Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce3388d2-c49c-3762-9ae3-43b626dc180b.roa
File:                     ce3388d2-c49c-3762-9ae3-43b626dc180b.roa (raw, json)
Hash identifier:          w8mwDaqrk119NZfEUT1o+BTh77ShkhcQzpCvSjPimQM=
Subject key identifier:   8C:5F:8C:6B:44:42:7C:7A:B1:B1:BA:79:19:38:5E:56:0B:94:64:F8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F715483CFE7DAAD68D3D56C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce3388d2-c49c-3762-9ae3-43b626dc180b.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     202623
IP address blocks:        198.41.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:48:3c:fe:7d:aa:d6:8d:3d:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=c8dbaac0-cc98-4271-b9f7-d99cee1b0830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:d8:54:37:3c:9f:3f:62:1f:ac:c6:a2:98:
                    79:62:cd:65:d7:51:a5:b3:39:48:e1:2c:1b:54:aa:
                    6c:3b:5e:e4:8d:4c:41:d9:0d:9c:86:3c:68:aa:06:
                    95:8a:98:16:14:ee:6a:fb:4f:80:a4:ea:94:d4:9a:
                    1f:f8:d4:34:bc:78:63:02:de:20:84:e3:0c:26:ce:
                    93:f8:8c:be:88:76:46:7e:29:a2:42:c4:b2:72:12:
                    51:89:83:b9:57:59:3c:e6:97:4f:bb:74:5e:0a:e9:
                    25:86:57:d0:82:4f:cd:4e:2c:8d:06:f8:ae:38:55:
                    5e:b3:c3:06:29:01:c9:d7:63:84:27:cb:f2:6c:bd:
                    36:59:df:3d:61:8a:6b:aa:83:b1:ea:3c:05:a5:25:
                    32:2a:da:e9:ea:fc:e9:64:75:13:70:21:f5:af:15:
                    7e:08:44:26:7c:45:c0:0d:62:a8:e7:79:02:73:ca:
                    21:8c:ba:1a:97:96:fd:03:e0:56:19:f6:ab:08:a4:
                    af:af:21:39:35:47:ba:5e:1b:83:80:d1:fe:2c:20:
                    9c:51:bf:aa:f8:24:6b:47:00:73:33:64:17:90:b9:
                    f4:2e:50:c8:ef:d5:fe:13:3d:35:68:34:21:d0:85:
                    75:f5:2b:b6:40:7d:39:ca:51:e0:b9:9a:9f:4d:59:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5F:8C:6B:44:42:7C:7A:B1:B1:BA:79:19:38:5E:56:0B:94:64:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ce3388d2-c49c-3762-9ae3-43b626dc180b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:48:ee:3f:db:4d:2a:49:bf:47:5a:b1:4c:26:c4:a2:36:
         a2:b7:59:75:ed:b3:de:5c:36:87:1a:64:8c:be:b6:53:49:d7:
         5e:75:2e:14:cc:c8:7d:c5:50:af:b3:bc:d3:03:28:ef:93:bf:
         ed:91:d4:f5:4b:85:05:b4:c9:01:61:c7:0a:62:5d:3a:33:f4:
         03:9d:de:4e:73:4c:01:e6:c8:aa:8f:37:1c:1c:44:ce:95:f9:
         36:77:f1:fc:87:96:e7:b7:d1:ff:c0:14:84:60:6e:b8:02:f1:
         64:df:9f:79:e7:03:e9:ce:5f:ca:0b:52:50:a9:08:6c:3a:77:
         28:e8:5c:3a:e2:77:83:61:74:33:ff:b1:03:0a:5a:e3:cc:df:
         6f:37:75:1a:e0:cc:05:4a:24:5a:22:ef:65:44:5f:3f:ee:53:
         5d:96:7e:ae:31:1c:8c:7c:9a:c8:c3:ff:29:78:67:48:69:88:
         ad:a4:d5:c2:15:2a:b7:14:04:a0:a6:ad:ba:de:2a:0f:08:75:
         2d:22:2f:1d:a8:3f:07:e0:24:85:e6:8d:37:be:a8:33:14:6c:
         13:c6:38:17:d8:e9:a7:17:2a:28:3f:94:47:60:80:82:2e:52:
         0c:75:ea:b4:91:37:a8:78:81:24:c4:2e:eb:55:08:df:67:15:
         02:99:73:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FUg8/n2q1o09VsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
YzhkYmFhYzAtY2M5OC00MjcxLWI5ZjctZDk5Y2VlMWIwODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7jYVDc8nz9iH6zGoph5Ys1l11GlszlI4Swb
VKpsO17kjUxB2Q2chjxoqgaVipgWFO5q+0+ApOqU1Jof+NQ0vHhjAt4ghOMMJs6T
+Iy+iHZGfimiQsSychJRiYO5V1k85pdPu3ReCuklhlfQgk/NTiyNBviuOFVes8MG
KQHJ12OEJ8vybL02Wd89YYprqoOx6jwFpSUyKtrp6vzpZHUTcCH1rxV+CEQmfEXA
DWKo53kCc8ohjLoal5b9A+BWGfarCKSvryE5NUe6XhuDgNH+LCCcUb+q+CRrRwBz
M2QXkLn0LlDI79X+Ez01aDQh0IV19Su2QH05ylHguZqfTVmUgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxfjGtEQnx6sbG6eRk4XlYLlGT4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2UzMzg4ZDItYzQ5Yy0z
NzYyLTlhZTMtNDNiNjI2ZGMxODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAximUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACK0SO4/200qSb9HWrFMJsSiNqK3WXXts95cNocaZIy+tlNJ1151LhTM
yH3FUK+zvNMDKO+Tv+2R1PVLhQW0yQFhxwpiXToz9AOd3k5zTAHmyKqPNxwcRM6V
+TZ38fyHlue30f/AFIRgbrgC8WTfn3nnA+nOX8oLUlCpCGw6dyjoXDrid4NhdDP/
sQMKWuPM3283dRrgzAVKJFoi72VEXz/uU12Wfq4xHIx8msjD/yl4Z0hpiK2k1cIV
KrcUBKCmrbreKg8IdS0iLx2oPwfgJIXmjTe+qDMUbBPGOBfY6acXKig/lEdggIIu
Ugx16rSRN6h4gSTELutVCN9nFQKZc8E=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:43:43 2025 by rpki-client