Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/10fe424f-cc01-3d17-a8c3-ae6dcc5eab40.roa
File:                     10fe424f-cc01-3d17-a8c3-ae6dcc5eab40.roa (raw, json)
Hash identifier:          ygtJ+HnAN6vQJyW90QD2OCRIRhsG5PjqqfJBwNSXQ3o=
Subject key identifier:   01:3D:D9:47:77:54:6E:12:F3:51:49:C3:1D:96:F9:A6:29:B9:FD:BB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F9267BA9B4214313D1276800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/10fe424f-cc01-3d17-a8c3-ae6dcc5eab40.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     19755
IP address blocks:        128.177.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:7b:a9:b4:21:43:13:d1:27:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=564ee70c-4127-4e8f-8952-8012d7f19703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9d:21:6a:e2:89:95:6a:70:e7:54:c7:5c:d7:
                    5e:b5:70:71:8c:80:91:7c:55:99:dd:37:12:39:3a:
                    6d:f6:29:81:bc:c3:c1:5b:9f:01:ab:01:cb:22:e9:
                    53:aa:d0:64:14:fb:56:42:64:7a:53:07:03:8d:fa:
                    f0:ab:15:5a:7f:39:22:b5:e1:c5:96:8e:c3:2b:87:
                    94:a0:ce:27:50:99:82:fc:19:33:7c:83:a3:b7:ab:
                    bd:3a:dd:76:ae:b7:2f:d6:27:7f:5f:9e:cc:97:e4:
                    0f:da:ed:e6:fe:c4:88:ef:0b:91:dc:57:f1:01:16:
                    5f:8d:0f:ad:95:db:d6:f5:dc:f3:9a:16:a9:dc:5f:
                    9b:45:10:80:d4:01:2f:47:10:4c:87:3d:dd:28:ea:
                    c6:31:65:08:d8:ec:62:3a:51:10:19:77:06:89:22:
                    e8:ca:29:df:54:96:29:fb:16:09:dd:9d:d1:f1:0d:
                    94:7a:50:f5:dd:11:5e:4c:36:58:5a:1d:0f:9e:b2:
                    57:1e:9a:a4:85:be:25:af:83:b1:c4:fe:0e:5c:de:
                    b4:97:f4:04:b1:c3:b0:11:3e:e6:f1:4f:87:21:8f:
                    74:2e:c7:94:f6:58:30:28:ae:21:2d:72:62:0a:5f:
                    65:8e:ae:d1:5d:6f:78:ea:cb:b5:6b:76:5e:89:c0:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3D:D9:47:77:54:6E:12:F3:51:49:C3:1D:96:F9:A6:29:B9:FD:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/10fe424f-cc01-3d17-a8c3-ae6dcc5eab40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:12:58:6f:d2:b1:a8:fb:ff:0e:b1:fb:99:10:26:0b:d7:78:
         b5:34:ef:93:fe:64:45:5e:9a:32:56:e1:eb:23:62:48:3b:59:
         e5:a8:02:1d:c4:4d:8c:cf:0e:4b:3d:57:55:9c:cc:f0:f4:96:
         e9:60:63:e8:df:6a:b7:ec:be:a2:d7:e9:6f:04:52:13:3d:0d:
         3f:fa:33:b7:37:cd:15:f4:44:f5:19:6e:68:31:6c:61:af:f0:
         85:ba:24:2f:43:e6:0a:d2:39:e2:44:df:de:ac:c3:b1:74:2a:
         48:8c:0d:f8:70:e0:56:92:41:10:d5:c6:5a:a8:f6:79:71:1a:
         2b:78:08:5c:5e:71:64:fa:68:9b:d6:4a:d3:8c:60:44:44:59:
         63:68:23:38:8e:4c:e9:52:f2:55:31:8b:47:b1:3b:70:c1:87:
         13:2b:c7:f7:c6:d1:d9:a1:3a:e4:2e:88:fe:4c:ab:f1:fe:ca:
         90:c1:cf:41:23:38:1b:1b:8e:b9:38:87:f9:db:cc:55:89:0f:
         25:e3:99:74:5e:f3:31:49:63:ea:1c:b2:77:00:f1:7e:ae:ad:
         7f:40:72:1a:4e:9a:8c:36:8a:6c:23:36:25:91:fc:e1:1b:25:
         62:30:2e:87:e9:df:66:f4:a8:b3:7b:9a:af:da:be:31:2f:98:
         72:47:2a:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JnuptCFDE9EnaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTY0ZWU3MGMtNDEyNy00ZThmLTg5NTItODAxMmQ3ZjE5NzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ0hauKJlWpw51THXNdetXBxjICRfFWZ3TcS
OTpt9imBvMPBW58BqwHLIulTqtBkFPtWQmR6UwcDjfrwqxVafzkiteHFlo7DK4eU
oM4nUJmC/BkzfIOjt6u9Ot12rrcv1id/X57Ml+QP2u3m/sSI7wuR3FfxARZfjQ+t
ldvW9dzzmhap3F+bRRCA1AEvRxBMhz3dKOrGMWUI2OxiOlEQGXcGiSLoyinfVJYp
+xYJ3Z3R8Q2UelD13RFeTDZYWh0PnrJXHpqkhb4lr4OxxP4OXN60l/QEscOwET7m
8U+HIY90LseU9lgwKK4hLXJiCl9ljq7RXW946su1a3ZeicCGowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAE92Ud3VG4S81FJwx2W+aYpuf27MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMTBmZTQyNGYtY2MwMS0z
ZDE3LWE4YzMtYWU2ZGNjNWVhYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgLFmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgSWG/Ssaj7/w6x+5kQJgvXeLU075P+ZEVemjJW4esjYkg7WeWoAh3E
TYzPDks9V1WczPD0lulgY+jfarfsvqLX6W8EUhM9DT/6M7c3zRX0RPUZbmgxbGGv
8IW6JC9D5grSOeJE396sw7F0KkiMDfhw4FaSQRDVxlqo9nlxGit4CFxecWT6aJvW
StOMYEREWWNoIziOTOlS8lUxi0exO3DBhxMrx/fG0dmhOuQuiP5Mq/H+ypDBz0Ej
OBsbjrk4h/nbzFWJDyXjmXRe8zFJY+ocsncA8X6urX9AchpOmow2imwjNiWR/OEb
JWIwLofp32b0qLN7mq/avjEvmHJHKlY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:05:16 2025 by rpki-client