Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa
File:                     5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa (raw, json)
Hash identifier:          DRAxokIVzD14n5O0TfJt3/MILGcLYJk2glanScSH0VA=
Subject key identifier:   3C:6B:3B:6D:69:CF:3B:8A:E2:17:28:E3:C4:D3:9C:3C:90:B8:8C:8E
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F4328584878BB01F839B1412144833600
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     27198
IP address blocks:        149.160.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:01:f8:39:b1:41:21:44:83:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=65f32009-e0de-4fa7-aacf-22f99695e4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:94:f8:7c:b1:6f:6e:85:bf:cf:d2:15:d2:
                    9c:b5:82:24:8c:8f:65:38:6d:ff:8c:5e:8e:8f:66:
                    e4:44:ef:0c:69:93:9f:3c:33:c7:09:7a:b6:48:c3:
                    2b:3f:b8:f1:b3:ff:47:6f:13:0f:d7:a0:22:e5:20:
                    47:6a:b5:39:e1:71:95:00:03:ed:88:d0:c4:20:58:
                    8e:6a:bb:c5:96:aa:65:65:8e:52:28:87:aa:5e:26:
                    dc:e2:0b:6a:96:50:af:18:97:a5:72:dc:97:21:0a:
                    8a:3e:9e:50:e1:a3:4a:07:e3:18:34:64:48:e5:cf:
                    9f:e7:d0:7b:1f:26:59:be:f1:d8:29:19:56:17:6f:
                    aa:c0:20:d7:0d:62:7c:d5:5c:a0:89:a6:3e:e3:0a:
                    5e:0c:9b:d5:75:a2:d0:63:e7:13:b9:f9:5c:85:b0:
                    e9:6c:5f:ac:61:5d:c2:ee:ff:9d:27:31:48:66:8a:
                    67:11:d8:b8:04:c7:25:6e:2e:ee:1c:8f:f1:ae:7b:
                    cf:3a:7a:4c:24:65:4f:7a:9a:10:01:39:5b:80:a9:
                    ed:bd:a5:1d:c8:58:1a:b1:30:65:e4:de:53:0c:c7:
                    1a:72:90:46:bd:8c:0f:e9:4f:32:c0:29:ad:5b:fd:
                    18:ac:19:02:0d:3f:b4:f5:20:ce:15:1e:e2:17:97:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6B:3B:6D:69:CF:3B:8A:E2:17:28:E3:C4:D3:9C:3C:90:B8:8C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.160.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:1f:d9:04:e6:0e:ce:82:c0:24:c7:03:b0:03:c6:25:94:
         e0:b2:ef:dc:51:dd:2e:0f:cf:0b:f7:f7:01:39:e1:fa:2e:ed:
         a8:0e:a0:76:93:3e:0a:03:d7:bb:18:a6:2e:13:a9:1b:82:95:
         c3:9e:b7:e6:e6:e8:80:b1:bc:1f:45:90:19:99:0a:61:09:c0:
         3d:69:be:b2:8f:a0:87:5d:87:36:87:08:54:9a:5c:5e:74:41:
         50:a6:f5:f5:01:46:7e:98:b8:6c:07:5d:ce:45:a1:73:c0:7c:
         91:e9:fc:40:82:2b:d0:64:4e:9e:85:e8:9c:cf:54:c6:e6:f1:
         ec:0f:7b:21:f7:14:11:62:6d:ae:d6:41:ce:c3:13:97:5b:47:
         02:de:23:a4:f8:b5:9b:87:87:6b:49:8a:00:b3:ea:53:47:49:
         d7:98:1d:60:2b:5c:0d:f3:d7:0e:4b:0b:d6:67:49:d5:36:9c:
         ee:87:8f:4e:6a:e6:42:8c:15:cd:8f:a4:0c:bd:f7:c3:50:57:
         ae:e6:de:0f:84:46:23:c5:b0:f2:c5:f7:2e:36:59:6d:14:1e:
         8b:30:83:13:da:95:96:d2:28:74:61:c7:aa:c3:cb:5e:49:d7:
         8f:2d:27:0b:df:61:eb:4c:2c:80:bc:2e:7b:62:8e:ec:6a:af:
         31:64:02:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4uwH4ObFBIUSDNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx
NTZiMB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
NjVmMzIwMDktZTBkZS00ZmE3LWFhY2YtMjJmOTk2OTVlNGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGeU+Hyxb26Fv8/SFdKctYIkjI9lOG3/jF6O
j2bkRO8MaZOfPDPHCXq2SMMrP7jxs/9HbxMP16Ai5SBHarU54XGVAAPtiNDEIFiO
arvFlqplZY5SKIeqXibc4gtqllCvGJelctyXIQqKPp5Q4aNKB+MYNGRI5c+f59B7
HyZZvvHYKRlWF2+qwCDXDWJ81VygiaY+4wpeDJvVdaLQY+cTuflchbDpbF+sYV3C
7v+dJzFIZopnEdi4BMclbi7uHI/xrnvPOnpMJGVPepoQATlbgKntvaUdyFgasTBl
5N5TDMcacpBGvYwP6U8ywCmtW/0YrBkCDT+09SDOFR7iF5ecQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxrO21pzzuK4hco48TTnDyQuIyOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm
Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvNWI5MGNjY2YtZjA1ZS0z
MzJjLThkZmEtOTRhOWU3ZWEzNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl
MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy
MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi
OGM3MjE1NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlaCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/PH9kE5g7OgsAkxwOwA8YllOCy79xR3S4Pzwv39wE54fou7agOoHaT
PgoD17sYpi4TqRuClcOet+bm6ICxvB9FkBmZCmEJwD1pvrKPoIddhzaHCFSaXF50
QVCm9fUBRn6YuGwHXc5FoXPAfJHp/ECCK9BkTp6F6JzPVMbm8ewPeyH3FBFiba7W
Qc7DE5dbRwLeI6T4tZuHh2tJigCz6lNHSdeYHWArXA3z1w5LC9ZnSdU2nO6Hj05q
5kKMFc2PpAy998NQV67m3g+ERiPFsPLF9y42WW0UHoswgxPalZbSKHRhx6rDy15J
148tJwvfYetMLIC8LntijuxqrzFkAqo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:46:06 2025 by rpki-client