Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e0eaf500-96db-32b7-a733-f3ec8d6f657b.roa
File:                     e0eaf500-96db-32b7-a733-f3ec8d6f657b.roa (raw, json)
Hash identifier:          s5+eEu6mOk2mC0KzOliRKb0QYQl+yUzJtbYMgBe8nEk=
Subject key identifier:   41:41:FA:74:7C:79:E8:74:5E:02:B7:58:C7:17:46:C4:AA:DD:65:D7
Certificate issuer:       /CN=e3e4a23c-f99b-45fd-947d-f5496607a32a
Certificate serial:       010D0C9F43285848E16BD7CBA119A63DF5AFDEC0
Authority key identifier: CF:2D:B5:EB:BC:6E:B4:E7:95:31:68:36:3A:31:0F:5E:F4:C3:98:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e0eaf500-96db-32b7-a733-f3ec8d6f657b.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     36191
IP address blocks:        192.122.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e3e4a23c-f99b-45fd-947d-f5496607a32a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e3e4a23c-f99b-45fd-947d-f5496607a32a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d7:cb:a1:19:a6:3d:f5:af:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e4a23c-f99b-45fd-947d-f5496607a32a
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=983a9130-7024-4632-b6e4-6adf202b6d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:8b:88:25:f4:b9:a4:9d:72:26:21:c4:bb:
                    2d:8d:b9:10:7f:8f:84:66:cf:f7:4a:83:64:0d:ae:
                    98:dc:c0:d4:c5:49:4c:e9:d4:24:8a:30:d6:93:49:
                    ad:dc:c7:e1:1a:ad:c5:46:9b:08:0e:26:d9:14:75:
                    78:c5:83:56:0f:39:fc:7a:0b:18:7b:4e:40:fa:9f:
                    73:4e:aa:d7:70:25:40:8b:77:9f:ee:e8:d7:53:5e:
                    b9:4b:0c:4b:14:86:ff:27:7d:fc:57:82:94:3a:6c:
                    38:8a:d7:f0:fb:94:be:60:f3:bc:0f:25:80:02:b3:
                    71:72:06:03:33:3d:59:83:ad:e0:79:9d:a9:7b:b4:
                    ca:c0:90:ac:d6:f2:de:8a:1b:cf:a6:a0:17:6a:14:
                    78:81:ac:94:45:7c:ff:79:40:f1:aa:5f:84:57:c9:
                    ba:41:b8:2a:89:1f:8b:26:4c:f1:b3:3c:5f:88:34:
                    b1:89:5f:7d:6b:a2:b2:3c:5c:9d:dc:87:0c:b0:e7:
                    fe:12:63:f9:28:f4:da:ab:86:bb:15:c9:93:fe:03:
                    cb:5a:bc:5b:72:15:bc:0a:2e:02:66:60:63:5b:53:
                    e1:4f:be:6b:b8:7a:02:9c:6e:83:11:49:52:f2:8d:
                    4b:bf:97:08:9d:2e:8b:bb:bf:ea:e9:60:1a:f4:cb:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:41:FA:74:7C:79:E8:74:5E:02:B7:58:C7:17:46:C4:AA:DD:65:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e0eaf500-96db-32b7-a733-f3ec8d6f657b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a/e3e4a23c-f99b-45fd-947d-f5496607a32a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:2D:B5:EB:BC:6E:B4:E7:95:31:68:36:3A:31:0F:5E:F4:C3:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e3e4a23c-f99b-45fd-947d-f5496607a32a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:db:3a:46:94:f2:6a:f0:19:32:6d:8d:c2:d3:8f:93:34:
