Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/a9024e57-1560-3b52-a47e-6f71faada852.roa
File:                     a9024e57-1560-3b52-a47e-6f71faada852.roa (raw, json)
Hash identifier:          Ebpai9WlONWa2RncJ369HLPQTjpUEamSZ+sEqfLJGp4=
Subject key identifier:   74:B1:5F:61:13:2E:1B:44:CC:7B:CF:D8:CF:D4:2E:95:9B:75:2F:D2
Certificate issuer:       /CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
Certificate serial:       010D0C9F43285849088173930EB3DCDB54269A00
Authority key identifier: 26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/a9024e57-1560-3b52-a47e-6f71faada852.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     393728
IP address blocks:        192.94.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:73:93:0e:b3:dc:db:54:26:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12578fcd-04a5-447c-822d-aaf9f7580cdd
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=5c276d48-efef-4218-961c-0962531f1579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:04:c5:8e:49:5d:cb:76:87:f8:2b:0a:f2:
                    d8:e1:41:48:32:a3:22:b0:2c:33:f4:e3:e5:50:74:
                    0c:7e:0b:95:94:e0:43:43:fa:ef:6f:c3:f5:0d:96:
                    a3:f2:a4:73:a5:e4:b5:54:b6:64:f0:4c:f9:50:2c:
                    97:bd:d8:11:fb:72:11:95:e6:b5:dd:06:d2:52:bf:
                    d5:eb:e5:7d:47:25:1c:27:e8:b9:b0:84:03:e4:cd:
                    89:72:0f:b1:94:ca:6a:d3:2f:25:09:c7:e0:bb:24:
                    c4:da:bd:13:d5:76:bd:54:e4:c2:31:c4:d4:1a:ca:
                    14:c1:45:18:94:c6:69:73:db:85:82:68:39:81:16:
                    f9:00:7f:1b:63:fd:b2:b3:e7:75:c0:f3:39:a8:93:
                    2a:80:49:7f:a3:e1:c0:6d:54:23:dc:6a:5f:33:a2:
                    35:82:3b:9b:28:4e:55:ce:a2:f9:89:6e:5f:f8:4f:
                    e4:5a:e6:82:11:40:42:f0:4e:c5:c4:6f:b0:f1:1b:
                    a8:69:ce:f3:19:c6:14:1b:74:03:55:aa:62:9a:8a:
                    69:c3:b5:e4:e4:cf:68:99:70:11:77:6f:26:de:6a:
                    61:21:4e:97:f3:73:76:dd:53:2f:f2:4b:95:8f:29:
                    55:5b:84:f2:f4:9d:df:1b:51:86:de:37:e6:23:68:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B1:5F:61:13:2E:1B:44:CC:7B:CF:D8:CF:D4:2E:95:9B:75:2F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/a9024e57-1560-3b52-a47e-6f71faada852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd/12578fcd-04a5-447c-822d-aaf9f7580cdd.crl

            X509v3 Authority Key Identifier:
                keyid:26:00:FF:30:87:64:B4:F5:93:85:B2:60:A6:CF:8B:3D:C4:CA:24:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12578fcd-04a5-447c-822d-aaf9f7580cdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:10:8b:77:2c:f3:36:96:6e:3b:6a:9c:f2:e9:d2:68:7b:dd:
         7a:7a:aa:be:9d:b2:c8:04:a5:9d:1c:01:ac:e2:dd:89:0a:bb:
         f8:98:37:05:c5:35:c9:14:f3:6e:a9:af:4e:a1:82:2f:d5:96:
         01:34:16:df:f4:c3:97:33:63:90:3b:be:fe:be:8b:71:15:68:
         ba:9b:61:fb:9d:aa:d1:8a:44:e1:35:56:af:2c:0a:3c:0a:4d:
         5e:b9:24:17:13:09:45:81:52:60:9c:9f:c6:23:a3:3b:db:0f:
         61:06:d0:9a:e8:c6:5f:3d:3e:31:49:61:e7:b3:a6:b4:50:25:
         18:ba:59:b2:dd:a6:64:b1:05:25:11:72:bc:1c:ba:e4:a7:ff:
         bc:44:35:7c:0d:87:62:c3:2f:ca:f1:a7:07:12:8a:f3:9d:5c:
         03:15:af:84:81:89:de:51:9f:b9:e2:5d:bf:6c:be:d2:69:af:
         7e:4b:20:04:4e:9a:a7:31:10:a6:48:a6:a7:91:9a:b7:e4:53:
         dd:bd:f7:de:2c:3d:8b:f0:5b:83:5a:42:fa:71:46:6b:cc:4c:
         33:9e:b2:39:7d:bf:de:f8:f0:78:8e:4c:75:4b:50:f8:66:87:
         11:8b:27:17:48:42:c8:dc:f4:da:47:5c:c5:f8:01:bf:7d:ba:
         40:e7:04:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXOTDrPc21QmmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI1NzhmY2QtMDRhNS00NDdjLTgyMmQtYWFmOWY3NTgw
Y2RkMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
NWMyNzZkNDgtZWZlZi00MjE4LTk2MWMtMDk2MjUzMWYxNTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pIExY5JXct2h/grCvLY4UFIMqMisCwz9OPl
UHQMfguVlOBDQ/rvb8P1DZaj8qRzpeS1VLZk8Ez5UCyXvdgR+3IRlea13QbSUr/V
6+V9RyUcJ+i5sIQD5M2Jcg+xlMpq0y8lCcfguyTE2r0T1Xa9VOTCMcTUGsoUwUUY
lMZpc9uFgmg5gRb5AH8bY/2ys+d1wPM5qJMqgEl/o+HAbVQj3GpfM6I1gjubKE5V
zqL5iW5f+E/kWuaCEUBC8E7FxG+w8Ruoac7zGcYUG3QDVapimoppw7Xk5M9omXAR
d28m3mphIU6X83N23VMv8kuVjylVW4Ty9J3fG1GG3jfmI2h+gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSxX2ETLhtEzHvP2M/ULpWbdS/SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMjU3
OGZjZC0wNGE1LTQ0N2MtODIyZC1hYWY5Zjc1ODBjZGQvYTkwMjRlNTctMTU2MC0z
YjUyLWE0N2UtNmY3MWZhYWRhODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTI1NzhmY2QtMDRhNS00NDdjLTgy
MmQtYWFmOWY3NTgwY2RkLzEyNTc4ZmNkLTA0YTUtNDQ3Yy04MjJkLWFhZjlmNzU4
MGNkZC5jcmwwHwYDVR0jBBgwFoAUJgD/MIdktPWThbJgps+LPcTKJNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMjU3OGZjZC0wNGE1LTQ0N2MtODIyZC1hYWY5
Zjc1ODBjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwF58MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIQi3cs8zaWbjtqnPLp0mh73Xp6qr6dssgEpZ0cAazi3YkKu/iYNwXF
NckU826pr06hgi/VlgE0Ft/0w5czY5A7vv6+i3EVaLqbYfudqtGKROE1Vq8sCjwK
TV65JBcTCUWBUmCcn8YjozvbD2EG0Jroxl89PjFJYeezprRQJRi6WbLdpmSxBSUR
crwcuuSn/7xENXwNh2LDL8rxpwcSivOdXAMVr4SBid5Rn7niXb9svtJpr35LIARO
mqcxEKZIpqeRmrfkU929994sPYvwW4NaQvpxRmvMTDOesjl9v9748HiOTHVLUPhm
hxGLJxdIQsjc9NpHXMX4Ab99ukDnBOA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:09:50 2025 by rpki-client