Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/18dcab11-c8bc-3794-bd8a-3e8470eef882.roa
File:                     18dcab11-c8bc-3794-bd8a-3e8470eef882.roa (raw, json)
Hash identifier:          iIf0coCB4MSWgchLWtE1k1PNndP1aG1ZN7/n9Fto89I=
Subject key identifier:   CB:32:53:32:AB:C5:96:D1:1C:8C:70:36:26:37:91:C7:6C:64:87:7B
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858491AA6C4C3A578AD33FF86F700
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/18dcab11-c8bc-3794-bd8a-3e8470eef882.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     40317
IP address blocks:        137.118.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c4:c3:a5:78:ad:33:ff:86:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=c465a1df-4510-415a-be3d-b73d1bd95a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:50:39:7c:38:b0:ee:93:61:b6:c2:16:fc:8b:
                    c1:1f:73:83:22:54:f3:32:ab:1d:fa:03:fd:55:ca:
                    1c:ba:94:bd:75:4b:49:4d:a8:ab:8c:8d:7a:da:34:
                    5b:22:02:6c:46:f7:94:1e:42:37:fc:42:e0:fc:3e:
                    fe:0c:17:d0:99:40:67:65:b0:5b:a1:2a:ef:34:18:
                    cc:bf:0b:6d:cb:17:ba:55:b2:f4:63:5c:e4:59:b9:
                    7b:06:54:be:06:5a:d8:f0:65:cc:6b:a9:2e:86:6b:
                    01:e2:6e:05:14:96:c6:37:01:6e:0d:9b:b0:03:35:
                    e6:62:a9:46:65:de:0f:84:95:61:e1:20:bf:ca:27:
                    4d:90:68:70:f9:63:37:f9:78:02:1e:e2:b8:06:92:
                    d1:08:66:09:97:61:4b:0d:a0:75:19:42:cc:0e:a3:
                    60:f3:86:a5:88:1b:a2:9b:75:3f:d0:33:ec:28:ee:
                    19:23:aa:0f:c1:23:34:e3:fa:00:06:a7:17:65:1b:
                    d0:12:f5:25:99:08:90:3e:a1:09:1a:46:37:0c:03:
                    88:58:aa:9f:df:30:3d:b7:7b:06:2d:aa:9c:20:78:
                    7f:20:cb:67:57:2e:f7:5e:de:38:c9:3a:4b:71:33:
                    c6:40:e3:dd:6a:ec:c9:90:bf:03:48:25:84:9e:ef:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:32:53:32:AB:C5:96:D1:1C:8C:70:36:26:37:91:C7:6C:64:87:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/18dcab11-c8bc-3794-bd8a-3e8470eef882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:fd:3d:34:6f:62:b3:75:58:6a:43:46:84:60:21:3a:f6:
         2b:df:54:aa:e2:78:20:29:66:45:d5:16:8d:78:bb:d8:d7:dc:
         21:bf:6a:37:1b:fa:84:df:e4:0d:ff:de:a0:66:36:59:c3:fb:
         90:fb:44:1f:b5:6b:bf:d0:cf:3d:f1:50:d6:67:84:1c:f7:09:
         6b:78:3d:61:98:33:22:db:47:b7:cc:5a:0e:94:42:ff:94:aa:
         50:73:bb:da:24:34:87:de:6e:38:0b:8a:b5:eb:7d:84:06:47:
         0a:34:30:d5:f4:14:49:c7:3c:6e:8d:e6:72:ce:f3:92:ff:89:
         80:84:d7:4e:29:6f:c3:94:08:a7:3a:43:e7:80:39:7e:34:45:
         2e:2f:49:d1:ec:f6:96:92:85:b6:3f:3d:2c:f2:b2:86:46:34:
         3e:09:fa:44:31:92:2d:61:28:bb:62:60:48:7f:28:b7:ac:ec:
         e1:da:f7:2c:05:61:fd:5b:a6:21:c2:00:a3:90:dc:32:a5:b5:
         40:8b:d4:3a:a1:41:40:88:3c:27:a3:c5:c9:3e:39:69:6b:58:
         7e:75:3d:8d:24:c2:b5:79:7f:9b:fc:31:b7:b0:e5:2c:75:3c:
         cb:b0:a9:88:1c:bd:c5:69:3b:e6:30:04:88:5a:3e:67:fe:08:
         e3:0d:20:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsTDpXitM/+G9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
YzQ2NWExZGYtNDUxMC00MTVhLWJlM2QtYjczZDFiZDk1YTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lA5fDiw7pNhtsIW/IvBH3ODIlTzMqsd+gP9
VcocupS9dUtJTairjI162jRbIgJsRveUHkI3/ELg/D7+DBfQmUBnZbBboSrvNBjM
vwttyxe6VbL0Y1zkWbl7BlS+BlrY8GXMa6kuhmsB4m4FFJbGNwFuDZuwAzXmYqlG
Zd4PhJVh4SC/yidNkGhw+WM3+XgCHuK4BpLRCGYJl2FLDaB1GULMDqNg84aliBui
m3U/0DPsKO4ZI6oPwSM04/oABqcXZRvQEvUlmQiQPqEJGkY3DAOIWKqf3zA9t3sG
LaqcIHh/IMtnVy73Xt44yTpLcTPGQOPdauzJkL8DSCWEnu85jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsyUzKrxZbRHIxwNiY3kcdsZId7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvMThkY2FiMTEtYzhiYy0z
Nzk0LWJkOGEtM2U4NDcwZWVmODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiXbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEL//T00b2KzdVhqQ0aEYCE69ivfVKrieCApZkXVFo14u9jX3CG/ajcb
+oTf5A3/3qBmNlnD+5D7RB+1a7/Qzz3xUNZnhBz3CWt4PWGYMyLbR7fMWg6UQv+U
qlBzu9okNIfebjgLirXrfYQGRwo0MNX0FEnHPG6N5nLO85L/iYCE104pb8OUCKc6
Q+eAOX40RS4vSdHs9paShbY/PSzysoZGND4J+kQxki1hKLtiYEh/KLes7OHa9ywF
Yf1bpiHCAKOQ3DKltUCL1DqhQUCIPCejxck+OWlrWH51PY0kwrV5f5v8Mbew5Sx1
PMuwqYgcvcVpO+YwBIhaPmf+COMNIKQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:04:50 2025 by rpki-client