         48:35:e4:24:82:31:1d:fb:20:9c:0c:64:7c:2f:55:31:de:25:
         e2:56:48:79:1d:51:46:b0:33:0b:f8:c6:27:c8:be:e8:a4:95:
         31:23:0e:37:98:19:67:31:0d:53:8e:73:31:42:68:50:6c:c4:
         a4:b4:2d:11:2b:4d:63:31:c9:31:4f:50:c7:4a:93:60:4f:c0:
         7b:9e:1c:3f:c2:4c:ae:7f:0d:ff:cb:b6:24:78:79:57:14:5d:
         bc:6f:1d:95:aa:78:86:54:f7:f9:0d:58:98:cb:62:40:14:6c:
         be:5e:1e:3b:ef:bc:ec:d7:b6:55:c9:80:2d:9b:70:60:c1:9b:
         43:a3:27:76:c7:3f:13:98:7a:30:08:17:94:22:ab:f1:f9:7f:
         3a:43:a6:63:c9:79:e5:ff:98:98:c2:d0:72:5a:4f:e0:cf:cf:
         ea:ab:6c:64:04:4a:d3:6b:e7:6a:43:d7:81:85:7c:38:4a:23:
         5f:bd:89:80:0a:05:eb:2e:27:16:10:84:f8:3d:96:37:4a:22:
         c9:3c:58:23:f1:6f:98:e8:e4:79:24:bd:0b:50:0c:a5:65:52:
         19:bb:7e:06:e3:66:2c:ac:8e:1b:ab:3a:2b:0b:a3:1f:f2:76:
         09:49:f0:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9fLoRmmPfWv3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNlNGEyM2MtZjk5Yi00NWZkLTk0N2QtZjU0OTY2MDdh
MzJhMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTgzYTkxMzAtNzAyNC00NjMyLWI2ZTQtNmFkZjIwMmI2ZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj52LiCX0uaSdciYhxLstjbkQf4+EZs/3SoNk
Da6Y3MDUxUlM6dQkijDWk0mt3MfhGq3FRpsIDibZFHV4xYNWDzn8egsYe05A+p9z
TqrXcCVAi3ef7ujXU165SwxLFIb/J338V4KUOmw4itfw+5S+YPO8DyWAArNxcgYD
Mz1Zg63geZ2pe7TKwJCs1vLeihvPpqAXahR4gayURXz/eUDxql+EV8m6QbgqiR+L
JkzxszxfiDSxiV99a6KyPFyd3IcMsOf+EmP5KPTaq4a7FcmT/gPLWrxbchW8Ci4C
ZmBjW1PhT75ruHoCnG6DEUlS8o1Lv5cInS6Lu7/q6WAa9MszVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFB+nR8eeh0XgK3WMcXRsSq3WXXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lM2U0
YTIzYy1mOTliLTQ1ZmQtOTQ3ZC1mNTQ5NjYwN2EzMmEvZTBlYWY1MDAtOTZkYi0z
MmI3LWE3MzMtZjNlYzhkNmY2NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTNlNGEyM2MtZjk5Yi00NWZkLTk0
N2QtZjU0OTY2MDdhMzJhL2UzZTRhMjNjLWY5OWItNDVmZC05NDdkLWY1NDk2NjA3
YTMyYS5jcmwwHwYDVR0jBBgwFoAUzy2167xutOeVMWg2OjEPXvTDmN0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lM2U0YTIzYy1mOTliLTQ1ZmQtOTQ3ZC1mNTQ5
NjYwN2EzMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHrXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtg2zpGlPJq8BkybY3C04+TNEg15CSCMR37IJwMZHwvVTHeJeJWSHkd
UUawMwv4xifIvuiklTEjDjeYGWcxDVOOczFCaFBsxKS0LRErTWMxyTFPUMdKk2BP
wHueHD/CTK5/Df/LtiR4eVcUXbxvHZWqeIZU9/kNWJjLYkAUbL5eHjvvvOzXtlXJ
gC2bcGDBm0OjJ3bHPxOYejAIF5Qiq/H5fzpDpmPJeeX/mJjC0HJaT+DPz+qrbGQE
StNr52pD14GFfDhKI1+9iYAKBesuJxYQhPg9ljdKIsk8WCPxb5jo5HkkvQtQDKVl
Uhm7fgbjZiysjhurOisLox/ydglJ8Ko=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:51 2025 by rpki-client