Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d5272bda-a914-3bf3-90d4-128088f5655f.roa
File:                     d5272bda-a914-3bf3-90d4-128088f5655f.roa (raw, json)
Hash identifier:          dBsUD9rzfcFL/YQ6Zo3VM30hYqLbOaH+4cNYU0QbZiM=
Subject key identifier:   C6:3F:BE:44:88:BC:80:38:8C:81:E2:0B:30:3A:C7:1C:A4:0B:DF:79
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584819CFD81C92EB8F996171E680
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d5272bda-a914-3bf3-90d4-128088f5655f.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     25899
IP address blocks:        199.193.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d8:1c:92:eb:8f:99:61:71:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=09273048-a310-425c-92f5-cc8616d9e08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:5b:df:89:1c:a3:b7:ab:49:7f:76:9f:71:
                    c5:43:6f:af:7a:af:80:29:ac:89:89:94:dd:10:da:
                    f6:06:73:40:a9:18:c9:b9:70:16:6d:45:d0:f0:d6:
                    e3:08:16:14:fa:94:5e:57:7d:07:df:14:8b:d9:f9:
                    be:3e:2d:90:1b:55:1b:34:e4:68:fc:d3:9d:4b:c9:
                    bc:aa:3a:36:89:62:cd:8a:45:c2:28:f8:65:92:f4:
                    5a:81:ac:2a:21:ed:ea:0e:f0:1f:bc:66:73:b4:41:
                    3f:7a:35:ae:08:42:c2:ce:41:ee:fe:a2:10:57:66:
                    9c:fb:8a:46:e1:48:b4:5f:68:a7:ee:0c:20:b2:8c:
                    b0:06:3c:06:7b:85:b9:bf:25:e8:85:ab:56:00:dc:
                    28:91:34:34:99:7c:2a:41:25:b9:5a:58:36:0c:c7:
                    8f:7e:ed:10:98:71:d3:db:d8:41:31:47:fb:42:12:
                    0c:1c:72:6f:29:fa:02:67:0a:48:7e:7a:d1:fb:ad:
                    8c:11:c6:80:eb:90:e2:95:51:97:25:a2:c2:ef:32:
                    24:a6:c3:0a:94:71:5c:74:cf:c6:40:d6:fe:55:43:
                    49:cb:f3:ed:5b:d4:6d:e8:7b:d2:60:9b:b7:30:11:
                    23:7a:cc:9e:28:dd:42:ed:d8:25:7a:73:6d:fe:17:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:BE:44:88:BC:80:38:8C:81:E2:0B:30:3A:C7:1C:A4:0B:DF:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d5272bda-a914-3bf3-90d4-128088f5655f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:e7:c2:13:f7:bc:4d:5f:b0:d2:8e:7a:b3:ae:a1:82:bc:
         b3:8c:bb:71:0b:1b:9d:4e:48:a8:96:5d:b4:f7:d0:1c:f0:e4:
         9c:fb:7c:ed:3b:c9:23:90:e7:c8:9a:1f:d1:35:65:2e:37:bd:
         d3:22:fb:c4:71:66:33:71:c9:da:d2:56:9f:d5:f9:52:b4:b1:
         3f:d6:79:da:de:b4:2f:0c:8b:18:18:8f:83:28:ba:cb:6e:27:
         19:af:0b:67:34:1b:db:2d:5c:b1:f8:7c:db:42:e8:86:43:d6:
         7e:82:70:a1:d0:67:88:06:ba:5a:2b:b1:68:19:9b:61:4e:d5:
         6a:88:cc:2e:ed:56:62:f6:46:bb:ed:e2:42:16:00:f2:43:3c:
         e1:e4:b7:37:e3:d3:d6:99:96:a5:97:c7:cb:ed:a1:f8:40:41:
         6c:0b:70:af:77:93:d5:29:e6:b4:ea:1d:7f:d2:28:c8:78:0c:
         b3:97:23:f4:03:3a:b8:0a:ea:0a:a2:7b:c3:0c:b3:6a:9d:cf:
         3a:d0:19:b0:33:27:2c:d7:b8:5c:09:ac:24:a9:7e:55:20:87:
         cd:68:dd:8c:e6:18:be:75:fa:57:6a:c6:c7:c2:e6:5d:82:6b:
         0e:5d:ad:af:62:f9:dd:14:4d:4c:49:c4:6c:4d:0f:91:d5:e5:
         bd:48:48:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz9gckuuPmWFx5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
MDkyNzMwNDgtYTMxMC00MjVjLTkyZjUtY2M4NjE2ZDllMDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx5b34kco7erSX92n3HFQ2+veq+AKayJiZTd
ENr2BnNAqRjJuXAWbUXQ8NbjCBYU+pReV30H3xSL2fm+Pi2QG1UbNORo/NOdS8m8
qjo2iWLNikXCKPhlkvRagawqIe3qDvAfvGZztEE/ejWuCELCzkHu/qIQV2ac+4pG
4Ui0X2in7gwgsoywBjwGe4W5vyXohatWANwokTQ0mXwqQSW5Wlg2DMePfu0QmHHT
29hBMUf7QhIMHHJvKfoCZwpIfnrR+62MEcaA65DilVGXJaLC7zIkpsMKlHFcdM/G
QNb+VUNJy/PtW9Rt6HvSYJu3MBEjesyeKN1C7dglenNt/hcqKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMY/vkSIvIA4jIHiCzA6xxykC995MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZDUyNzJiZGEtYTkxNC0z
YmYzLTkwZDQtMTI4MDg4ZjU2NTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8HsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1a58IT97xNX7DSjnqzrqGCvLOMu3ELG51OSKiWXbT30Bzw5Jz7fO07
ySOQ58iaH9E1ZS43vdMi+8RxZjNxydrSVp/V+VK0sT/WedretC8MixgYj4Moustu
JxmvC2c0G9stXLH4fNtC6IZD1n6CcKHQZ4gGulorsWgZm2FO1WqIzC7tVmL2Rrvt
4kIWAPJDPOHktzfj09aZlqWXx8vtofhAQWwLcK93k9Up5rTqHX/SKMh4DLOXI/QD
OrgK6gqie8MMs2qdzzrQGbAzJyzXuFwJrCSpflUgh81o3YzmGL51+ldqxsfC5l2C
aw5dra9i+d0UTUxJxGxND5HV5b1ISPc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:51 2025 by rpki-client