Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/4e3dd55e-27c1-3045-9b2e-6664b598b276.roa
File:                     4e3dd55e-27c1-3045-9b2e-6664b598b276.roa (raw, json)
Hash identifier:          pSte83SVksbGvvGdf8KAyPefDbHltbEqCfVm5mzElek=
Subject key identifier:   7C:AE:14:5F:C9:FD:13:00:B9:41:B5:36:81:0A:70:8A:8D:DC:61:2B
Certificate issuer:       /CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Certificate serial:       010D0C9F4328584908817BE0A405022FDD46F300
Authority key identifier: 1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/4e3dd55e-27c1-3045-9b2e-6664b598b276.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     14661
IP address blocks:        142.51.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7b:e0:a4:05:02:2f:dd:46:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba63dff-a873-460d-a7e8-ce4e073bce67
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=16af16a2-35d3-4203-acd0-fef448cb5da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:80:88:9a:7d:9a:d6:2b:fb:ed:cc:1c:5e:
                    57:a6:5b:ed:62:8b:c7:0c:ba:a8:56:08:bd:df:ae:
                    1a:21:ce:ff:82:f0:a5:fd:eb:04:a4:78:2e:d1:21:
                    34:fc:c2:b8:f4:29:fd:5f:88:07:03:75:dc:cf:e3:
                    e4:61:e4:0a:b1:27:29:b4:2e:e3:be:9f:8b:fb:89:
                    79:ee:69:76:87:3d:28:58:e3:40:69:54:85:f3:2e:
                    04:f0:3b:31:a8:23:92:5f:78:b1:fd:d2:92:51:1a:
                    42:3b:d7:f6:08:46:26:8a:e2:f8:08:80:dd:cc:c9:
                    75:e7:9b:ab:02:38:1b:33:f6:ad:82:cc:8c:e6:4b:
                    b4:44:ff:40:d1:75:4b:40:c8:d9:42:34:c0:1c:d8:
                    8f:b1:58:ef:89:33:24:d5:4b:cd:80:d6:82:93:fe:
                    5d:f2:84:c4:d3:88:dc:7d:38:a1:1e:6c:0a:52:d6:
                    2a:eb:24:1d:4c:e4:55:ba:63:2b:ce:d6:1c:69:38:
                    ba:b6:d6:ae:4e:4c:fc:8d:ff:13:de:82:c9:f4:1d:
                    7b:7e:a6:72:bd:35:9f:d3:db:50:22:fa:49:fd:34:
                    3b:4b:68:d0:5d:13:0c:9a:b1:89:18:bd:db:21:18:
                    75:a2:91:4e:76:8d:44:6a:0d:ce:70:df:6b:6b:fa:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AE:14:5F:C9:FD:13:00:B9:41:B5:36:81:0A:70:8A:8D:DC:61:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/4e3dd55e-27c1-3045-9b2e-6664b598b276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl

            X509v3 Authority Key Identifier:
                keyid:1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.51.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:52:bb:13:89:e4:53:dc:43:67:86:0a:9a:8b:e0:85:e2:e9:
         5b:00:f8:32:54:1c:f7:9c:35:08:62:9b:72:8c:47:0d:93:c6:
         65:dc:12:7e:f4:54:92:1b:03:d8:42:48:3e:ab:1a:f5:fb:fb:
         78:4b:41:bc:26:83:a6:6b:90:5b:53:14:bb:43:24:27:d9:e2:
         d9:c3:94:cc:f4:7a:d6:94:4f:77:71:28:f9:c3:50:39:ec:89:
         45:e3:28:ab:5b:b6:11:02:99:75:1f:aa:2f:94:d1:ec:c5:e9:
         3b:8c:fa:ec:3a:9d:18:1b:42:77:20:9e:eb:8e:23:73:4d:55:
         c3:16:5f:1c:b5:f0:08:a1:d8:c7:dc:35:93:5f:b4:56:01:56:
         54:2b:ff:b8:22:52:a8:6d:87:3f:1b:a4:ab:4c:2b:5a:15:ec:
         88:73:c8:d0:d4:26:7d:92:42:15:f4:85:2b:63:97:ff:db:07:
         e8:4e:9f:eb:1b:b7:f7:13:ea:c3:87:84:4b:ea:69:a8:05:c3:
         a4:b3:b1:d9:b7:1d:f7:09:e9:42:f7:a5:ae:7a:e6:6d:a8:ba:
         cc:de:f9:aa:f8:5b:e1:8a:4a:a3:17:0a:be:f7:0a:e8:84:65:
         8f:f6:02:b7:71:71:e2:52:3b:db:9c:b4:4c:31:4a:3e:2b:8c:
         c0:ac:48:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXvgpAUCL91G8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJhNjNkZmYtYTg3My00NjBkLWE3ZTgtY2U0ZTA3M2Jj
ZTY3MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
MTZhZjE2YTItMzVkMy00MjAzLWFjZDAtZmVmNDQ4Y2I1ZGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYGAiJp9mtYr++3MHF5XplvtYovHDLqoVgi9
364aIc7/gvCl/esEpHgu0SE0/MK49Cn9X4gHA3Xcz+PkYeQKsScptC7jvp+L+4l5
7ml2hz0oWONAaVSF8y4E8DsxqCOSX3ix/dKSURpCO9f2CEYmiuL4CIDdzMl155ur
AjgbM/atgsyM5ku0RP9A0XVLQMjZQjTAHNiPsVjviTMk1UvNgNaCk/5d8oTE04jc
fTihHmwKUtYq6yQdTORVumMrztYcaTi6ttauTkz8jf8T3oLJ9B17fqZyvTWf09tQ
IvpJ/TQ7S2jQXRMMmrGJGL3bIRh1opFOdo1Eag3OcN9ra/qZzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHyuFF/J/RMAuUG1NoEKcIqN3GErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYmE2
M2RmZi1hODczLTQ2MGQtYTdlOC1jZTRlMDczYmNlNjcvNGUzZGQ1NWUtMjdjMS0z
MDQ1LTliMmUtNjY2NGI1OThiMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmJhNjNkZmYtYTg3My00NjBkLWE3
ZTgtY2U0ZTA3M2JjZTY3L2ZiYTYzZGZmLWE4NzMtNDYwZC1hN2U4LWNlNGUwNzNi
Y2U2Ny5jcmwwHwYDVR0jBBgwFoAUHDAi6rfmkCf6cEosqxC9fj7TAc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYmE2M2RmZi1hODczLTQ2MGQtYTdlOC1jZTRl
MDczYmNlNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjjOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZSuxOJ5FPcQ2eGCpqL4IXi6VsA+DJUHPecNQhim3KMRw2TxmXcEn70
VJIbA9hCSD6rGvX7+3hLQbwmg6ZrkFtTFLtDJCfZ4tnDlMz0etaUT3dxKPnDUDns
iUXjKKtbthECmXUfqi+U0ezF6TuM+uw6nRgbQncgnuuOI3NNVcMWXxy18Aih2Mfc
NZNftFYBVlQr/7giUqhthz8bpKtMK1oV7IhzyNDUJn2SQhX0hStjl//bB+hOn+sb
t/cT6sOHhEvqaagFw6Szsdm3HfcJ6UL3pa565m2ousze+ar4W+GKSqMXCr73CuiE
ZY/2ArdxceJSO9uctEwxSj4rjMCsSPo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:26 2025 by rpki-client