Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa
File:                     fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa (raw, json)
Hash identifier:          493hiqm10iDywK+0aAIXV2P0RgX93wnKK3w/hdPHGMc=
Subject key identifier:   A2:89:A4:EC:BC:09:9A:91:F8:54:02:0D:23:58:87:51:5D:5C:56:1B
Certificate issuer:       /CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
Certificate serial:       010D0C9F4328584921840FE73FA96134199BE1E0
Authority key identifier: D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        199.124.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0f:e7:3f:a9:61:34:19:9b:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14f19494-e6ec-42e7-bce4-8903df1f6f9d
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=aa613860-be2a-4113-9337-8e66c325f86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:08:9e:9a:30:a4:70:05:23:36:9f:66:60:
                    97:c7:01:1e:29:a3:5e:4f:22:e9:0c:c0:d6:90:32:
                    3e:2e:46:97:e3:13:83:50:c0:80:50:87:cb:74:1e:
                    db:5a:23:ae:9d:a6:85:f8:98:cc:1d:3c:d1:58:ef:
                    7f:70:c7:b7:e7:5c:ae:46:3a:82:80:5d:44:9f:7a:
                    3d:51:de:2b:4a:45:c4:2e:39:d2:20:26:64:8e:cd:
                    e3:a6:db:78:15:b8:41:6d:72:c0:3e:d1:c6:4d:6b:
                    9b:c9:3b:69:05:3d:27:52:e0:10:30:a2:2c:84:5c:
                    db:58:35:03:ca:d9:62:ae:84:89:7c:68:c5:7e:87:
                    8c:81:a1:b8:dd:8a:68:41:f3:6f:51:02:99:b4:60:
                    14:90:e4:9c:b0:94:aa:ef:1a:14:8d:42:80:0c:06:
                    5a:ff:6e:8d:0d:89:dc:cc:07:a0:fc:ee:13:e5:88:
                    5b:8f:cb:fb:52:be:2a:29:7d:95:d8:c6:f2:3b:19:
                    79:60:10:76:d4:95:a4:60:93:ce:ab:75:3c:89:c0:
                    d6:b5:76:6f:83:5e:36:61:56:87:a2:8f:2a:99:5c:
                    41:8d:e1:c0:78:50:5f:88:52:37:a2:ff:df:50:85:
                    0a:cd:f6:74:61:ba:b5:32:8b:bf:d1:f4:72:a8:e6:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:89:A4:EC:BC:09:9A:91:F8:54:02:0D:23:58:87:51:5D:5C:56:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/fa0a09b6-862a-32cd-98d8-c131ba182dc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.crl

            X509v3 Authority Key Identifier:
                keyid:D4:8C:24:71:3F:9D:60:6F:41:01:2C:8E:EA:45:83:5D:2D:5D:72:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/14f19494-e6ec-42e7-bce4-8903df1f6f9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.124.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3a:5b:74:55:4e:bd:03:0d:63:f0:6f:79:3a:a7:24:35:3e:
         3a:8e:03:96:2c:9c:c6:3f:7a:b7:8a:8e:af:2a:d1:41:04:2e:
         b7:dc:2c:0d:c6:d5:b5:6d:34:9d:87:d9:f7:18:23:46:5a:f3:
         24:56:76:cd:7c:7e:c1:41:8f:db:ca:ae:f8:7d:cb:a2:3c:e1:
         41:f9:f8:f0:c0:9f:58:b0:95:4b:00:84:55:4d:4b:a5:3b:0d:
         09:57:14:90:d6:4e:0a:fd:8d:0c:90:cd:b7:aa:22:e6:b3:c1:
         9f:46:e8:e7:5f:11:ef:57:a8:5f:1c:7e:75:b4:c9:37:7f:43:
         c7:4c:8c:28:c6:af:74:f4:ea:60:c7:68:76:fa:bf:6e:56:9c:
         22:7c:dc:b0:c5:4f:17:c3:a0:b1:6d:1f:e2:e2:94:47:b1:d1:
         04:50:0a:85:94:9f:19:6a:f4:0e:85:8c:8b:08:2d:5e:6d:a2:
         5d:e3:04:f8:a7:c6:66:f6:98:e7:a0:26:6a:65:6f:d3:56:89:
         bb:6a:c4:17:c0:95:ee:a1:f5:3a:12:c5:9e:00:67:72:8c:78:
         5f:2a:5a:96:1d:e1:22:b1:e0:5c:c8:9a:43:aa:65:9a:55:7d:
         b7:f4:1d:50:b1:14:e7:ea:72:4d:69:c9:f5:33:a4:de:82:50:
         f4:61:e0:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhA/nP6lhNBmb4eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRmMTk0OTQtZTZlYy00MmU3LWJjZTQtODkwM2RmMWY2
ZjlkMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YWE2MTM4NjAtYmUyYS00MTEzLTkzMzctOGU2NmMzMjVmODZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWwInpowpHAFIzafZmCXxwEeKaNeTyLpDMDW
kDI+LkaX4xODUMCAUIfLdB7bWiOunaaF+JjMHTzRWO9/cMe351yuRjqCgF1En3o9
Ud4rSkXELjnSICZkjs3jptt4FbhBbXLAPtHGTWubyTtpBT0nUuAQMKIshFzbWDUD
ytliroSJfGjFfoeMgaG43YpoQfNvUQKZtGAUkOScsJSq7xoUjUKADAZa/26NDYnc
zAeg/O4T5Yhbj8v7Ur4qKX2V2MbyOxl5YBB21JWkYJPOq3U8icDWtXZvg142YVaH
oo8qmVxBjeHAeFBfiFI3ov/fUIUKzfZ0Ybq1Mou/0fRyqOb0VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKKJpOy8CZqR+FQCDSNYh1FdXFYbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNGYx
OTQ5NC1lNmVjLTQyZTctYmNlNC04OTAzZGYxZjZmOWQvZmEwYTA5YjYtODYyYS0z
MmNkLTk4ZDgtYzEzMWJhMTgyZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTRmMTk0OTQtZTZlYy00MmU3LWJj
ZTQtODkwM2RmMWY2ZjlkLzE0ZjE5NDk0LWU2ZWMtNDJlNy1iY2U0LTg5MDNkZjFm
NmY5ZC5jcmwwHwYDVR0jBBgwFoAU1IwkcT+dYG9BASyO6kWDXS1dcvswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xNGYxOTQ5NC1lNmVjLTQyZTctYmNlNC04OTAz
ZGYxZjZmOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3wcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU6W3RVTr0DDWPwb3k6pyQ1PjqOA5YsnMY/ereKjq8q0UEELrfcLA3G
1bVtNJ2H2fcYI0Za8yRWds18fsFBj9vKrvh9y6I84UH5+PDAn1iwlUsAhFVNS6U7
DQlXFJDWTgr9jQyQzbeqIuazwZ9G6OdfEe9XqF8cfnW0yTd/Q8dMjCjGr3T06mDH
aHb6v25WnCJ83LDFTxfDoLFtH+LilEex0QRQCoWUnxlq9A6FjIsILV5tol3jBPin
xmb2mOegJmplb9NWibtqxBfAle6h9ToSxZ4AZ3KMeF8qWpYd4SKx4FzImkOqZZpV
fbf0HVCxFOfqck1pyfUzpN6CUPRh4Hg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:09 2025 by rpki-client