Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a4514f30-4423-3588-b12a-d75a9f945272.roa
File:                     a4514f30-4423-3588-b12a-d75a9f945272.roa (raw, json)
Hash identifier:          TCUVx6LKvmIgud8ObuBVWzQZmo5P3RAPQxaKSF0L0eg=
Subject key identifier:   BB:1D:8B:B6:1C:D3:6E:F4:C3:60:9A:BE:A6:E8:75:BE:5B:B8:C7:84
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858493C094089B828269642B0FD00
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a4514f30-4423-3588-b12a-d75a9f945272.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     10835
IP address blocks:        208.38.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:40:89:b8:28:26:96:42:b0:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=c8101aec-6677-41ec-91dc-3e1d47363398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:f2:59:fe:e4:86:a0:2e:95:ea:2c:86:c2:
                    72:b0:d0:21:19:c5:d9:00:e6:61:16:c8:64:1b:d7:
                    1e:c5:43:6d:23:bf:12:88:e9:e2:42:70:d1:e0:75:
                    2e:db:a8:c6:73:b3:2b:80:50:ef:17:ea:1d:1f:56:
                    70:18:bd:d9:0f:69:ee:4f:55:a0:93:a0:40:20:68:
                    32:5e:ca:f9:59:95:be:2e:f5:ed:70:d7:74:fe:bb:
                    7f:25:ed:05:4c:c7:00:ca:73:e3:e9:43:e3:3c:73:
                    25:d8:e9:85:58:88:2f:cb:4f:f3:14:8e:1f:80:3d:
                    69:48:e6:4a:5f:ff:df:7f:00:16:b2:eb:1a:b1:9d:
                    e2:b7:76:1d:5b:37:ae:b4:8f:55:40:7e:8d:d5:9a:
                    9a:0c:bc:bc:7f:69:be:34:53:ad:da:7a:d6:14:07:
                    f2:8f:4b:51:1c:1c:1e:e7:ef:c1:61:a5:de:40:13:
                    0d:9b:24:37:33:20:cd:af:83:2b:82:f0:a1:95:e4:
                    91:87:b1:14:b8:cd:0c:8f:63:ee:98:7c:ac:d9:18:
                    c8:ba:a1:79:05:66:0c:d0:81:e0:53:ce:dd:d0:5c:
                    c7:0b:2e:09:1a:9a:29:8f:ec:fc:70:36:ae:be:37:
                    95:09:b6:c5:df:f8:ca:f7:ca:03:6a:dd:31:94:5e:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1D:8B:B6:1C:D3:6E:F4:C3:60:9A:BE:A6:E8:75:BE:5B:B8:C7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/a4514f30-4423-3588-b12a-d75a9f945272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:57:37:b3:48:ec:ef:8a:45:29:b8:d8:f2:8d:66:24:2c:dc:
         c9:94:de:21:ce:97:e9:36:77:19:77:9f:9b:07:77:76:85:eb:
         ca:bf:0a:bb:78:17:56:7f:ee:89:e5:43:05:49:2f:99:8f:c2:
         24:60:6f:77:26:3b:8a:98:ce:a6:e4:a0:26:11:df:e7:0c:41:
         e7:fc:4e:88:9c:b5:57:85:09:89:f1:ac:22:d0:1c:7e:6d:5f:
         ab:a0:36:f6:53:e5:7b:19:7d:fd:86:9c:66:b4:b7:b8:b4:c3:
         2f:28:c0:ad:aa:06:36:e0:1e:bb:ab:8f:5a:6d:44:95:cd:4b:
         ca:36:d5:22:c6:87:6b:e1:e4:bb:20:a0:c5:06:64:24:df:8b:
         24:ea:00:7e:0e:85:d0:51:54:1a:5e:16:a4:4a:73:5a:ab:07:
         1f:88:17:07:cc:30:66:68:da:11:c7:a6:01:fa:57:e2:5d:eb:
         78:fc:e4:d1:02:63:e3:a7:85:2c:46:f2:dc:4b:b0:f6:a8:3f:
         84:23:f9:e5:18:77:d7:5f:55:9f:d6:95:6f:35:0b:73:07:55:
         b5:f0:e1:0d:65:87:b6:a1:22:a2:bd:dc:22:ad:59:f9:84:1c:
         e6:f3:87:df:e0:30:77:da:23:0e:11:8d:d7:85:65:65:65:29:
         61:a1:d2:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUCJuCgmlkKw/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDFmYzE4MTUtMzRlZi00MjRkLTgyNTgtNTA2ZjhiNDg2
ZTM1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YzgxMDFhZWMtNjY3Ny00MWVjLTkxZGMtM2UxZDQ3MzYzMzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8HyWf7khqAuleoshsJysNAhGcXZAOZhFshk
G9cexUNtI78SiOniQnDR4HUu26jGc7MrgFDvF+odH1ZwGL3ZD2nuT1Wgk6BAIGgy
Xsr5WZW+LvXtcNd0/rt/Je0FTMcAynPj6UPjPHMl2OmFWIgvy0/zFI4fgD1pSOZK
X//ffwAWsusasZ3it3YdWzeutI9VQH6N1ZqaDLy8f2m+NFOt2nrWFAfyj0tRHBwe
5+/BYaXeQBMNmyQ3MyDNr4MrgvChleSRh7EUuM0Mj2PumHys2RjIuqF5BWYM0IHg
U87d0FzHCy4JGpopj+z8cDauvjeVCbbF3/jK98oDat0xlF41bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsdi7Yc0270w2Cavqbodb5buMeEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMWZj
MTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0ODZlMzUvYTQ1MTRmMzAtNDQyMy0z
NTg4LWIxMmEtZDc1YTlmOTQ1MjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDFmYzE4MTUtMzRlZi00MjRkLTgy
NTgtNTA2ZjhiNDg2ZTM1LzAxZmMxODE1LTM0ZWYtNDI0ZC04MjU4LTUwNmY4YjQ4
NmUzNS5jcmwwHwYDVR0jBBgwFoAUUaJ7qddOmwRfZds/wwhmgYTMQJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wMWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZm
OGI0ODZlMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0CbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNXN7NI7O+KRSm42PKNZiQs3MmU3iHOl+k2dxl3n5sHd3aF68q/Crt4
F1Z/7onlQwVJL5mPwiRgb3cmO4qYzqbkoCYR3+cMQef8ToictVeFCYnxrCLQHH5t
X6ugNvZT5XsZff2GnGa0t7i0wy8owK2qBjbgHrurj1ptRJXNS8o21SLGh2vh5Lsg
oMUGZCTfiyTqAH4OhdBRVBpeFqRKc1qrBx+IFwfMMGZo2hHHpgH6V+Jd63j85NEC
Y+OnhSxG8txLsPaoP4Qj+eUYd9dfVZ/WlW81C3MHVbXw4Q1lh7ahIqK93CKtWfmE
HObzh9/gMHfaIw4RjdeFZWVlKWGh0p0=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:17 2025 by rpki-client