Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/c1e8d83f-8711-30ec-bb80-e325eada9b83.roa
File:                     c1e8d83f-8711-30ec-bb80-e325eada9b83.roa (raw, json)
Hash identifier:          eARV8Y6rWPZ85KDeSJZ+lbTniyIgzhVN8A0LJm3dB1c=
Subject key identifier:   2C:32:99:69:37:01:61:86:DB:7A:D4:25:EC:E3:8B:D4:CD:E1:EE:0B
Certificate issuer:       /CN=ed9aba72-cce4-4dbe-b91d-f6cc07f49dba
Certificate serial:       010D0C9F4328584913AC1974F614B6476A302200
Authority key identifier: F2:F7:9D:DC:35:6B:B7:E1:90:03:3C:F4:68:4A:76:FA:86:4C:82:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/c1e8d83f-8711-30ec-bb80-e325eada9b83.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     399879
IP address blocks:        192.133.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:19:74:f6:14:b6:47:6a:30:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9aba72-cce4-4dbe-b91d-f6cc07f49dba
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=b1f2e993-47b2-4ad8-bc7b-65adb58a4332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b7:d1:0a:78:df:33:ca:5a:ef:58:e5:45:87:
                    ef:7c:94:b9:6f:da:af:59:64:9c:a8:17:e4:89:22:
                    11:04:55:ff:09:04:6d:71:de:b3:f1:9d:ed:68:84:
                    55:45:28:9b:ee:a8:69:8b:d1:4a:62:33:37:65:e7:
                    99:61:7e:ea:03:fb:2b:52:7a:e8:4b:81:5e:1b:00:
                    65:3d:73:09:fc:62:eb:d5:e9:2a:86:29:31:dc:a2:
                    1e:ee:83:31:2f:09:ce:f2:76:cc:10:90:ce:f7:12:
                    de:ea:02:59:4b:93:ac:03:ee:28:1a:ae:3d:32:d1:
                    b0:5d:db:80:50:a4:fa:8e:8b:74:f5:56:e0:e2:22:
                    a5:60:4c:48:f8:8a:31:03:57:e8:d2:8a:7a:fc:27:
                    7a:43:58:d2:c5:94:8d:6c:ee:bf:8c:3c:ed:73:69:
                    1c:8a:d6:58:9e:9f:c1:92:c6:2d:af:c5:98:a0:24:
                    7e:da:1e:23:75:ac:62:ec:9f:49:41:2a:87:47:4f:
                    4a:fa:ec:17:3d:ce:62:90:a0:85:31:1c:26:89:1d:
                    12:f9:c5:92:c8:da:90:ac:9e:61:b0:ff:58:ec:35:
                    bc:0e:30:00:9d:04:c3:46:96:4f:70:d0:c2:d9:0c:
                    5f:88:be:8e:b8:c1:be:7d:7d:ee:62:37:a9:94:ec:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:32:99:69:37:01:61:86:DB:7A:D4:25:EC:E3:8B:D4:CD:E1:EE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/c1e8d83f-8711-30ec-bb80-e325eada9b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.crl

            X509v3 Authority Key Identifier:
                keyid:F2:F7:9D:DC:35:6B:B7:E1:90:03:3C:F4:68:4A:76:FA:86:4C:82:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ed9aba72-cce4-4dbe-b91d-f6cc07f49dba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c4:ff:df:22:1a:63:6e:e9:43:25:99:ad:cd:a5:3d:9f:93:
