Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ce5b660-bfc7-3ba6-8311-e8d2485267fb.roa
File:                     0ce5b660-bfc7-3ba6-8311-e8d2485267fb.roa (raw, json)
Hash identifier:          8fkwx87Q2n596Z6OqiQHWHm1Kiv/uWK++tllIHfOW00=
Subject key identifier:   6D:3F:5A:9F:F6:65:F2:21:2C:8E:53:F7:8B:75:51:73:3C:84:D8:49
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584905B6B0E065AA39FD77908C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ce5b660-bfc7-3ba6-8311-e8d2485267fb.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     48031
IP address blocks:        192.177.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b0:e0:65:aa:39:fd:77:90:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=aca02523-1dc4-4108-93a1-be46cd223053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:d2:38:c6:71:22:70:8e:05:0b:3c:b0:f6:
                    76:c2:89:56:f9:d8:28:4d:28:a6:fd:95:02:a9:e7:
                    34:f9:49:de:03:94:b7:19:5b:71:1f:22:7c:dd:4d:
                    f2:ad:e3:6a:02:cb:ed:c5:d3:7d:d1:df:be:3c:34:
                    39:75:6f:fd:74:7d:0a:20:62:ab:38:a7:cd:a4:1c:
                    a9:eb:4c:36:33:35:45:13:da:68:15:0c:89:34:62:
                    a9:93:a5:54:48:57:5e:8e:53:4c:5d:13:ec:b5:ac:
                    65:5f:f1:c4:24:9b:05:60:70:98:10:e8:22:b3:60:
                    eb:0b:6f:0b:28:8b:83:fa:a7:b2:8e:dc:75:1f:45:
                    76:0e:c8:fc:5d:66:df:d9:6c:c1:b0:5b:b7:27:30:
                    79:1d:79:a4:e2:47:73:7b:b0:24:57:bf:00:54:dd:
                    88:37:74:06:f6:ea:4b:c5:b2:c2:7e:e4:27:fa:d2:
                    c6:83:e4:4f:2f:eb:3b:dd:da:7f:8c:c5:68:46:bf:
                    7c:a9:44:28:d4:ef:06:90:24:08:13:a2:f2:61:46:
                    05:b0:0f:6b:2c:41:d0:1a:b0:9a:ab:b1:35:25:e1:
                    9d:75:76:a5:84:04:e6:5f:cc:96:01:d1:ce:a4:fa:
                    ed:b9:6c:a1:5d:c3:c9:fc:86:a5:f6:ac:01:f7:9b:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3F:5A:9F:F6:65:F2:21:2C:8E:53:F7:8B:75:51:73:3C:84:D8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0ce5b660-bfc7-3ba6-8311-e8d2485267fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5c:9b:17:2c:f2:59:0f:f6:51:ca:55:58:5f:4b:cc:27:91:
         76:9c:ad:10:f4:66:26:08:dc:a3:ab:4a:7c:c0:bf:9c:3b:89:
         da:bc:d1:f2:03:7e:5d:0e:a1:f9:ec:46:d8:c0:9d:15:1a:2a:
         01:3a:23:fb:28:d1:1b:ac:90:b8:00:4a:3a:4f:d6:a5:9e:7c:
         9c:93:b7:06:5c:18:85:e0:ea:43:72:bb:83:39:cd:fd:f9:e0:
         92:d4:3c:cd:ae:32:40:3f:08:2b:cf:fa:49:76:dd:9d:ba:73:
         a5:7f:4a:2d:9b:b8:37:d5:05:12:b1:c3:56:2d:00:c6:e3:03:
         49:db:06:d9:af:ab:e0:56:c5:05:0f:0f:8b:ae:ee:a1:28:d6:
         b3:35:fe:f9:9b:c7:15:a3:4c:4b:73:20:1e:8f:bb:e0:a8:38:
         b4:a9:4f:e3:6e:2d:cb:c7:36:67:d4:da:9e:29:93:6d:2f:12:
         c3:8a:8f:63:49:d2:4a:7a:ec:72:b3:5f:1b:54:93:cf:65:84:
         9c:1c:18:e3:4c:bf:dd:e5:ed:9d:b9:fa:7f:44:10:d6:56:b0:
         a7:e8:0e:e3:6b:ce:c8:0e:5d:18:1f:e9:fa:87:7a:a0:02:ee:
         c6:8a:45:ad:ac:0b:b0:e3:68:2a:7b:eb:4a:19:3a:41:22:13:
         57:56:24:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrDgZao5/XeQjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
YWNhMDI1MjMtMWRjNC00MTA4LTkzYTEtYmU0NmNkMjIzMDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH7SOMZxInCOBQs8sPZ2wolW+dgoTSim/ZUC
qec0+UneA5S3GVtxHyJ83U3yreNqAsvtxdN90d++PDQ5dW/9dH0KIGKrOKfNpByp
60w2MzVFE9poFQyJNGKpk6VUSFdejlNMXRPstaxlX/HEJJsFYHCYEOgis2DrC28L
KIuD+qeyjtx1H0V2Dsj8XWbf2WzBsFu3JzB5HXmk4kdze7AkV78AVN2IN3QG9upL
xbLCfuQn+tLGg+RPL+s73dp/jMVoRr98qUQo1O8GkCQIE6LyYUYFsA9rLEHQGrCa
q7E1JeGddXalhATmX8yWAdHOpPrtuWyhXcPJ/Ial9qwB95ucjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG0/Wp/2ZfIhLI5T94t1UXM8hNhJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGNlNWI2NjAtYmZjNy0z
YmE2LTgzMTEtZThkMjQ4NTI2N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdcmxcs8lkP9lHKVVhfS8wnkXacrRD0ZiYI3KOrSnzAv5w7idq80fID
fl0OofnsRtjAnRUaKgE6I/so0RuskLgASjpP1qWefJyTtwZcGIXg6kNyu4M5zf35
4JLUPM2uMkA/CCvP+kl23Z26c6V/Si2buDfVBRKxw1YtAMbjA0nbBtmvq+BWxQUP
D4uu7qEo1rM1/vmbxxWjTEtzIB6Pu+CoOLSpT+NuLcvHNmfU2p4pk20vEsOKj2NJ
0kp67HKzXxtUk89lhJwcGONMv93l7Z25+n9EENZWsKfoDuNrzsgOXRgf6fqHeqAC
7saKRa2sC7DjaCp760oZOkEiE1dWJF4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:07 2025 by rpki-client