Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa
File:                     5cea7fe7-35eb-332d-a713-9768d64cc717.roa (raw, json)
Hash identifier:          ig104WIlVY9Z80ync9gUMsUDEk/Mqr9HJLa/FBTZD6w=
Subject key identifier:   D8:58:9E:09:39:B3:21:7E:EA:24:33:91:43:D3:EF:DB:B4:29:95:1C
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584919417C57A6397CE47F8F0D80
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     20205
IP address blocks:        168.245.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7c:57:a6:39:7c:e4:7f:8f:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=95056043-4268-43ec-8dca-02b1087b1674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:75:c5:13:35:c9:87:91:bc:5e:36:fc:de:85:
                    4e:46:94:f9:03:04:e4:5e:3f:f9:6c:b2:b0:03:60:
                    ee:f4:3d:54:5a:02:21:54:75:36:4d:7c:be:39:fc:
                    e4:c0:3f:20:ae:af:dc:fe:ef:be:94:2b:16:a8:9d:
                    d1:03:9d:8b:4f:53:22:bb:e8:74:67:f0:77:c5:0c:
                    25:9d:ed:45:dd:95:30:70:48:24:df:a2:f0:05:cd:
                    3b:d3:c2:c0:c7:37:04:72:47:75:14:c7:05:f8:85:
                    ab:b7:05:50:f8:93:fc:df:35:ac:d2:f7:07:9d:41:
                    82:80:51:2e:27:75:d7:d8:93:7c:c5:7e:14:4c:92:
                    e2:2e:07:b8:1c:94:05:5f:c0:4f:cb:f5:ce:93:59:
                    55:d8:ba:76:3d:c6:cd:4b:bc:84:34:d1:02:18:8e:
                    af:6b:c3:81:09:4a:2c:eb:e6:75:64:4a:0e:ab:01:
                    d4:93:df:31:eb:62:95:a1:86:d5:d4:eb:b6:e6:df:
                    44:41:d1:4d:ba:47:49:cd:85:6b:ec:3f:9b:38:53:
                    d2:b8:ae:29:97:e7:ea:0c:b0:38:89:19:90:c3:8f:
                    1c:a6:7a:8a:03:94:d6:01:33:38:97:cc:94:6f:8f:
                    67:ca:05:d6:cb:ff:a6:53:aa:6b:14:c1:1b:f0:43:
                    41:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:9E:09:39:B3:21:7E:EA:24:33:91:43:D3:EF:DB:B4:29:95:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/5cea7fe7-35eb-332d-a713-9768d64cc717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:ec:bb:ca:68:68:15:ac:e0:87:c2:8b:ce:02:4c:61:65:
         94:47:f5:4c:25:9d:3d:12:74:9f:46:0b:b4:ea:07:c2:81:47:
         e0:03:fd:19:a7:d0:6c:22:30:97:21:c6:46:27:c9:42:71:ac:
         db:bd:9e:3d:a8:4e:7f:75:90:c5:d0:9d:ad:f3:77:60:2a:52:
         f7:36:db:a8:a9:2c:b0:c1:89:52:f2:84:2f:29:5a:93:e2:a8:
         03:c3:10:43:ca:fb:cb:dd:3b:dc:11:77:72:0e:7c:4d:10:de:
         c8:4d:ec:eb:05:7c:d7:3c:c3:a8:eb:99:39:67:4b:ad:f2:52:
         ca:26:7f:df:26:23:cb:51:ab:8b:af:be:0d:b3:dc:25:f0:ce:
         30:ba:dc:06:b8:1f:a6:1a:70:d7:12:76:13:3a:56:f4:25:40:
         29:5e:7f:a6:5d:99:39:5d:ad:1b:69:06:7d:5c:6b:92:ec:3d:
         a7:26:7b:c4:8d:1a:f2:67:2c:6d:35:d8:da:5e:e1:5d:76:be:
         69:af:ef:88:a5:d1:c0:cb:12:2f:0b:8b:6d:b1:c5:98:1b:4f:
         a8:fa:36:cc:93:82:5d:f6:ba:35:4a:ab:1d:3f:36:ef:08:63:
         7d:5c:33:c4:81:77:3d:f3:2b:87:39:3c:c8:b8:47:50:97:b3:
         0c:b6:c2:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXxXpjl85H+PDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2
NmEyMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
OTUwNTYwNDMtNDI2OC00M2VjLThkY2EtMDJiMTA4N2IxNjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHXFEzXJh5G8Xjb83oVORpT5AwTkXj/5bLKw
A2Du9D1UWgIhVHU2TXy+OfzkwD8grq/c/u++lCsWqJ3RA52LT1Miu+h0Z/B3xQwl
ne1F3ZUwcEgk36LwBc0708LAxzcEckd1FMcF+IWrtwVQ+JP83zWs0vcHnUGCgFEu
J3XX2JN8xX4UTJLiLge4HJQFX8BPy/XOk1lV2Lp2PcbNS7yENNECGI6va8OBCUos
6+Z1ZEoOqwHUk98x62KVoYbV1Ou25t9EQdFNukdJzYVr7D+bOFPSuK4pl+fqDLA4
iRmQw48cpnqKA5TWATM4l8yUb49nygXWy/+mU6prFMEb8ENBjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhYngk5syF+6iQzkUPT79u0KZUcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0
NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvNWNlYTdmZTctMzVlYi0z
MzJkLWE3MTMtOTc2OGQ2NGNjNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2
OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy
NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy
YzgzMjY2YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqPW0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+57LvKaGgVrOCHwovOAkxhZZRH9UwlnT0SdJ9GC7TqB8KBR+AD/Rmn
0GwiMJchxkYnyUJxrNu9nj2oTn91kMXQna3zd2AqUvc226ipLLDBiVLyhC8pWpPi
qAPDEEPK+8vdO9wRd3IOfE0Q3shN7OsFfNc8w6jrmTlnS63yUsomf98mI8tRq4uv
vg2z3CXwzjC63Aa4H6YacNcSdhM6VvQlQClef6ZdmTldrRtpBn1ca5LsPacme8SN
GvJnLG012Npe4V12vmmv74il0cDLEi8Li22xxZgbT6j6NsyTgl32ujVKqx0/Nu8I
Y31cM8SBdz3zK4c5PMi4R1CXswy2wjY=
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:29:26 2025 by rpki-client