
NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvZjM0NDlkMDktZDcwMS0z
NWRhLWJiMTQtYThhYjg5MTkwZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4
ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx
OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi
ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3SJCzpgoSySXPGA0AwWpxd+tob7MZ/BK3/Zckk8h78OyCK/XbJsf4p
BfzJ/7eKi3dbAZirIgrVAcCwZn1XJvxw/zQkEehvEirmz4uqW5nkkn9G/dUjpqnm
FJ0QW2/6PcQYL7EI0vwOM/6TLQPuU/3iVWywyqV3yFBD971NBOBKCWsVOb3sIKv4
/ax9QZY7VszZvUWi9e96A4Vi/bZnotSaUIFe19zMKObh+tlalzMAmqMEvk01Egss
s6jogdqdHF+rh7+Ys2lKCUCYncgIDfS/iJxO5KifoK/4KDiwtmxUYuVk6XD4jT4+
JSqBeogFIFQ51QtgR3Eej32UN37nE3s=
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:54:45 2025 by rpki-client