Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/4a94751e-73d8-3e00-b787-2e81cb282413.roa
File:                     4a94751e-73d8-3e00-b787-2e81cb282413.roa (raw, json)
Hash identifier:          dlS/euk71q0fdoqlfPT+AyUxbGp5wGGl4kWbGFtcMXE=
Subject key identifier:   85:39:62:8F:BE:1E:44:D8:E8:39:33:9B:9C:78:2B:0A:32:B1:A4:4B
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F432858491246B664CAA79D99DE52F000
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/4a94751e-73d8-3e00-b787-2e81cb282413.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     4476
IP address blocks:        192.68.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:b6:64:ca:a7:9d:99:de:52:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=42a2a30f-e03a-41b6-85c0-00526da0608a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:fb:e6:91:70:be:fd:2d:e6:e4:44:e9:f2:
                    58:d8:af:f6:34:cc:7e:28:65:e2:87:eb:8b:5f:34:
                    f8:0c:86:74:42:a8:3a:92:c0:cc:a9:db:d0:b0:22:
                    85:2d:01:73:14:88:41:a9:e5:93:b6:2a:96:d4:65:
                    46:70:1c:2d:f7:b7:0e:2f:c7:e8:c0:0c:d9:34:48:
                    7a:6c:15:a0:fd:de:28:4f:5e:aa:d2:64:41:03:98:
                    18:4d:cf:ee:37:bd:8d:90:2d:f1:85:51:e9:53:f0:
                    8b:d7:eb:54:2d:9f:7e:c7:48:fa:d2:c4:42:d0:5a:
                    50:48:8e:62:6d:95:2b:a0:40:e7:bf:64:2f:30:c2:
                    e3:93:d1:45:24:83:9c:a8:79:d4:b2:87:f8:6c:79:
                    bf:26:16:9b:5e:ea:8f:f9:8a:32:7f:8a:b0:56:ae:
                    cf:1c:10:5b:00:10:5a:e7:78:61:95:44:db:71:31:
                    63:30:3d:08:e1:e8:b6:69:a7:c9:50:5d:8a:60:06:
                    2b:51:c4:49:bb:62:fe:60:23:57:9e:2e:6b:39:c9:
                    2e:f3:e8:fe:ad:a6:6f:1f:7f:de:6c:56:f0:4f:98:
                    a8:40:18:e8:ea:ba:43:6b:8a:2d:01:ab:c8:58:09:
                    74:55:93:9f:94:09:17:5c:f8:c6:e1:6d:74:5a:d0:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:39:62:8F:BE:1E:44:D8:E8:39:33:9B:9C:78:2B:0A:32:B1:A4:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/4a94751e-73d8-3e00-b787-2e81cb282413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:10:ee:b9:60:c4:71:ba:09:0f:36:1d:65:3b:6a:02:c5:ad:
         d4:a9:1f:81:40:c1:ac:7c:fd:fc:f1:c3:36:99:15:6a:ca:5d:
         d1:ad:4a:9c:49:6b:7f:91:03:b9:db:a1:e6:4e:64:de:31:e2:
         27:f5:c4:30:44:41:cc:c0:55:00:eb:27:a7:dc:e0:aa:aa:2c:
         ca:f9:92:83:c1:81:4a:85:b9:9b:7b:58:63:68:76:69:5d:9c:
         3a:2f:8d:f6:d7:7a:d8:fc:22:08:6a:17:b3:fc:c9:1a:f9:ca:
         0f:3b:00:57:84:14:5c:1b:85:c5:70:77:9d:72:fa:cf:c5:3f:
         5a:ab:cd:f2:12:59:3b:cf:4c:61:0a:b5:08:ee:49:85:f3:02:
         8c:83:83:08:3e:04:10:09:b5:60:08:3a:95:e1:d0:ec:7d:82:
         37:5f:a4:64:d8:af:0b:ad:2d:93:83:f9:40:ac:8d:53:d2:a2:
         3d:8a:ca:85:49:44:bd:b6:6a:b8:e2:4d:d7:ea:35:e3:f4:45:
         54:1d:1c:a5:66:75:25:78:ad:4a:cd:a9:c4:2c:63:2e:53:e4:
         a7:79:29:6e:21:28:56:9e:be:ed:f0:31:0c:00:c4:9f:fb:b0:
         ac:18:41:88:76:c7:ea:f0:1b:26:14:96:ba:02:09:b4:3e:a5:
         c2:43:1c:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrZkyqedmd5S8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzOWE5NzMtY2YyZS00NGIxLTk4NGEtNjU5NmRjMGI2
OTYzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NDJhMmEzMGYtZTAzYS00MWI2LTg1YzAtMDA1MjZkYTA2MDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwv75pFwvv0t5uRE6fJY2K/2NMx+KGXih+uL
XzT4DIZ0Qqg6ksDMqdvQsCKFLQFzFIhBqeWTtiqW1GVGcBwt97cOL8fowAzZNEh6
bBWg/d4oT16q0mRBA5gYTc/uN72NkC3xhVHpU/CL1+tULZ9+x0j60sRC0FpQSI5i
bZUroEDnv2QvMMLjk9FFJIOcqHnUsof4bHm/JhabXuqP+Yoyf4qwVq7PHBBbABBa
53hhlUTbcTFjMD0I4ei2aafJUF2KYAYrUcRJu2L+YCNXni5rOcku8+j+raZvH3/e
bFbwT5ioQBjo6rpDa4otAavIWAl0VZOflAkXXPjG4W10WtAVKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIU5Yo++HkTY6Dkzm5x4KwoysaRLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5
YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2ZGMwYjY5NjMvNGE5NDc1MWUtNzNkOC0z
ZTAwLWI3ODctMmU4MWNiMjgyNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2MzOWE5NzMtY2YyZS00NGIxLTk4
NGEtNjU5NmRjMGI2OTYzL2NjMzlhOTczLWNmMmUtNDRiMS05ODRhLTY1OTZkYzBi
Njk2My5jcmwwHwYDVR0jBBgwFoAURaGd2u0urqKIyrHJ+roNx0DS2I8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jYzM5YTk3My1jZjJlLTQ0YjEtOTg0YS02NTk2
ZGMwYjY5NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwERHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUQ7rlgxHG6CQ82HWU7agLFrdSpH4FAwax8/fzxwzaZFWrKXdGtSpxJ
a3+RA7nboeZOZN4x4if1xDBEQczAVQDrJ6fc4KqqLMr5koPBgUqFuZt7WGNodmld
nDovjfbXetj8IghqF7P8yRr5yg87AFeEFFwbhcVwd51y+s/FP1qrzfISWTvPTGEK
tQjuSYXzAoyDgwg+BBAJtWAIOpXh0Ox9gjdfpGTYrwutLZOD+UCsjVPSoj2KyoVJ
RL22arjiTdfqNeP0RVQdHKVmdSV4rUrNqcQsYy5T5Kd5KW4hKFaevu3wMQwAxJ/7
sKwYQYh2x+rwGyYUlroCCbQ+pcJDHIU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:01 2025 by rpki-client