Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa
File:                     eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa (raw, json)
Hash identifier:          tRh7D5RqyfTAXFSuWoZV2Epy53IopbdlyR+vf2wAKvU=
Subject key identifier:   FE:05:0C:B9:64:DB:D2:EF:C6:40:5D:33:23:CD:56:85:D2:77:9A:D6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584902EC35156CCFB8BBEC30CA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     202623
IP address blocks:        198.41.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:35:15:6c:cf:b8:bb:ec:30:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=2e3b2f46-5fa4-4a45-9cf2-958cc952e0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:e8:ce:59:ae:6b:94:20:06:9a:38:69:89:
                    b2:93:95:c1:39:83:a7:41:2c:d6:53:b1:a6:c2:3e:
                    1f:cd:af:b5:77:07:9c:b0:da:d2:8e:97:85:15:5b:
                    32:b5:6d:bb:fe:8c:1b:a1:27:c3:3f:c0:a9:f5:df:
                    70:c7:92:2e:0b:a3:2c:a9:ff:fa:f7:4b:a8:b5:6d:
                    a8:4e:84:eb:e3:bf:1f:aa:dc:c8:a2:04:e2:9d:57:
                    dd:e8:18:09:56:f3:0e:47:8c:40:99:ad:5e:ea:5b:
                    4a:87:15:f7:ab:02:c3:68:05:72:b6:be:14:4e:e0:
                    b2:25:0b:29:ec:35:b9:34:58:51:36:f6:59:b1:c6:
                    7f:71:c9:15:a7:f1:45:8d:77:70:eb:b8:5a:06:c4:
                    76:e0:bc:47:29:c2:76:b0:22:15:05:03:e1:54:3e:
                    3f:de:6b:85:05:a2:7f:0b:8b:c1:77:9c:54:a5:62:
                    f5:b6:d8:94:1b:8e:73:7d:2f:89:c3:9e:8e:9e:6b:
                    d7:3e:a7:82:b4:5a:bc:15:50:a3:f5:e0:bd:eb:b8:
                    56:39:e5:b4:92:12:f8:fe:2b:e4:d2:ae:2e:0b:ea:
                    25:02:c9:0c:a4:b5:6b:34:43:cc:c9:ed:2e:3e:94:
                    56:31:82:4b:b2:3c:4f:12:7b:33:a5:ba:34:68:a1:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:05:0C:B9:64:DB:D2:EF:C6:40:5D:33:23:CD:56:85:D2:77:9A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e9:5c:0c:10:43:95:cc:80:75:bf:eb:17:f1:23:8d:be:5a:
         1b:bf:01:00:22:58:39:8c:54:d3:3f:11:a3:4e:5c:80:38:e3:
         7a:68:c5:8f:61:96:6b:bd:50:81:f3:36:9b:ad:0a:d8:35:e1:
         da:92:fd:2e:df:ec:f0:42:2a:f3:10:e5:68:b7:bb:66:0d:1a:
         01:da:49:77:d6:13:0f:88:e9:43:42:30:05:c5:6b:05:7e:2c:
         bf:ca:52:bb:12:16:c7:24:cf:f4:71:31:08:b8:83:78:8c:97:
         d8:68:76:45:bf:7a:5a:8d:fa:9e:7e:a9:f1:44:b1:44:81:f6:
         27:b7:b0:fb:3a:f8:92:d8:30:38:f5:fa:07:fa:b3:5e:43:f6:
         42:a8:af:04:88:31:1e:68:c9:0d:97:fa:f9:b5:73:f6:a3:97:
         6a:88:a8:60:1c:92:8f:23:10:a3:ea:20:e2:7b:fb:61:f7:4e:
         ef:5a:ce:a7:e9:0a:ec:6a:8f:1a:58:2b:06:46:7e:4c:22:2f:
         a4:69:5c:d7:ac:5b:78:de:64:1f:e1:b5:43:61:d4:8e:e0:3f:
         39:6a:95:4a:e7:ba:ce:dd:eb:ac:cd:ae:68:ed:3f:9e:4b:7e:
         66:3b:30:51:45:38:59:6b:51:fa:55:12:69:10:4f:82:12:52:
         b1:d6:6f:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DUVbM+4u+wwyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MmUzYjJmNDYtNWZhNC00YTQ1LTljZjItOTU4Y2M5NTJlMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwjozlmua5QgBpo4aYmyk5XBOYOnQSzWU7Gm
wj4fza+1dwecsNrSjpeFFVsytW27/owboSfDP8Cp9d9wx5IuC6Msqf/690uotW2o
ToTr478fqtzIogTinVfd6BgJVvMOR4xAma1e6ltKhxX3qwLDaAVytr4UTuCyJQsp
7DW5NFhRNvZZscZ/cckVp/FFjXdw67haBsR24LxHKcJ2sCIVBQPhVD4/3muFBaJ/
C4vBd5xUpWL1ttiUG45zfS+Jw56OnmvXPqeCtFq8FVCj9eC967hWOeW0khL4/ivk
0q4uC+olAskMpLVrNEPMye0uPpRWMYJLsjxPEnszpbo0aKGb0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4FDLlk29LvxkBdMyPNVoXSd5rWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWVjMWU4NGUtYWE5ZS0z
YjQ0LTg4ZGItYzgwMmJmOGE3ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxin9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXpXAwQQ5XMgHW/6xfxI42+Whu/AQAiWDmMVNM/EaNOXIA443poxY9h
lmu9UIHzNputCtg14dqS/S7f7PBCKvMQ5Wi3u2YNGgHaSXfWEw+I6UNCMAXFawV+
LL/KUrsSFsckz/RxMQi4g3iMl9hodkW/elqN+p5+qfFEsUSB9ie3sPs6+JLYMDj1
+gf6s15D9kKorwSIMR5oyQ2X+vm1c/ajl2qIqGAcko8jEKPqIOJ7+2H3Tu9azqfp
CuxqjxpYKwZGfkwiL6RpXNesW3jeZB/htUNh1I7gPzlqlUrnus7d66zNrmjtP55L
fmY7MFFFOFlrUfpVEmkQT4ISUrHWb3g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:18 2025 by rpki-client