Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cd57da41-15d2-3a57-9923-ffea8d1ea9cf.roa
File:                     cd57da41-15d2-3a57-9923-ffea8d1ea9cf.roa (raw, json)
Hash identifier:          jiJnqIQADOGbtRmvLVeKSTZx7GICEDAllBgvvrZmSqo=
Subject key identifier:   31:99:42:28:08:B4:09:B9:5D:F1:EF:0E:58:8D:99:F8:DC:6F:FF:A7
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285848F9269B7BD9B37F1BE0CBCA80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cd57da41-15d2-3a57-9923-ffea8d1ea9cf.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     1280
IP address blocks:        149.20.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:9b:7b:d9:b3:7f:1b:e0:cb:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=69abdf46-520f-49a8-8f7e-ab72a2e33923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d2:4a:8b:41:da:94:1e:db:1c:db:ba:40:2d:
                    b7:f8:a7:a6:08:87:b7:56:5b:9d:89:aa:e9:f3:14:
                    96:c8:c7:62:fb:e1:23:73:7c:fe:c6:5c:65:bd:26:
                    f3:13:8d:81:2a:5c:70:76:bf:40:2d:18:b9:a2:1c:
                    c1:e0:f7:c0:4d:dd:b3:61:e1:99:3d:78:ee:47:ec:
                    d6:f7:ed:cc:78:41:85:4e:24:2c:64:97:bd:09:98:
                    80:17:e0:b0:69:a3:45:17:3c:0c:e3:c8:6e:44:60:
                    59:d3:00:ab:20:39:e5:0d:5f:8b:32:7c:3e:fa:88:
                    8c:9e:03:16:44:25:dd:3d:c0:dc:c5:b3:6a:24:bd:
                    6b:c4:2b:7b:87:41:39:87:ef:b0:43:47:f1:1e:ca:
                    5f:de:f4:57:01:ef:f8:79:f5:86:db:89:ac:ee:cc:
                    8e:6a:0a:37:2a:f5:29:b2:7c:0b:9a:e2:d1:e2:53:
                    03:a1:37:cd:a7:e6:c6:a9:9b:22:00:cf:cd:88:19:
                    1c:85:bb:7d:7c:42:15:36:61:7c:32:3e:c3:6e:f4:
                    6e:00:0c:0f:f1:03:fe:bf:87:e1:2f:de:d0:b5:77:
                    b1:fd:a4:70:9d:79:84:7a:cb:e1:34:b1:db:fc:3b:
                    98:3f:03:cb:70:8b:29:eb:c2:a0:dd:c0:ba:60:46:
                    63:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:42:28:08:B4:09:B9:5D:F1:EF:0E:58:8D:99:F8:DC:6F:FF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cd57da41-15d2-3a57-9923-ffea8d1ea9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:e0:15:ff:33:b6:d6:16:15:a6:22:6b:37:fd:11:f7:4f:
         4f:52:65:ce:3d:10:ce:4a:a5:bf:43:1d:30:66:f0:d5:60:a5:
         4f:dd:b1:a1:80:1e:de:bd:66:59:e3:fa:af:b3:84:f6:c0:67:
         a3:ff:cb:bf:b6:66:8d:67:66:ae:de:cc:ca:ba:69:f0:0d:36:
         29:fb:d1:f9:0d:38:dc:8d:03:97:1f:56:84:46:d3:cd:15:92:
         31:5e:27:c0:e1:d6:85:70:f9:92:ed:da:56:94:5a:aa:5a:7a:
         d3:f9:fe:1a:ff:66:5b:3b:90:90:45:e5:c2:bd:7f:ad:cb:55:
         39:01:f3:c0:32:0f:37:ed:12:99:e5:2d:0c:ab:ef:22:8a:7f:
         bb:ce:79:11:19:ef:a5:b5:c1:71:d0:12:98:ce:62:56:c1:98:
         de:10:54:fd:4a:a6:12:d5:a3:2b:33:b0:9d:24:2f:50:95:f5:
         9a:5a:da:0e:c2:eb:b3:58:b3:2f:42:a5:c6:6e:d2:2b:41:4a:
         73:ae:91:78:56:9f:a7:b3:f6:e3:aa:57:b4:fe:29:3b:9e:cb:
         1b:fe:b8:af:a2:a5:85:61:b4:43:d7:46:0d:c1:05:a0:12:69:
         a9:7d:70:1c:9a:d6:16:77:85:a1:be:1d:d1:56:29:58:e0:58:
         64:6f:3d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jpt72bN/G+DLyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NjlhYmRmNDYtNTIwZi00OWE4LThmN2UtYWI3MmEyZTMzOTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NJKi0HalB7bHNu6QC23+KemCIe3Vludiarp
8xSWyMdi++Ejc3z+xlxlvSbzE42BKlxwdr9ALRi5ohzB4PfATd2zYeGZPXjuR+zW
9+3MeEGFTiQsZJe9CZiAF+CwaaNFFzwM48huRGBZ0wCrIDnlDV+LMnw++oiMngMW
RCXdPcDcxbNqJL1rxCt7h0E5h++wQ0fxHspf3vRXAe/4efWG24ms7syOago3KvUp
snwLmuLR4lMDoTfNp+bGqZsiAM/NiBkchbt9fEIVNmF8Mj7DbvRuAAwP8QP+v4fh
L97QtXex/aRwnXmEesvhNLHb/DuYPwPLcIsp68Kg3cC6YEZjVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGZQigItAm5XfHvDliNmfjcb/+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvY2Q1N2RhNDEtMTVkMi0z
YTU3LTk5MjMtZmZlYThkMWVhOWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABM4BX/M7bWFhWmIms3/RH3T09SZc49EM5Kpb9DHTBm8NVgpU/dsaGA
Ht69Zlnj+q+zhPbAZ6P/y7+2Zo1nZq7ezMq6afANNin70fkNONyNA5cfVoRG080V
kjFeJ8Dh1oVw+ZLt2laUWqpaetP5/hr/Zls7kJBF5cK9f63LVTkB88AyDzftEpnl
LQyr7yKKf7vOeREZ76W1wXHQEpjOYlbBmN4QVP1KphLVoyszsJ0kL1CV9Zpa2g7C
67NYsy9CpcZu0itBSnOukXhWn6ez9uOqV7T+KTueyxv+uK+ipYVhtEPXRg3BBaAS
aal9cBya1hZ3haG+HdFWKVjgWGRvPQs=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:43 2025 by rpki-client