Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/672fb467-c784-34fd-bc35-8456d88cbeb5.roa
File:                     672fb467-c784-34fd-bc35-8456d88cbeb5.roa (raw, json)
Hash identifier:          wpyyLxH28dD4N+eiUv1vcLRssNjjhtSTHV15q3tn7xE=
Subject key identifier:   5C:04:55:08:65:51:18:B4:42:68:AB:69:F6:3F:99:4E:97:1D:94:C4
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F432858489BA0B31BB364D71964B4B300
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/672fb467-c784-34fd-bc35-8456d88cbeb5.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     6649
IP address blocks:        199.193.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b3:1b:b3:64:d7:19:64:b4:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=0d29a9e4-9167-4de3-b64e-01ff5cfdc7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:c4:17:b1:35:6a:67:3f:f6:d1:36:41:89:
                    97:ee:4c:bd:db:22:b7:29:51:93:66:48:f0:35:07:
                    d8:68:19:c2:19:29:b6:a1:6f:fe:77:e3:30:5a:4d:
                    ab:a0:5f:64:b2:c9:67:4e:94:48:6a:a6:91:77:17:
                    92:c6:52:af:24:ad:36:11:44:af:9a:4f:c3:5e:bc:
                    ba:74:bf:1f:7c:fa:d1:0b:38:7a:4c:ea:a9:70:78:
                    64:26:ab:81:bd:77:d2:88:af:ce:00:a7:f5:6e:cc:
                    6e:16:05:e6:e0:22:8e:f2:1b:1f:48:f0:c3:93:9c:
                    72:a9:2e:88:71:07:16:2e:6e:97:d1:36:ae:bf:73:
                    1e:4c:54:16:da:ed:4c:6f:5e:aa:85:66:d3:6e:77:
                    b5:b9:42:10:aa:a5:ad:d4:9a:cd:1c:8c:98:c7:f0:
                    2c:24:6d:d9:6e:1a:83:75:a8:87:bb:73:3f:28:e2:
                    58:81:9f:d4:d5:8a:46:de:ff:f4:6d:cb:b9:3d:1a:
                    e2:f8:88:df:80:e1:3a:f8:73:1d:d0:e3:45:2a:20:
                    f5:fb:e4:21:81:03:9c:7d:14:92:30:b6:db:02:39:
                    a1:e0:03:ce:f9:a8:ef:63:68:65:b8:4f:30:33:e9:
                    a4:1f:51:c1:3e:83:51:63:c4:e5:4a:a7:24:cf:c4:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:55:08:65:51:18:B4:42:68:AB:69:F6:3F:99:4E:97:1D:94:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/672fb467-c784-34fd-bc35-8456d88cbeb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5f:70:a7:16:c0:db:63:fd:c3:94:16:a2:c1:66:88:c5:0a:
         2f:04:6a:b6:18:02:c3:a1:63:3b:98:a5:6f:fc:b8:73:10:2b:
         96:da:04:64:89:35:0e:12:af:ee:b3:95:7c:8d:54:8f:2d:8b:
         c0:26:a0:b2:a9:30:9b:42:94:d9:86:fa:54:87:76:49:18:a2:
         97:7e:88:54:a3:9a:be:d4:1a:67:89:75:5c:d7:88:b7:2a:42:
         a1:f3:22:ee:77:36:81:05:23:98:58:8e:c2:1d:6a:e4:a8:2a:
         48:88:ee:6e:d0:b9:ea:fc:c2:44:83:b4:48:83:09:29:21:aa:
         57:ce:fe:5d:34:c8:06:47:19:3b:9f:fc:b3:1a:d7:f2:73:0b:
         b0:44:3b:c1:42:aa:5b:49:5a:0b:fc:ed:16:8f:ac:c4:1a:83:
         51:43:80:63:a6:03:8d:aa:11:f5:cb:dd:dc:e8:51:9f:8e:24:
         0a:02:90:91:6d:2e:f7:83:e3:d1:60:96:1a:09:e5:ad:9f:01:
         7b:da:f2:58:6d:2d:bb:1b:0c:65:11:af:d2:ed:bc:ab:b4:a7:
         bb:cb:1d:87:9f:ba:ef:36:c4:98:7e:0e:2f:27:2b:0e:a5:f1:
         5a:75:33:82:37:1c:ea:bc:20:f8:54:ea:94:6a:9f:8d:16:af:
         a7:43:dd:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLMbs2TXGWS0swAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk
MGQyOWE5ZTQtOTE2Ny00ZGUzLWI2NGUtMDFmZjVjZmRjN2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDbEF7E1amc/9tE2QYmX7ky92yK3KVGTZkjw
NQfYaBnCGSm2oW/+d+MwWk2roF9ksslnTpRIaqaRdxeSxlKvJK02EUSvmk/DXry6
dL8ffPrRCzh6TOqpcHhkJquBvXfSiK/OAKf1bsxuFgXm4CKO8hsfSPDDk5xyqS6I
cQcWLm6X0Tauv3MeTFQW2u1Mb16qhWbTbne1uUIQqqWt1JrNHIyYx/AsJG3ZbhqD
daiHu3M/KOJYgZ/U1YpG3v/0bcu5PRri+IjfgOE6+HMd0ONFKiD1++QhgQOcfRSS
MLbbAjmh4APO+ajvY2hluE8wM+mkH1HBPoNRY8TlSqckz8S/NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwEVQhlURi0QmirafY/mU6XHZTEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNjcyZmI0NjctYzc4NC0z
NGZkLWJjMzUtODQ1NmQ4OGNiZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8HuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhfcKcWwNtj/cOUFqLBZojFCi8EarYYAsOhYzuYpW/8uHMQK5baBGSJ
NQ4Sr+6zlXyNVI8ti8AmoLKpMJtClNmG+lSHdkkYopd+iFSjmr7UGmeJdVzXiLcq
QqHzIu53NoEFI5hYjsIdauSoKkiI7m7Quer8wkSDtEiDCSkhqlfO/l00yAZHGTuf
/LMa1/JzC7BEO8FCqltJWgv87RaPrMQag1FDgGOmA42qEfXL3dzoUZ+OJAoCkJFt
LveD49FglhoJ5a2fAXva8lhtLbsbDGURr9LtvKu0p7vLHYefuu82xJh+Di8nKw6l
8Vp1M4I3HOq8IPhU6pRqn40Wr6dD3Sk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:34:02 2025 by rpki-client