Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa
File:                     ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa (raw, json)
Hash identifier:          Oh1w8gp2wNcYCerbQm1OAFo8SsNHELR3Qtu3+qEeEYU=
Subject key identifier:   FF:10:4D:52:F3:C5:7E:15:6C:02:40:AA:E2:10:DC:A6:FC:20:63:5F
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F43285848F22C65EA00E4970811A3C100
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        205.201.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:65:ea:00:e4:97:08:11:a3:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=f3422840-0618-425d-8c42-f480ecda9847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:cd:41:ed:29:52:05:2e:cb:90:db:4e:3b:
                    0c:1d:1e:f5:0f:c4:b1:19:77:b5:f0:bb:46:06:5a:
                    12:d1:41:e6:04:b3:28:75:65:b6:27:b7:a7:b6:13:
                    cd:b2:6e:7d:0c:86:19:c0:09:13:4d:40:92:bc:a9:
                    d4:c7:14:fe:42:50:50:33:a5:c1:54:82:17:a5:f3:
                    4e:bd:46:b8:92:9c:80:21:12:aa:18:92:ab:da:b4:
                    14:6d:d2:db:a5:59:ea:39:d7:83:aa:46:85:32:bd:
                    82:68:ff:f8:02:77:0d:7d:74:b7:fa:8d:e2:74:6b:
                    42:9b:6e:79:ca:bd:70:cb:50:aa:b4:cc:31:8b:2f:
                    f2:c4:45:74:ae:d6:a4:a8:73:82:09:05:2d:16:ea:
                    7b:e2:45:7b:1d:88:94:e9:f3:be:63:2d:53:26:70:
                    2d:4f:eb:e0:21:0d:46:d6:9e:ff:0e:c5:21:ee:62:
                    33:3a:7d:01:a8:33:f2:33:b9:f5:d4:5a:d9:53:f6:
                    26:f3:98:00:6b:8d:5f:fa:65:2f:31:e7:db:d1:10:
                    86:d4:23:69:ef:3d:3a:8b:cc:12:93:a0:95:fe:d2:
                    12:2c:03:4b:92:7e:e7:db:6b:b6:e2:26:d8:59:f0:
                    94:c7:85:59:9a:3f:51:d2:40:25:11:71:73:7c:43:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:4D:52:F3:C5:7E:15:6C:02:40:AA:E2:10:DC:A6:FC:20:63:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:6b:d1:aa:9d:39:6b:47:e7:7d:4a:78:f0:11:e5:9e:48:
         76:13:fb:af:3e:7e:4d:00:f0:38:fd:6b:12:90:bf:dd:dd:97:
         30:4f:be:ef:a9:52:e1:97:be:cb:7d:d7:b1:44:4d:df:ad:49:
         8a:88:a5:68:5d:fc:32:78:f8:71:f8:51:91:78:20:09:ff:4e:
         75:eb:80:76:9b:11:fe:ee:eb:c6:b8:9c:30:72:cd:2b:7b:33:
         e1:5b:5b:39:66:ca:19:5d:a8:59:a4:46:bc:49:73:b3:eb:76:
         32:0a:eb:a4:8d:39:41:34:d1:61:a9:df:79:74:b5:83:0b:d2:
         1f:d7:8c:84:0c:44:d7:11:8c:5f:26:47:44:3f:fb:73:ba:7a:
         a7:38:8b:46:50:a0:df:a6:3c:a2:43:92:70:29:5d:8c:4f:b9:
         a5:9c:11:f0:92:a3:b2:73:35:3e:0b:b1:2d:2e:f7:a3:f8:91:
         97:ba:34:da:5c:03:77:f2:9a:73:af:8c:be:9a:87:ab:58:89:
         6a:be:62:00:6c:b7:d6:f2:7b:9f:62:f0:ad:c6:46:8f:39:bb:
         a1:ae:f4:16:59:74:10:d1:35:8c:38:5b:b8:20:7f:ec:61:57:
         9f:10:b0:e2:aa:ff:ca:cd:b1:52:3d:c1:6a:2c:de:7e:43:2d:
         dd:71:95:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGXqAOSXCBGjwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlYTcwOTktZDJlNS00NWUxLThjMWUtYTgyMDZmNTQ5
NTM5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjM0MjI4NDAtMDYxOC00MjVkLThjNDItZjQ4MGVjZGE5ODQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmILNQe0pUgUuy5DbTjsMHR71D8SxGXe18LtG
BloS0UHmBLModWW2J7enthPNsm59DIYZwAkTTUCSvKnUxxT+QlBQM6XBVIIXpfNO
vUa4kpyAIRKqGJKr2rQUbdLbpVnqOdeDqkaFMr2CaP/4AncNfXS3+o3idGtCm255
yr1wy1CqtMwxiy/yxEV0rtakqHOCCQUtFup74kV7HYiU6fO+Yy1TJnAtT+vgIQ1G
1p7/DsUh7mIzOn0BqDPyM7n11FrZU/Ym85gAa41f+mUvMefb0RCG1CNp7z06i8wS
k6CV/tISLANLkn7n22u24ibYWfCUx4VZmj9R0kAlEXFzfEO2JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8QTVLzxX4VbAJAquIQ3Kb8IGNfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVh
NzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIwNmY1NDk1MzkvYWRhNzE5NzUtNTllNS0z
YWQxLWI2NWItZGZhZGIyYjk2ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmRlYTcwOTktZDJlNS00NWUxLThj
MWUtYTgyMDZmNTQ5NTM5L2ZkZWE3MDk5LWQyZTUtNDVlMS04YzFlLWE4MjA2ZjU0
OTUzOS5jcmwwHwYDVR0jBBgwFoAUUxlbQ+NFauATsk2o+FU2Z/wB9SgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZGVhNzA5OS1kMmU1LTQ1ZTEtOGMxZS1hODIw
NmY1NDk1MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzckuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEefa9GqnTlrR+d9SnjwEeWeSHYT+68+fk0A8Dj9axKQv93dlzBPvu+p
UuGXvst917FETd+tSYqIpWhd/DJ4+HH4UZF4IAn/TnXrgHabEf7u68a4nDByzSt7
M+FbWzlmyhldqFmkRrxJc7PrdjIK66SNOUE00WGp33l0tYML0h/XjIQMRNcRjF8m
R0Q/+3O6eqc4i0ZQoN+mPKJDknApXYxPuaWcEfCSo7JzNT4LsS0u96P4kZe6NNpc
A3fymnOvjL6ah6tYiWq+YgBst9bye59i8K3GRo85u6Gu9BZZdBDRNYw4W7ggf+xh
V58QsOKq/8rNsVI9wWos3n5DLd1xlRk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:24 2025 by rpki-client