         3e:2a:ee:a5:4d:a4:1b:49:03:34:c3:79:96:c9:ef:1f:fe:0a:
         fe:43:6c:84:9a:95:9f:b1:c6:4d:e5:46:f4:31:89:47:65:55:
         42:26:f5:c6:b2:6f:61:78:10:c2:f5:d2:4f:a0:1c:7e:0d:7c:
         23:c4:3a:a1:54:5f:c0:43:25:4c:63:6a:12:ce:a4:ee:27:de:
         4b:5a:af:d3:74:d7:aa:b1:59:cf:5d:ae:7c:01:6e:7d:fa:84:
         d4:82:7c:1e:96:53:f9:53:12:d0:b0:c7:3b:3a:38:d4:62:86:
         d5:36:eb:44:84:56:21:54:dc:0a:9f:31:56:c6:12:07:d4:43:
         20:c7:2a:26:c3:c1:ec:75:68:f0:c4:84:0c:6e:0b:0c:9c:7a:
         96:3d:93:30:c7:37:5b:31:7c:f2:fa:bc:ce:8c:97:07:c5:ff:
         8e:4d:c8:1e:7f:b7:d8:90:09:f6:ad:2f:0c:a0:3e:bf:bf:1f:
         8f:a0:0c:9d:c6:bb:cf:4b:7a:51:0e:50:bb:13:be:96:1e:0d:
         1c:f0:4e:95:55:dd:ad:48:d5:ad:da:43:30:4b:4f:fe:ed:0c:
         0a:6c:1f:82:ca:fe:7b:53:fe:cb:80:45:1c:e4:89:19:14:16:
         c4:c8:05:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBl09hS2R2owIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ5YWJhNzItY2NlNC00ZGJlLWI5MWQtZjZjYzA3ZjQ5
ZGJhMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
YjFmMmU5OTMtNDdiMi00YWQ4LWJjN2ItNjVhZGI1OGE0MzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbfRCnjfM8pa71jlRYfvfJS5b9qvWWScqBfk
iSIRBFX/CQRtcd6z8Z3taIRVRSib7qhpi9FKYjM3ZeeZYX7qA/srUnroS4FeGwBl
PXMJ/GLr1ekqhikx3KIe7oMxLwnO8nbMEJDO9xLe6gJZS5OsA+4oGq49MtGwXduA
UKT6jot09Vbg4iKlYExI+IoxA1fo0op6/Cd6Q1jSxZSNbO6/jDztc2kcitZYnp/B
ksYtr8WYoCR+2h4jdaxi7J9JQSqHR09K+uwXPc5ikKCFMRwmiR0S+cWSyNqQrJ5h
sP9Y7DW8DjAAnQTDRpZPcNDC2QxfiL6OuMG+fX3uYjeplOx+uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwymWk3AWGG23rUJezji9TN4e4LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lZDlh
YmE3Mi1jY2U0LTRkYmUtYjkxZC1mNmNjMDdmNDlkYmEvYzFlOGQ4M2YtODcxMS0z
MGVjLWJiODAtZTMyNWVhZGE5YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWQ5YWJhNzItY2NlNC00ZGJlLWI5
MWQtZjZjYzA3ZjQ5ZGJhL2VkOWFiYTcyLWNjZTQtNGRiZS1iOTFkLWY2Y2MwN2Y0
OWRiYS5jcmwwHwYDVR0jBBgwFoAU8ved3DVrt+GQAzz0aEp2+oZMgrcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lZDlhYmE3Mi1jY2U0LTRkYmUtYjkxZC1mNmNj
MDdmNDlkYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIUGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjE/98iGmNu6UMlma3NpT2fkz4q7qVNpBtJAzTDeZbJ7x/+Cv5DbISa
lZ+xxk3lRvQxiUdlVUIm9cayb2F4EML10k+gHH4NfCPEOqFUX8BDJUxjahLOpO4n
3ktar9N016qxWc9drnwBbn36hNSCfB6WU/lTEtCwxzs6ONRihtU260SEViFU3Aqf
MVbGEgfUQyDHKibDwex1aPDEhAxuCwycepY9kzDHN1sxfPL6vM6MlwfF/45NyB5/
t9iQCfatLwygPr+/H4+gDJ3Gu89LelEOULsTvpYeDRzwTpVV3a1I1a3aQzBLT/7t
DApsH4LK/ntT/suARRzkiRkUFsTIBSo=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:46:12 2025 by rpki-client