Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa
File:                     ca9f455e-da4e-32b7-a8af-e94258969a46.roa (raw, json)
Hash identifier:          hNN5UajvutijUcg9/+0AbmxZVSS5NMH/DNOn+gt6FIk=
Subject key identifier:   A1:9A:15:E0:18:D7:50:15:18:9A:5B:52:8D:A1:2B:91:F7:B2:A0:B8
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F432858487A2075C3889DBD81D4136300
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     54048
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:75:c3:88:9d:bd:81:d4:13:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=2d4ee3c1-4272-4e6b-8ab5-9b177a94f58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:9d:8e:3b:d4:56:8c:fc:e3:f5:b2:20:09:
                    b0:4e:e8:34:94:9a:5b:63:33:07:d7:8b:5b:a1:ab:
                    4a:cb:da:9e:2a:b9:d4:cb:c9:31:82:bc:e0:a5:1e:
                    eb:73:67:47:70:e8:64:6b:ea:93:6a:8f:d9:4d:4a:
                    60:a2:a9:5d:e8:ba:f9:bb:bd:a3:73:69:f3:5e:de:
                    6e:26:5a:7a:64:56:4a:c8:2c:f8:73:e1:15:98:28:
                    41:81:cc:89:45:69:11:9e:de:5c:7c:6d:18:bd:dc:
                    56:2c:1e:13:78:1b:6a:b9:3a:04:66:cc:33:0b:7a:
                    cd:4e:4f:7e:6c:65:7d:ee:7c:73:f5:44:4b:8a:77:
                    30:21:71:4e:d9:96:37:9f:6e:23:b8:4c:f3:3f:e9:
                    a0:46:ed:58:20:d5:8a:6b:ef:35:ac:d4:aa:ed:2b:
                    58:e9:f1:97:5d:82:63:34:b9:55:8e:4f:72:3f:1e:
                    00:c4:95:a9:ad:ee:f2:58:75:e6:26:24:9b:8b:d5:
                    a5:5a:70:b4:cd:bc:63:6c:46:32:6c:10:73:3a:c2:
                    8f:82:ce:56:46:07:ab:b9:1d:8c:fc:d3:0f:18:9f:
                    9f:ec:5c:04:5f:09:03:be:fd:8a:69:a7:62:2a:c8:
                    61:f8:c5:bb:93:07:54:04:f4:54:93:3c:be:20:e1:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9A:15:E0:18:D7:50:15:18:9A:5B:52:8D:A1:2B:91:F7:B2:A0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/ca9f455e-da4e-32b7-a8af-e94258969a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:a8:04:ec:4d:93:24:d0:7c:7f:51:fa:08:8e:5d:18:d0:
         ad:6d:19:4a:38:ba:b8:ce:55:5c:ce:80:7b:d9:ec:a5:0e:f1:
         2c:a1:6d:35:31:af:79:a3:b9:6d:d2:54:51:9c:61:d3:b9:bc:
         59:f2:77:c5:86:f5:50:b0:61:f1:97:df:4c:0e:17:d7:6e:0c:
         cd:8e:90:b8:91:e5:0e:47:61:ed:c6:4b:eb:c8:60:ae:7d:f7:
         f7:a2:77:3c:01:ec:8d:ce:34:93:f9:32:8d:7a:65:b2:d1:49:
         58:aa:ba:6a:cf:0c:06:ac:3c:6f:54:b2:66:88:d3:9d:75:84:
         5a:1f:4a:5b:e1:b9:ed:6b:b3:5c:4f:7e:4e:0f:73:58:5b:cc:
         d6:1a:f0:97:91:d0:6d:d8:fd:ea:b8:29:0b:29:0e:b0:8d:08:
         9c:0d:04:8b:02:f9:59:fb:27:85:d8:0e:09:fd:9a:f6:26:ac:
         32:dd:9d:cf:09:2a:ce:59:9b:54:3f:0e:49:75:04:26:61:86:
         ef:06:a8:6d:66:7f:6b:55:fc:03:6b:cc:7b:1b:5c:02:cf:df:
         b7:9f:48:05:60:fd:22:73:d5:b1:83:3a:a3:79:76:80:8e:d7:
         bd:70:47:d1:55:aa:64:8d:41:85:7e:d1:10:de:79:d5:a7:17:
         93:1a:4c:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IHXDiJ29gdQTYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ViYmE4NTEtNzNkYy00YzgxLTljODUtZWRiNjNiMzNi
MzA1MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
MmQ0ZWUzYzEtNDI3Mi00ZTZiLThhYjUtOWIxNzdhOTRmNThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+djjvUVoz84/WyIAmwTug0lJpbYzMH14tb
oatKy9qeKrnUy8kxgrzgpR7rc2dHcOhka+qTao/ZTUpgoqld6Lr5u72jc2nzXt5u
Jlp6ZFZKyCz4c+EVmChBgcyJRWkRnt5cfG0YvdxWLB4TeBtquToEZswzC3rNTk9+
bGV97nxz9URLincwIXFO2ZY3n24juEzzP+mgRu1YINWKa+81rNSq7StY6fGXXYJj
NLlVjk9yPx4AxJWpre7yWHXmJiSbi9WlWnC0zbxjbEYybBBzOsKPgs5WRgeruR2M
/NMPGJ+f7FwEXwkDvv2KaadiKshh+MW7kwdUBPRUkzy+IOE5jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGaFeAY11AVGJpbUo2hK5H3sqC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJi
YTg1MS03M2RjLTRjODEtOWM4NS1lZGI2M2IzM2IzMDUvY2E5ZjQ1NWUtZGE0ZS0z
MmI3LWE4YWYtZTk0MjU4OTY5YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ViYmE4NTEtNzNkYy00YzgxLTlj
ODUtZWRiNjNiMzNiMzA1LzNlYmJhODUxLTczZGMtNGM4MS05Yzg1LWVkYjYzYjMz
YjMwNS5jcmwwHwYDVR0jBBgwFoAUo0JzHRfgcwo5wkye+fXqjrzFcQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJiYTg1MS03M2RjLTRjODEtOWM4NS1lZGI2
M2IzM2IzMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJqWqATsTZMk0Hx/UfoIjl0Y0K1tGUo4urjOVVzOgHvZ7KUO8SyhbTUx
r3mjuW3SVFGcYdO5vFnyd8WG9VCwYfGX30wOF9duDM2OkLiR5Q5HYe3GS+vIYK59
9/eidzwB7I3ONJP5Mo16ZbLRSViqumrPDAasPG9UsmaI0511hFofSlvhue1rs1xP
fk4Pc1hbzNYa8JeR0G3Y/eq4KQspDrCNCJwNBIsC+Vn7J4XYDgn9mvYmrDLdnc8J
Ks5Zm1Q/Dkl1BCZhhu8GqG1mf2tV/ANrzHsbXALP37efSAVg/SJz1bGDOqN5doCO
171wR9FVqmSNQYV+0RDeedWnF5MaTKI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:31 2025 by rpki-client