Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/e8e579df-a1d8-37f3-81a6-b414a005081d.roa
File:                     e8e579df-a1d8-37f3-81a6-b414a005081d.roa (raw, json)
Hash identifier:          ft7XestDsD7PYgPPcLGSK/fbNZUx5NS8co6YCD/3wuY=
Subject key identifier:   68:37:40:99:88:DF:8F:A9:1F:30:1F:89:B0:B9:41:8E:99:CF:37:CE
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F43285848E16BEB0A47E83A383C23B080
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/e8e579df-a1d8-37f3-81a6-b414a005081d.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     400859
IP address blocks:        141.195.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:eb:0a:47:e8:3a:38:3c:23:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=69304abf-2995-47d0-af0a-6e623524e1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:ef:9d:12:89:e0:5b:80:3f:e2:b5:cf:79:
                    b3:91:0b:54:33:d0:f9:64:b8:6a:1f:ca:9a:b6:2d:
                    8c:72:8d:83:f6:47:33:54:e4:27:c6:65:ab:67:58:
                    70:ef:71:bb:de:12:cf:13:c8:47:a3:93:e4:71:47:
                    15:4a:92:fc:12:75:03:2a:be:60:4f:fc:be:0e:64:
                    88:1c:ab:9e:46:29:98:ef:6f:01:17:7f:d0:99:6d:
                    af:40:4d:b0:df:89:4a:62:59:2f:fc:42:db:d3:6d:
                    02:06:63:c0:b2:32:6e:1f:1a:e8:ba:89:ff:9b:49:
                    a3:68:fe:49:89:d3:4b:3a:59:78:96:1b:0e:e5:65:
                    b0:ea:aa:37:20:67:f9:7a:6f:2b:ef:28:31:ff:bd:
                    e0:6d:39:b6:1b:f0:53:56:ae:de:7b:ec:55:20:6a:
                    a8:f4:62:0b:cf:93:23:3d:3d:87:9c:c8:01:33:bd:
                    95:f4:c5:13:f3:38:02:e4:a7:d2:8f:8a:06:84:79:
                    66:d8:d0:44:e5:78:84:6d:63:1f:2e:26:01:60:a5:
                    58:bc:48:63:15:d3:4c:c0:67:f8:08:a8:a1:61:33:
                    8a:0f:04:61:cd:1c:db:28:52:f6:b0:a3:72:28:10:
                    b1:cf:58:39:dc:53:52:ae:ef:e0:58:81:20:33:12:
                    a2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:37:40:99:88:DF:8F:A9:1F:30:1F:89:B0:B9:41:8E:99:CF:37:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/e8e579df-a1d8-37f3-81a6-b414a005081d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:1d:24:90:63:b2:20:c6:bd:64:52:86:f8:c7:e0:4e:a2:
         f1:70:ec:7c:f5:be:aa:4a:0c:b6:a7:6f:d7:9f:44:da:24:23:
         0d:ca:6d:06:aa:3f:a5:3a:46:dc:f8:9b:31:96:6c:e7:d5:bd:
         8c:5b:67:f5:c6:d9:49:69:a9:fb:34:ab:c1:43:25:cb:fe:d2:
         0e:52:50:69:63:26:48:1b:19:7f:f2:03:9f:ab:3d:bd:15:2b:
         ea:45:d6:18:9d:7b:08:4c:a5:21:ba:ea:e2:03:9b:a6:aa:e8:
         0f:24:be:40:d0:14:95:3f:ee:9b:29:aa:21:f9:dd:ee:8b:1f:
         4f:9d:1c:77:74:b7:e2:21:b9:a2:aa:74:5f:95:51:9b:3f:7b:
         8f:d8:40:a1:cf:23:7c:b6:a4:13:58:a9:5a:18:88:5e:65:fb:
         d5:9a:e5:df:27:6c:5f:70:bd:fc:58:0c:4f:f8:2e:b9:b9:8f:
         ba:ec:17:98:0b:28:64:09:43:54:37:73:8d:c7:ae:87:a5:bc:
         80:53:d5:77:d8:cc:40:7f:af:14:2f:32:f4:ea:75:0b:c6:b6:
         7a:1c:22:a6:8b:75:bd:cf:52:90:0c:23:48:1a:39:0e:95:44:
         28:9a:a8:c5:e0:62:70:ed:41:95:64:e3:a3:fd:9a:fb:86:80:
         bc:6f:cd:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+sKR+g6ODwjsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy
OWVjMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NjkzMDRhYmYtMjk5NS00N2QwLWFmMGEtNmU2MjM1MjRlMWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE7vnRKJ4FuAP+K1z3mzkQtUM9D5ZLhqH8qa
ti2Mco2D9kczVOQnxmWrZ1hw73G73hLPE8hHo5PkcUcVSpL8EnUDKr5gT/y+DmSI
HKueRimY728BF3/QmW2vQE2w34lKYlkv/ELb020CBmPAsjJuHxrouon/m0mjaP5J
idNLOll4lhsO5WWw6qo3IGf5em8r7ygx/73gbTm2G/BTVq7ee+xVIGqo9GILz5Mj
PT2HnMgBM72V9MUT8zgC5KfSj4oGhHlm2NBE5XiEbWMfLiYBYKVYvEhjFdNMwGf4
CKihYTOKDwRhzRzbKFL2sKNyKBCxz1g53FNSru/gWIEgMxKi+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGg3QJmI34+pHzAfibC5QY6ZzzfOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5
MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvZThlNTc5ZGYtYTFkOC0z
N2YzLTgxYTYtYjQxNGEwMDUwODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm
ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2
MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5
YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqiHSSQY7Igxr1kUob4x+BOovFw7Hz1vqpKDLanb9efRNokIw3KbQaq
P6U6Rtz4mzGWbOfVvYxbZ/XG2Ulpqfs0q8FDJcv+0g5SUGljJkgbGX/yA5+rPb0V
K+pF1hidewhMpSG66uIDm6aq6A8kvkDQFJU/7pspqiH53e6LH0+dHHd0t+IhuaKq
dF+VUZs/e4/YQKHPI3y2pBNYqVoYiF5l+9Wa5d8nbF9wvfxYDE/4Lrm5j7rsF5gL
KGQJQ1Q3c43HroelvIBT1XfYzEB/rxQvMvTqdQvGtnocIqaLdb3PUpAMI0gaOQ6V
RCiaqMXgYnDtQZVk46P9mvuGgLxvzfs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:28 2025 by rpki-client