Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa
File:                     162e852c-8413-3d8d-bf88-356053600612.roa (raw, json)
Hash identifier:          hPCu7A4w8oLzNU0MD8Ra5iyc0W1kMB1n/hX7R2uy0N0=
Subject key identifier:   96:E0:3C:4E:5E:8E:40:3F:4D:C6:81:23:10:37:0D:A4:67:78:9F:7F
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F43285849F71512F393FADE6679CA2E00
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        104.192.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:12:f3:93:fa:de:66:79:ca:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=e555387c-e690-42e6-af07-77a2d19977fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:6e:64:0f:73:17:db:01:60:db:e9:c6:b5:
                    59:79:c8:1d:0c:24:74:4c:94:92:d4:8a:86:54:c2:
                    12:71:ea:7c:43:ec:fa:64:ed:cf:c9:74:82:85:0c:
                    41:c2:1b:45:76:19:cc:08:0a:73:f2:2c:ac:8c:b9:
                    59:bb:4c:31:b5:9d:f0:2a:69:49:9e:d9:98:79:24:
                    83:0a:d4:60:e0:23:89:ef:41:29:0c:87:d1:8a:4f:
                    f1:43:92:83:24:fc:c3:c4:d5:53:f7:6b:12:4f:5f:
                    d6:5d:1e:30:f8:52:fe:45:a7:3e:39:84:ef:8b:2b:
                    14:0d:c7:71:e7:07:44:9f:c7:38:59:de:cb:06:58:
                    1c:46:ff:64:89:7e:2a:a2:44:f4:73:f9:0d:de:ac:
                    b2:31:88:cc:df:e4:ba:ae:20:4c:b1:64:f9:47:a2:
                    ae:ef:7d:43:b5:75:08:02:a4:7c:3e:0a:f3:af:48:
                    36:2c:3a:72:05:93:1e:34:92:2e:30:f9:f6:aa:fc:
                    c3:d9:5a:3f:bb:90:1c:2f:ac:f9:ae:28:13:de:60:
                    b5:2e:d0:2d:f6:0b:2c:2c:1f:2b:25:aa:af:5d:fd:
                    2c:8b:4a:e4:d4:1e:3d:cd:a8:c5:4d:80:6f:d9:75:
                    f2:2b:23:5d:8b:75:03:dd:dc:8c:b1:13:ce:69:23:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E0:3C:4E:5E:8E:40:3F:4D:C6:81:23:10:37:0D:A4:67:78:9F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/162e852c-8413-3d8d-bf88-356053600612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:a2:33:e5:d5:0e:08:9a:86:4b:5d:58:d7:99:cc:9a:93:
         ef:f6:0c:c1:a1:fb:6c:1e:2c:5b:97:07:b6:bb:d8:2f:d9:3b:
         25:32:29:86:7c:31:13:1b:c5:78:9b:20:11:6d:d3:33:f9:b4:
         9f:0e:f9:c0:3c:ed:5d:44:8c:97:65:e7:f9:bb:06:d7:05:dc:
         e3:be:34:0e:7e:1b:5d:96:3f:a1:e5:71:8c:ef:07:d2:68:e6:
         b0:58:b2:cb:55:bf:e2:06:51:e4:0a:ab:47:17:d4:55:54:cb:
         76:f7:3a:5f:cb:ee:5b:40:a6:da:eb:60:8f:fa:f6:46:9b:4b:
         b8:8e:8a:c7:bd:7e:62:60:3d:e4:f2:bd:a5:19:1e:9c:83:6d:
         64:81:40:c3:30:4e:7d:72:7e:71:cb:25:17:08:d8:6d:9d:83:
         8b:94:91:10:ce:44:86:5e:ea:f8:74:06:a3:20:0c:8a:c1:7c:
         c7:91:7c:08:fc:eb:e6:a7:e0:e0:db:05:a0:98:83:6c:d5:ad:
         2c:8d:2a:11:85:8d:f4:db:48:7e:32:30:07:a3:27:1d:43:47:
         bf:fd:ed:79:b3:d8:e9:1e:a8:2b:04:20:96:cb:05:b2:02:b7:
         03:93:44:48:e7:06:3d:d5:77:a4:c4:d6:41:66:0c:61:50:40:
         6f:12:a9:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRLzk/reZnnKLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTljMGFlMzEtMjA1Mi00ZDEwLTg5MDQtNWQwOGIwOWFh
Njg4MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZTU1NTM4N2MtZTY5MC00MmU2LWFmMDctNzdhMmQxOTk3N2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKNuZA9zF9sBYNvpxrVZecgdDCR0TJSS1IqG
VMIScep8Q+z6ZO3PyXSChQxBwhtFdhnMCApz8iysjLlZu0wxtZ3wKmlJntmYeSSD
CtRg4COJ70EpDIfRik/xQ5KDJPzDxNVT92sST1/WXR4w+FL+Rac+OYTviysUDcdx
5wdEn8c4Wd7LBlgcRv9kiX4qokT0c/kN3qyyMYjM3+S6riBMsWT5R6Ku731DtXUI
AqR8Pgrzr0g2LDpyBZMeNJIuMPn2qvzD2Vo/u5AcL6z5rigT3mC1LtAt9gssLB8r
JaqvXf0si0rk1B49zajFTYBv2XXyKyNdi3UD3dyMsRPOaSP0uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbgPE5ejkA/TcaBIxA3DaRneJ9/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMw
YWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4YjA5YWE2ODgvMTYyZTg1MmMtODQxMy0z
ZDhkLWJmODgtMzU2MDUzNjAwNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTljMGFlMzEtMjA1Mi00ZDEwLTg5
MDQtNWQwOGIwOWFhNjg4L2U5YzBhZTMxLTIwNTItNGQxMC04OTA0LTVkMDhiMDlh
YTY4OC5jcmwwHwYDVR0jBBgwFoAUEE/5PFM5NWknNBy24fS5isdQF2EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOWMwYWUzMS0yMDUyLTRkMTAtODkwNC01ZDA4
YjA5YWE2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELxojPl1Q4ImoZLXVjXmcyak+/2DMGh+2weLFuXB7a72C/ZOyUyKYZ8
MRMbxXibIBFt0zP5tJ8O+cA87V1EjJdl5/m7BtcF3OO+NA5+G12WP6HlcYzvB9Jo
5rBYsstVv+IGUeQKq0cX1FVUy3b3Ol/L7ltAptrrYI/69kabS7iOise9fmJgPeTy
vaUZHpyDbWSBQMMwTn1yfnHLJRcI2G2dg4uUkRDORIZe6vh0BqMgDIrBfMeRfAj8
6+an4ODbBaCYg2zVrSyNKhGFjfTbSH4yMAejJx1DR7/97Xmz2OkeqCsEIJbLBbIC
twOTREjnBj3Vd6TE1kFmDGFQQG8Sqeg=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:46:14 2025 by rpki-client