Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa
File:                     f4876b7b-e753-3c1c-a3ee-6749a1495184.roa (raw, json)
Hash identifier:          0Zvq3L6G3iDXFKHrWJ7tuMyCooVOBZ+zfdirjHrsBcA=
Subject key identifier:   00:5A:CC:B8:80:CA:98:75:13:E8:FE:5C:F4:82:98:C4:BE:53:AE:DD
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848CC7B97FD3E0C11AA04CBD900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     64267
IP address blocks:        149.20.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:97:fd:3e:0c:11:aa:04:cb:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=a0e5fe09-d282-4547-a79d-ed895d6bbc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:d5:1d:c5:4b:55:18:5a:5a:e7:b0:ea:c3:
                    67:b0:e4:12:f6:e2:ab:5a:c5:9e:88:86:25:0d:f0:
                    c5:24:f9:d3:3b:a8:a5:b3:f4:41:dc:36:e4:c6:8e:
                    34:b0:dc:d0:4f:8f:96:db:c7:20:fe:f3:c9:03:74:
                    5b:1c:54:c3:5b:f6:bf:c7:c2:06:b0:92:79:27:3d:
                    dd:c7:44:85:56:d9:fc:94:64:d8:83:ad:62:ef:3c:
                    c4:13:02:e7:22:ce:2f:31:58:7d:e7:b4:2b:63:59:
                    1d:7c:56:f5:ca:f4:c2:76:cc:ab:34:ef:5a:16:f5:
                    dc:01:ab:89:3f:21:f4:3a:46:9b:b8:26:64:f0:3f:
                    dd:03:ae:0a:a7:4a:09:34:64:86:8e:75:12:d2:5f:
                    f5:c4:b7:d3:c5:0e:18:62:7c:3a:e8:54:ed:5e:dc:
                    00:13:2b:ba:2c:5c:4c:8c:80:f4:5f:d4:d4:b1:90:
                    9b:ec:95:c2:b6:a6:87:ce:f1:1f:0d:a4:47:db:b6:
                    e7:f9:e9:05:60:04:6a:d4:8f:14:3f:85:26:8d:9c:
                    29:fd:ea:e6:e3:31:8f:cb:df:a0:41:09:a2:8e:2c:
                    fb:98:b7:67:a6:0f:7b:f9:f8:c3:f3:29:1c:ab:88:
                    bd:cc:d5:45:ed:a9:55:ad:d8:be:b4:60:54:6a:a4:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5A:CC:B8:80:CA:98:75:13:E8:FE:5C:F4:82:98:C4:BE:53:AE:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:90:d7:0c:ea:c5:5d:e8:13:87:1b:e1:b7:88:98:53:11:92:
         c0:b6:0b:ce:9a:19:a7:d3:ae:47:7a:69:48:c4:76:2a:5b:46:
         a1:8a:40:75:a7:43:68:f2:6f:1d:6f:fe:11:09:b1:e6:c9:78:
         e6:01:03:27:98:58:3e:bd:92:b9:4c:14:95:a9:91:f5:c2:12:
         87:06:de:30:7d:74:03:3e:49:7e:0f:70:08:5b:9f:0e:9a:2a:
         cf:5b:fb:0c:7b:dd:e7:d3:f1:e5:76:36:c7:39:78:c6:d5:7c:
         ac:e8:5e:a5:22:c7:e7:f2:b0:f5:00:52:49:70:84:98:34:e0:
         42:a0:88:fb:a7:8a:f1:6e:0e:c0:94:58:df:80:42:e2:51:1d:
         bf:19:cb:0f:48:21:89:02:75:0e:f2:32:31:18:51:f0:70:e5:
         c8:ed:12:04:5b:36:b7:eb:0d:70:67:ca:8a:44:47:75:07:f8:
         06:67:4c:52:16:c2:50:a6:4f:88:c6:31:f0:f6:e8:3f:d0:d6:
         99:63:00:50:f0:a6:17:b8:cf:01:76:46:44:46:bb:9b:61:af:
         df:f3:38:5a:5c:56:05:7a:c5:d5:08:89:a9:ca:c9:08:bd:b5:
         e4:68:ca:ff:73:5a:6e:65:fc:35:e1:97:17:f8:59:cf:7d:64:
         7e:82:da:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5f9PgwRqgTL2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
YTBlNWZlMDktZDI4Mi00NTQ3LWE3OWQtZWQ4OTVkNmJiYzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpjVHcVLVRhaWuew6sNnsOQS9uKrWsWeiIYl
DfDFJPnTO6ils/RB3Dbkxo40sNzQT4+W28cg/vPJA3RbHFTDW/a/x8IGsJJ5Jz3d
x0SFVtn8lGTYg61i7zzEEwLnIs4vMVh957QrY1kdfFb1yvTCdsyrNO9aFvXcAauJ
PyH0OkabuCZk8D/dA64Kp0oJNGSGjnUS0l/1xLfTxQ4YYnw66FTtXtwAEyu6LFxM
jID0X9TUsZCb7JXCtqaHzvEfDaRH27bn+ekFYARq1I8UP4UmjZwp/erm4zGPy9+g
QQmijiz7mLdnpg97+fjD8ykcq4i9zNVF7alVrdi+tGBUaqTrvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABazLiAyph1E+j+XPSCmMS+U67dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjQ4NzZiN2ItZTc1My0z
YzFjLWEzZWUtNjc0OWExNDk1MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRT1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGQ1wzqxV3oE4cb4beImFMRksC2C86aGafTrkd6aUjEdipbRqGKQHWn
Q2jybx1v/hEJsebJeOYBAyeYWD69krlMFJWpkfXCEocG3jB9dAM+SX4PcAhbnw6a
Ks9b+wx73efT8eV2Nsc5eMbVfKzoXqUix+fysPUAUklwhJg04EKgiPunivFuDsCU
WN+AQuJRHb8Zyw9IIYkCdQ7yMjEYUfBw5cjtEgRbNrfrDXBnyopER3UH+AZnTFIW
wlCmT4jGMfD26D/Q1pljAFDwphe4zwF2RkRGu5thr9/zOFpcVgV6xdUIianKyQi9
teRoyv9zWm5l/DXhlxf4Wc99ZH6C2j0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:04 2025 by rpki-client