Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48e822f5-6e96-38f9-9fcc-84ef283ae575.roa
File:                     48e822f5-6e96-38f9-9fcc-84ef283ae575.roa (raw, json)
Hash identifier:          O3pYh+fKQBcA6V311XmwakDgQne/h1wOgwWp4iTBM3o=
Subject key identifier:   3E:D6:CE:BA:BE:DE:37:AE:48:FA:E7:06:C3:E0:89:F3:5F:65:18:85
Certificate issuer:       /CN=48376997-5b17-4e52-923f-f46bcbd7b94e
Certificate serial:       010D0C9F4328584812D53DC86F9DFFF6EBB84240
Authority key identifier: E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48e822f5-6e96-38f9-9fcc-84ef283ae575.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     394971
IP address blocks:        192.31.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:3d:c8:6f:9d:ff:f6:eb:b8:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48376997-5b17-4e52-923f-f46bcbd7b94e
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=2cb9f24d-a860-4c9e-bc42-d3a1887756da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:78:fe:de:75:d8:a4:b5:d3:a4:e3:bd:a5:
                    e2:3b:e5:66:58:cb:b8:f5:0e:8e:4e:e0:0f:d7:2b:
                    aa:69:8f:1c:ff:e2:e5:86:4e:e9:53:02:41:7a:a5:
                    d9:0b:ee:e7:0a:e0:70:c4:aa:dd:a6:6f:c3:9f:7e:
                    77:5e:3e:c7:b5:58:de:fe:f2:09:ee:95:6a:29:17:
                    82:8b:d4:c8:ca:af:04:3f:5e:18:a9:1c:47:3e:f8:
                    a9:f1:48:d6:21:d4:e0:3f:9c:2d:ed:49:8b:41:de:
                    64:e8:2c:fb:19:41:64:14:97:70:b0:65:6e:19:fa:
                    79:a8:25:43:6b:57:23:20:3f:68:4c:47:af:4d:a5:
                    11:74:db:e8:68:10:61:38:50:28:b0:fe:98:0e:06:
                    6e:de:07:8c:b1:42:2d:bd:24:f8:32:fe:ae:d0:9d:
                    6d:02:94:d5:81:68:cc:3d:2c:06:4f:a4:a0:1c:b7:
                    99:c7:af:0b:5f:52:74:c7:14:7f:85:e2:8c:06:d7:
                    77:af:7c:52:4d:f1:e2:81:c9:cb:08:97:90:b2:52:
                    51:12:f7:36:2c:75:2f:59:33:ca:bc:4d:67:22:08:
                    4d:24:89:4a:de:82:cb:da:b1:df:1a:a5:ac:2a:0e:
                    9f:a0:67:db:e9:d8:fd:93:19:6d:b0:c6:30:0e:45:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:CE:BA:BE:DE:37:AE:48:FA:E7:06:C3:E0:89:F3:5F:65:18:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48e822f5-6e96-38f9-9fcc-84ef283ae575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:42:c6:52:86:86:46:11:3f:9d:79:ff:c7:3d:62:fb:c9:9e:
         0c:d0:af:ed:f1:6d:58:6c:b6:3a:f5:70:53:29:19:7c:64:a8:
         61:64:b5:0a:16:72:c5:ce:ff:77:3d:9d:b7:63:8a:0f:bb:40:
         cb:8b:39:42:2c:2a:a1:16:03:92:a3:66:f0:28:b8:b8:44:d1:
         67:26:7a:4b:bd:68:d1:8b:38:d8:1f:ff:5f:6a:93:4e:0c:3e:
         03:f6:6e:6c:4a:f0:ed:af:e6:09:02:5c:af:91:4e:8f:ee:7b:
         f3:45:b4:12:e2:ed:88:00:6c:af:7b:46:18:c9:9a:8e:e7:89:
         94:6e:fe:55:8e:55:89:23:d7:26:60:8e:bd:eb:f5:05:a7:1c:
         46:29:9e:c0:51:32:87:b3:9d:7d:30:95:ce:d8:57:10:42:61:
         70:a6:e3:0b:3e:c1:26:b6:3b:93:f4:e5:d0:bd:99:1a:89:19:
         7f:54:c6:b1:af:11:ae:74:d4:28:7b:0c:c0:68:87:71:d9:75:
         34:a7:a5:5b:c4:ca:29:c0:68:01:35:b3:b8:a8:4f:b7:47:20:
         82:27:fa:39:a9:c7:e2:ca:cb:d2:c9:c0:64:b9:d0:92:97:1d:
         1e:f0:79:27:7f:4d:8c:37:89:d4:48:98:11:d2:61:46:be:a3:
         52:3f:9c:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1T3Ib53/9uu4QkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDgzNzY5OTctNWIxNy00ZTUyLTkyM2YtZjQ2YmNiZDdi
OTRlMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
MmNiOWYyNGQtYTg2MC00YzllLWJjNDItZDNhMTg4Nzc1NmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jt4/t512KS106TjvaXiO+VmWMu49Q6OTuAP
1yuqaY8c/+Llhk7pUwJBeqXZC+7nCuBwxKrdpm/Dn353Xj7HtVje/vIJ7pVqKReC
i9TIyq8EP14YqRxHPvip8UjWIdTgP5wt7UmLQd5k6Cz7GUFkFJdwsGVuGfp5qCVD
a1cjID9oTEevTaURdNvoaBBhOFAosP6YDgZu3geMsUItvST4Mv6u0J1tApTVgWjM
PSwGT6SgHLeZx68LX1J0xxR/heKMBtd3r3xSTfHigcnLCJeQslJREvc2LHUvWTPK
vE1nIghNJIlK3oLL2rHfGqWsKg6foGfb6dj9kxltsMYwDkWhgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7Wzrq+3jeuSPrnBsPgifNfZRiFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ODM3
Njk5Ny01YjE3LTRlNTItOTIzZi1mNDZiY2JkN2I5NGUvNDhlODIyZjUtNmU5Ni0z
OGY5LTlmY2MtODRlZjI4M2FlNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDgzNzY5OTctNWIxNy00ZTUyLTky
M2YtZjQ2YmNiZDdiOTRlLzQ4Mzc2OTk3LTViMTctNGU1Mi05MjNmLWY0NmJjYmQ3
Yjk0ZS5jcmwwHwYDVR0jBBgwFoAU6PL8S3Ab28vA+hhUTErOIp9L3YswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80ODM3Njk5Ny01YjE3LTRlNTItOTIzZi1mNDZi
Y2JkN2I5NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlCxlKGhkYRP515/8c9YvvJngzQr+3xbVhstjr1cFMpGXxkqGFktQoW
csXO/3c9nbdjig+7QMuLOUIsKqEWA5KjZvAouLhE0Wcmeku9aNGLONgf/19qk04M
PgP2bmxK8O2v5gkCXK+RTo/ue/NFtBLi7YgAbK97RhjJmo7niZRu/lWOVYkj1yZg
jr3r9QWnHEYpnsBRMoeznX0wlc7YVxBCYXCm4ws+wSa2O5P05dC9mRqJGX9UxrGv
Ea501Ch7DMBoh3HZdTSnpVvEyinAaAE1s7ioT7dHIIIn+jmpx+LKy9LJwGS50JKX
HR7weSd/TYw3idRImBHSYUa+o1I/nH4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:30 2025 by rpki-client