Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/c8943ed0-c0e7-31e0-a7fa-486a9f57ac6c.roa
File:                     c8943ed0-c0e7-31e0-a7fa-486a9f57ac6c.roa (raw, json)
Hash identifier:          eA05aKMPDaUdYznLWLbyZzfxQ9rHY9qz59ZS/yje0RQ=
Subject key identifier:   CF:5E:EB:95:B9:69:93:C0:28:AF:EB:75:5A:9A:B9:EF:4E:FC:2E:FC
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F432858491D71830EB7ED1315CA741E80
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/c8943ed0-c0e7-31e0-a7fa-486a9f57ac6c.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        142.214.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:83:0e:b7:ed:13:15:ca:74:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=dea79de1-12a9-44fb-8b09-25e2e1e41a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:82:ab:c3:be:b2:98:13:f8:7a:f8:48:09:
                    b0:52:9d:63:b1:70:8e:79:93:02:f8:ef:ce:b3:24:
                    0f:aa:3f:fe:9f:49:a2:c9:0f:fc:c5:d0:3d:c2:bd:
                    2e:24:40:d6:6b:ee:b9:39:28:8e:ba:b0:7e:88:e8:
                    a3:7f:c0:2d:89:48:2e:dc:71:a9:bc:e4:cd:65:76:
                    4f:8e:ab:c8:b3:72:51:a1:1a:fc:30:a4:50:7e:33:
                    36:60:bc:84:66:fc:02:4f:8d:e7:5a:d0:2d:81:9e:
                    19:71:0f:65:e2:5c:cd:1b:7b:8c:ff:8a:8b:6b:1d:
                    3c:e7:02:a6:1c:ea:3e:c6:ce:3b:6e:ea:18:0a:90:
                    ab:6b:98:0c:fe:c5:5c:46:43:8d:4d:76:de:e9:de:
                    19:5e:c1:d3:1a:20:0f:53:3b:09:61:91:f2:3d:57:
                    dc:9a:da:01:6d:fe:98:d7:16:b8:94:78:87:b5:cc:
                    79:bd:8b:1f:b0:50:e8:be:30:55:be:db:d2:d8:a2:
                    a3:9a:f9:8c:00:bf:5b:ba:f4:e5:ef:0f:92:9d:ec:
                    de:0d:06:0e:f8:f4:0e:63:9d:a2:b1:47:8a:99:27:
                    6a:19:72:b6:bf:4b:3d:e5:1b:82:01:f7:7f:49:ab:
                    8f:de:d8:c2:e2:2d:fa:f1:e2:d9:c7:fa:cd:09:67:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5E:EB:95:B9:69:93:C0:28:AF:EB:75:5A:9A:B9:EF:4E:FC:2E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/c8943ed0-c0e7-31e0-a7fa-486a9f57ac6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a8:0c:af:f3:59:0c:63:4d:37:ec:2a:4d:1d:38:50:65:03:
         9c:fa:76:05:c8:87:d4:f2:c6:75:22:9e:1a:19:d1:77:e5:57:
         eb:03:9a:de:7a:14:9f:d1:b3:a2:c2:18:72:2e:a7:aa:bf:f6:
         55:d8:f6:67:4a:43:cc:e3:20:a3:6f:05:c7:e3:5d:e0:b8:7b:
         07:9f:6a:7c:bb:02:5b:de:4d:7b:23:1a:f6:43:1d:ec:02:c9:
         46:7a:b8:cc:4d:e1:10:52:1d:6a:18:b6:b4:43:4f:9a:de:25:
         73:5e:c2:c6:79:49:8f:18:aa:89:74:a1:85:71:a7:5b:6f:9c:
         7f:58:e0:9f:c8:a1:92:1d:e5:37:57:13:69:8b:40:ad:e9:9e:
         1a:32:78:21:67:a3:58:e5:84:5a:cc:75:1b:7e:37:fd:ab:b1:
         dc:ba:cc:81:35:e9:88:ed:41:89:5d:e4:32:c7:b4:53:a2:3f:
         dc:13:2a:8a:10:05:27:47:3e:b9:18:7c:5a:db:1a:d6:34:df:
         ee:a1:84:8d:83:00:38:d3:10:99:6c:64:be:bc:48:07:79:c5:
         ed:d4:ed:ad:a2:5b:61:51:28:e4:ab:64:39:7b:aa:f2:14:22:
         68:2c:7a:6e:90:bf:2a:47:83:5d:b2:b1:c4:aa:c3:86:c6:58:
         56:92:72:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYMOt+0TFcp0HoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZGFmYmYtMzI4ZS00MGYyLWFiMGQtNDcxOGYxMTc3
ODYxMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZGVhNzlkZTEtMTJhOS00NGZiLThiMDktMjVlMmUxZTQxYTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+6Cq8O+spgT+Hr4SAmwUp1jsXCOeZMC+O/O
syQPqj/+n0miyQ/8xdA9wr0uJEDWa+65OSiOurB+iOijf8AtiUgu3HGpvOTNZXZP
jqvIs3JRoRr8MKRQfjM2YLyEZvwCT43nWtAtgZ4ZcQ9l4lzNG3uM/4qLax085wKm
HOo+xs47buoYCpCra5gM/sVcRkONTXbe6d4ZXsHTGiAPUzsJYZHyPVfcmtoBbf6Y
1xa4lHiHtcx5vYsfsFDovjBVvtvS2KKjmvmMAL9buvTl7w+SnezeDQYO+PQOY52i
sUeKmSdqGXK2v0s95RuCAfd/SauP3tjC4i368eLZx/rNCWfVIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM9e65W5aZPAKK/rdVqaue9O/C78MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRk
YWZiZi0zMjhlLTQwZjItYWIwZC00NzE4ZjExNzc4NjEvYzg5NDNlZDAtYzBlNy0z
MWUwLWE3ZmEtNDg2YTlmNTdhYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTk0ZGFmYmYtMzI4ZS00MGYyLWFi
MGQtNDcxOGYxMTc3ODYxL2U5NGRhZmJmLTMyOGUtNDBmMi1hYjBkLTQ3MThmMTE3
Nzg2MS5jcmwwHwYDVR0jBBgwFoAUHpbW+MBWSeEWvtPCmYRooLx45zkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lOTRkYWZiZi0zMjhlLTQwZjItYWIwZC00NzE4
ZjExNzc4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjtaUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmoDK/zWQxjTTfsKk0dOFBlA5z6dgXIh9TyxnUinhoZ0XflV+sDmt56
FJ/Rs6LCGHIup6q/9lXY9mdKQ8zjIKNvBcfjXeC4ewefany7AlveTXsjGvZDHewC
yUZ6uMxN4RBSHWoYtrRDT5reJXNewsZ5SY8Yqol0oYVxp1tvnH9Y4J/IoZId5TdX
E2mLQK3pnhoyeCFno1jlhFrMdRt+N/2rsdy6zIE16YjtQYld5DLHtFOiP9wTKooQ
BSdHPrkYfFrbGtY03+6hhI2DADjTEJlsZL68SAd5xe3U7a2iW2FRKOSrZDl7qvIU
Imgsem6QvypHg12yscSqw4bGWFaScr0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:31:22 2025 by rpki-client