Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1cf4e48c-38f8-366a-be02-9bb2ad5790e3.roa
File:                     1cf4e48c-38f8-366a-be02-9bb2ad5790e3.roa (raw, json)
Hash identifier:          bMmwq8J0L4Kgn3hDHryk48sTbP7IR10sJ1qWnv7Bq0I=
Subject key identifier:   D0:97:1B:7B:1B:90:C8:88:8E:4A:17:90:7E:5B:F1:78:73:25:15:1F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584921840E6DF8DD795D283E4B80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1cf4e48c-38f8-366a-be02-9bb2ad5790e3.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        184.94.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0e:6d:f8:dd:79:5d:28:3e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=94d4bba1-4276-4229-9cdd-ca221ab8da1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:21:37:0a:61:68:24:0f:70:76:6b:a4:0b:
                    7e:ed:4c:4d:08:84:d3:ba:94:61:6e:7c:76:b6:5a:
                    6b:41:d7:34:3a:d1:e9:a0:db:02:75:58:3c:bc:a7:
                    b1:e5:2f:be:ba:a1:34:7e:20:57:6f:86:02:77:a7:
                    00:63:fd:51:cc:f6:51:cf:68:08:cb:73:c5:97:51:
                    45:f7:3d:28:30:14:5a:82:80:f1:91:88:3c:6b:b5:
                    cf:2e:f8:6b:8a:1f:65:20:2e:2a:38:cd:73:bb:25:
                    89:f7:05:6b:f3:ff:77:b9:f9:9d:e1:f5:a1:7c:3f:
                    4d:71:c0:68:4a:e9:98:8f:93:d4:d8:5d:5f:2b:53:
                    47:32:2c:ee:88:80:e5:ed:17:91:04:a5:08:a7:94:
                    0c:a8:7f:60:be:35:05:40:d8:e7:0b:03:76:fd:81:
                    8b:fc:76:1c:ad:7e:ab:38:c4:44:f0:f3:6f:11:d9:
                    60:31:a8:38:00:9a:b0:cd:4e:3e:64:52:1b:57:1c:
                    ee:07:1e:3d:9f:48:33:bb:51:b6:6b:d3:78:40:1e:
                    83:37:de:2b:68:5d:ef:1a:92:ee:b8:bb:3a:dd:85:
                    75:37:58:d4:2e:b5:f5:04:dd:cd:e7:85:e5:6a:10:
                    5a:9c:3f:3a:bd:39:47:80:79:84:0f:30:b8:f1:a5:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:1B:7B:1B:90:C8:88:8E:4A:17:90:7E:5B:F1:78:73:25:15:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1cf4e48c-38f8-366a-be02-9bb2ad5790e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:94:aa:97:76:9d:fe:1c:3e:7b:9c:a5:c7:d6:4a:3a:25:7c:
         34:4e:ff:79:59:a7:21:5a:89:fd:37:42:3a:95:b5:d3:b8:ac:
         03:ae:42:44:ff:b8:03:fb:3d:67:89:b3:20:0d:5f:31:33:64:
         30:32:72:4a:f4:da:a1:ad:a2:c4:c6:c2:19:3f:ad:5b:2b:ce:
         f1:08:14:36:7c:1b:cd:d8:5d:1c:b4:34:3e:f1:af:93:39:bb:
         a1:c4:0b:b8:d5:39:5b:ae:78:ae:5b:25:76:c7:24:9a:72:1c:
         d8:c1:6e:1c:07:e7:a3:70:b0:6b:b2:37:09:df:e9:c0:f2:ef:
         b0:52:79:f3:04:1c:bf:db:cf:64:7e:13:d0:b0:d9:cb:46:c7:
         ac:31:1e:71:8b:f2:dc:01:73:dd:7d:93:c6:fb:0b:c2:cf:37:
         6e:f4:de:48:8d:fa:18:90:e1:a7:29:eb:4f:59:58:03:5c:f5:
         ea:d7:9d:fc:45:a4:dd:09:0a:b3:fa:a9:7b:d2:f9:7b:0c:7c:
         fa:d8:4b:0e:72:52:df:69:70:f9:6e:44:64:26:ab:1e:1d:c9:
         9f:e4:a7:a5:36:0f:87:4b:34:98:f2:ab:f1:c6:25:27:06:44:
         74:a2:3e:13:20:20:6a:4b:1f:11:1f:40:9b:a9:a7:79:b3:4b:
         0a:65:3f:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhA5t+N15XSg+S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
OTRkNGJiYTEtNDI3Ni00MjI5LTljZGQtY2EyMjFhYjhkYTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh10hNwphaCQPcHZrpAt+7UxNCITTupRhbnx2
tlprQdc0OtHpoNsCdVg8vKex5S++uqE0fiBXb4YCd6cAY/1RzPZRz2gIy3PFl1FF
9z0oMBRagoDxkYg8a7XPLvhrih9lIC4qOM1zuyWJ9wVr8/93ufmd4fWhfD9NccBo
SumYj5PU2F1fK1NHMizuiIDl7ReRBKUIp5QMqH9gvjUFQNjnCwN2/YGL/HYcrX6r
OMRE8PNvEdlgMag4AJqwzU4+ZFIbVxzuBx49n0gzu1G2a9N4QB6DN94raF3vGpLu
uLs63YV1N1jULrX1BN3N54XlahBanD86vTlHgHmEDzC48aXj1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCXG3sbkMiIjkoXkH5b8XhzJRUfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMWNmNGU0OGMtMzhmOC0z
NjZhLWJlMDItOWJiMmFkNTc5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHuF4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADeUqpd2nf4cPnucpcfWSjolfDRO/3lZpyFaif03QjqVtdO4rAOuQkT/
uAP7PWeJsyANXzEzZDAyckr02qGtosTGwhk/rVsrzvEIFDZ8G83YXRy0ND7xr5M5
u6HEC7jVOVuueK5bJXbHJJpyHNjBbhwH56NwsGuyNwnf6cDy77BSefMEHL/bz2R+
E9Cw2ctGx6wxHnGL8twBc919k8b7C8LPN2703kiN+hiQ4acp609ZWANc9erXnfxF
pN0JCrP6qXvS+XsMfPrYSw5yUt9pcPluRGQmqx4dyZ/kp6U2D4dLNJjyq/HGJScG
RHSiPhMgIGpLHxEfQJupp3mzSwplP0Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:03 2025 by rpki-client