Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/ea1cef16-3b5e-3a1c-9759-971f167e4a21.roa
File:                     ea1cef16-3b5e-3a1c-9759-971f167e4a21.roa (raw, json)
Hash identifier:          nxZ3reqGrEkXmvO3OQJGhaPlKL2EQo86RaoOi+JNhG4=
Subject key identifier:   B4:8C:11:6E:E1:9A:A7:D1:65:27:D1:D4:86:66:3E:F2:E4:D4:4F:7B
Certificate issuer:       /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial:       010D0C9F432858486C2B21A17EE45C909DCDD880
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/ea1cef16-3b5e-3a1c-9759-971f167e4a21.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     199563
IP address blocks:        132.190.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:21:a1:7e:e4:5c:90:9d:cd:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=10f313d7-e2f4-472b-970f-42a953fa1aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:63:aa:06:15:9e:1d:9e:38:bc:f4:f0:cc:f9:
                    39:d5:30:21:e6:c9:79:68:b0:b8:4b:93:3e:25:bd:
                    b9:3c:f2:c8:01:9a:48:16:68:7b:bc:46:54:e3:21:
                    c0:e6:1f:b5:72:bc:bf:61:d6:bf:d4:0b:4f:7e:f7:
                    a5:06:5a:16:be:32:62:cc:f2:6c:bf:3d:d4:aa:14:
                    12:39:3d:89:07:89:89:3a:57:25:4d:a4:f8:66:62:
                    68:62:36:4c:33:2b:f6:f2:9b:9a:df:9e:77:fe:92:
                    23:1d:e3:03:fc:ac:c5:0a:15:87:f3:93:dd:50:14:
                    00:c5:32:cf:2e:05:ce:bc:6b:ee:b4:b7:4d:b7:0b:
                    c9:38:fd:74:af:64:fd:a8:c4:8e:9c:3f:c7:22:a0:
                    58:fd:05:2b:6c:5e:65:75:fe:20:8b:84:e2:71:3d:
                    c2:55:06:d2:3e:bd:48:50:9c:c6:96:cc:70:5d:54:
                    76:e6:a2:3d:78:f9:29:64:cc:7f:74:5d:c9:ca:a1:
                    9b:63:88:e0:d1:b6:c5:0c:9f:4d:fb:bf:89:51:ea:
                    e8:0a:1a:0e:49:ed:ba:b1:49:69:1c:b0:59:34:20:
                    ed:3c:d9:c0:44:bc:1c:70:54:1a:17:04:86:3b:28:
                    8c:8b:79:bf:54:ab:24:4e:c1:21:85:ff:0d:cc:d9:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8C:11:6E:E1:9A:A7:D1:65:27:D1:D4:86:66:3E:F2:E4:D4:4F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/ea1cef16-3b5e-3a1c-9759-971f167e4a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl

            X509v3 Authority Key Identifier:
                keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.190.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:34:24:ed:14:92:ca:a3:5e:b6:8a:05:33:99:79:67:84:
         d9:f3:64:aa:c5:9e:d3:85:88:15:8c:e2:42:f8:24:93:48:a7:
         c0:86:8b:df:7b:f6:0a:4f:5b:20:7e:86:7e:19:13:57:9d:41:
         6e:76:86:e7:a4:6f:fc:6d:31:43:b1:4e:ea:6c:79:ef:5d:67:
         9c:0b:ec:5c:27:bc:fa:78:3b:f7:4c:26:ff:6e:4b:e0:ae:64:
         c8:84:9b:d2:80:81:26:88:b9:f0:f0:3f:b0:8d:36:38:75:78:
         bc:33:32:c3:cf:a1:d4:e2:53:98:98:5c:08:cc:74:3e:b9:ab:
         b9:21:79:69:c9:c1:5f:fa:e5:25:29:5f:5c:af:6b:14:e6:64:
         3b:44:8e:c8:ec:d4:0c:6d:a8:bc:e4:2b:a0:97:2b:04:08:8f:
         f8:73:d8:4e:91:06:bf:2d:67:81:ae:39:ae:f1:0b:5d:6b:a3:
         27:42:bb:e1:13:44:3f:1c:8c:8b:f4:a7:06:7e:c6:23:aa:65:
         e2:d9:14:80:6d:eb:7c:9e:84:48:54:28:7d:e0:51:2c:d2:dd:
         4d:0b:91:68:6d:a8:2a:61:64:52:72:97:e5:32:c0:67:4e:65:
         f4:b9:1d:0f:0a:58:d1:7e:b8:14:49:19:e5:0f:5b:1f:9e:51:
         e7:a8:45:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKyGhfuRckJ3N2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzN2IwYzItMDNmNy00ZDRkLTkwNDgtYTcwNDFkZjhj
Mjg4MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk
MTBmMzEzZDctZTJmNC00NzJiLTk3MGYtNDJhOTUzZmExYWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWOqBhWeHZ44vPTwzPk51TAh5sl5aLC4S5M+
Jb25PPLIAZpIFmh7vEZU4yHA5h+1cry/Yda/1AtPfvelBloWvjJizPJsvz3UqhQS
OT2JB4mJOlclTaT4ZmJoYjZMMyv28pua3553/pIjHeMD/KzFChWH85PdUBQAxTLP
LgXOvGvutLdNtwvJOP10r2T9qMSOnD/HIqBY/QUrbF5ldf4gi4TicT3CVQbSPr1I
UJzGlsxwXVR25qI9ePkpZMx/dF3JyqGbY4jg0bbFDJ9N+7+JUeroChoOSe26sUlp
HLBZNCDtPNnARLwccFQaFwSGOyiMi3m/VKskTsEhhf8NzNnYZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSMEW7hmqfRZSfR1IZmPvLk1E97MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYzM3
YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0MWRmOGMyODgvZWExY2VmMTYtM2I1ZS0z
YTFjLTk3NTktOTcxZjE2N2U0YTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmMzN2IwYzItMDNmNy00ZDRkLTkw
NDgtYTcwNDFkZjhjMjg4L2ZjMzdiMGMyLTAzZjctNGQ0ZC05MDQ4LWE3MDQxZGY4
YzI4OC5jcmwwHwYDVR0jBBgwFoAUAydCR6DwqWhl6XIMJ3HOyGOyd4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYzM3YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0
MWRmOGMyODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhL4BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1zNCTtFJLKo162igUzmXlnhNnzZKrFntOFiBWM4kL4JJNIp8CGi997
9gpPWyB+hn4ZE1edQW52huekb/xtMUOxTupsee9dZ5wL7FwnvPp4O/dMJv9uS+Cu
ZMiEm9KAgSaIufDwP7CNNjh1eLwzMsPPodTiU5iYXAjMdD65q7kheWnJwV/65SUp
X1yvaxTmZDtEjsjs1AxtqLzkK6CXKwQIj/hz2E6RBr8tZ4GuOa7xC11roydCu+ET
RD8cjIv0pwZ+xiOqZeLZFIBt63yehEhUKH3gUSzS3U0LkWhtqCphZFJyl+UywGdO
ZfS5HQ8KWNF+uBRJGeUPWx+eUeeoRXw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:02 2025 by rpki-client