Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
File:                     150163dc-8b27-3e02-913c-e2a4c34fdb91.roa (raw, json)
Hash identifier:          gMwu+bEKiOzkRKrJR0ho+2A+haShRqcAM+MZneAgmgU=
Subject key identifier:   C5:E4:9B:A3:E6:A9:DD:48:57:C2:F0:CE:C5:BE:5B:6E:1A:80:42:13
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F43285848748B1F14F67D2826500FD180
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     9312
IP address blocks:        93.179.124.0/22 maxlen: 24
                          94.103.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:1f:14:f6:7d:28:26:50:0f:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=4e037d18-4fd5-44cc-ba59-148848ee7741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:2d:5b:82:96:21:18:d1:cb:5b:24:0d:6d:
                    30:48:b9:85:e9:5a:b7:73:9f:c4:b6:27:ae:d8:36:
                    cb:31:d6:b4:12:4b:04:ea:e1:4b:ea:c0:ab:5b:5d:
                    8e:96:7f:81:d5:82:e5:b6:3e:72:21:bc:ec:0c:6d:
                    c6:91:5c:33:10:66:f7:5a:52:a8:e3:d0:82:54:94:
                    ae:d9:b4:2e:8b:f8:26:65:39:d1:15:9d:6f:47:5f:
                    be:1a:94:96:8a:4d:10:8b:60:49:e2:d0:3a:b5:22:
                    3b:c3:7e:cb:5c:34:f3:2a:61:0e:f6:03:1f:a1:18:
                    3f:38:06:ce:d1:8c:d1:fa:55:5f:d8:f0:34:59:a3:
                    1a:10:68:9f:e6:cb:d0:21:a9:3c:59:02:47:c9:bc:
                    36:d1:b8:1b:ee:c9:81:7f:de:59:da:a8:78:ba:21:
                    5c:06:15:c0:9b:69:e2:8f:37:fd:ef:90:7b:cf:03:
                    ab:48:28:dc:a1:75:4e:02:bf:6c:9f:fc:d7:09:cc:
                    07:c2:54:27:88:6b:62:25:f5:29:e3:c2:7e:1e:f7:
                    03:8e:ed:b8:26:d7:57:23:1a:29:e8:c6:c0:36:1d:
                    8e:e7:94:bd:d1:9e:6d:43:e5:92:4b:11:2a:aa:aa:
                    fa:ae:78:5e:a6:72:f2:93:0e:97:d6:c6:99:aa:cc:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E4:9B:A3:E6:A9:DD:48:57:C2:F0:CE:C5:BE:5B:6E:1A:80:42:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.124.0/22
                  94.103.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:8f:99:f7:80:f2:14:67:7a:f8:65:e8:bc:38:42:7a:ad:b7:
         e2:d4:99:01:45:8a:43:60:d9:10:e5:33:1e:ca:41:39:91:73:
         bb:44:31:07:fa:a2:40:aa:c3:81:af:09:37:e3:d3:ef:ce:42:
         c6:11:e8:6e:3b:fb:f5:06:64:7a:3a:a0:69:14:c7:c3:4a:e6:
         2d:0b:8f:6e:80:ea:d8:81:09:e9:22:61:cc:d2:57:d8:dc:be:
         33:85:1a:02:4b:bc:f6:40:80:46:22:ab:8c:09:39:c9:97:51:
         6b:83:01:de:b5:7c:7d:48:c1:89:dc:b4:cd:c5:9a:64:c8:d1:
         30:96:27:ad:10:27:6c:fa:cb:f6:05:57:31:35:36:4d:cf:a0:
         9a:37:15:18:fd:bb:46:04:c9:2f:b4:fd:e5:b1:7c:30:8c:18:
         d1:ac:f3:a9:f9:55:40:47:b2:c3:2c:96:a1:37:61:df:0d:4d:
         1f:26:5e:30:e1:63:31:8c:05:29:bb:b0:ec:32:c8:04:94:82:
         35:86:4b:91:cd:7f:d1:1b:cc:d1:09:87:4a:61:32:e3:57:67:
         6f:e7:e6:01:ea:ee:27:d1:95:a9:6c:46:23:58:db:47:a6:1e:
         a8:2b:72:b5:1e:44:80:16:52:88:62:09:c7:31:27:e9:92:19:
         ec:1f:52:ca
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEh0ix8U9n0oJlAP0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IwMWIyOGEtNDM2ZC00MmRkLTg3NTAtNTM2MWYyMzA5
Mjk3MB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
NGUwMzdkMTgtNGZkNS00NGNjLWJhNTktMTQ4ODQ4ZWU3NzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8wtW4KWIRjRy1skDW0wSLmF6Vq3c5/Etieu
2DbLMda0EksE6uFL6sCrW12Oln+B1YLltj5yIbzsDG3GkVwzEGb3WlKo49CCVJSu
2bQui/gmZTnRFZ1vR1++GpSWik0Qi2BJ4tA6tSI7w37LXDTzKmEO9gMfoRg/OAbO
0YzR+lVf2PA0WaMaEGif5svQIak8WQJHybw20bgb7smBf95Z2qh4uiFcBhXAm2ni
jzf975B7zwOrSCjcoXVOAr9sn/zXCcwHwlQniGtiJfUp48J+HvcDju24JtdXIxop
6MbANh2O55S90Z5tQ+WSSxEqqqr6rnhepnLykw6X1saZqsxJ+QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMXkm6Pmqd1IV8LwzsW+W24agEITMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAx
YjI4YS00MzZkLTQyZGQtODc1MC01MzYxZjIzMDkyOTcvMTUwMTYzZGMtOGIyNy0z
ZTAyLTkxM2MtZTJhNGMzNGZkYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2IwMWIyOGEtNDM2ZC00MmRkLTg3
NTAtNTM2MWYyMzA5Mjk3L2NiMDFiMjhhLTQzNmQtNDJkZC04NzUwLTUzNjFmMjMw
OTI5Ny5jcmwwHwYDVR0jBBgwFoAUoD/XgfdrhiAFQLOw8V5XSYqIHsQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAxYjI4YS00MzZkLTQyZGQtODc1MC01MzYx
ZjIzMDkyOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXbN8AwQC
XmcEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFOPmfeA8hRnevhl6Lw4Qnqtt+LUmQFFikNg2RDlMx7KQTmR
c7tEMQf6okCqw4GvCTfj0+/OQsYR6G47+/UGZHo6oGkUx8NK5i0Lj26A6tiBCeki
YczSV9jcvjOFGgJLvPZAgEYiq4wJOcmXUWuDAd61fH1IwYnctM3FmmTI0TCWJ60Q
J2z6y/YFVzE1Nk3PoJo3FRj9u0YEyS+0/eWxfDCMGNGs86n5VUBHssMslqE3Yd8N
TR8mXjDhYzGMBSm7sOwyyASUgjWGS5HNf9EbzNEJh0phMuNXZ2/n5gHq7ifRlals
RiNY20emHqgrcrUeRIAWUohiCccxJ+mSGewfUso=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:18 2025 by rpki-client