Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
File:                     4065f43f-ee36-3824-890b-4696c8253f7f.roa (raw, json)
Hash identifier:          Bx7Ep0rsTc4xPxrYjeZ+UapjcFWn9oxSzcpyb4TEtMg=
Subject key identifier:   99:1B:74:CF:0B:3E:FF:29:45:C0:5D:60:3E:F8:3F:54:CC:85:10:D1
Certificate issuer:       /CN=a68ef886-c437-4b77-8d56-b917b6150d9a
Certificate serial:       010D0C9F432858489340AD0AF39AFA601EEAEA00
Authority key identifier: 7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     91
IP address blocks:        192.12.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:ad:0a:f3:9a:fa:60:1e:ea:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ef886-c437-4b77-8d56-b917b6150d9a
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=a4343e8f-df2c-4bee-8924-48f43804a371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:00:42:bc:24:8f:83:a3:45:0f:02:34:69:
                    67:ff:3b:dd:98:43:63:49:7a:90:5c:e6:04:f0:b1:
                    ea:43:52:f0:72:a5:8a:09:8d:92:70:33:b4:4a:7f:
                    7a:47:5a:ab:80:61:63:70:d3:35:47:ea:e8:34:a0:
                    37:a7:15:ad:97:93:b4:c2:c7:cb:e3:57:03:56:1d:
                    dd:57:31:f7:9f:f7:79:18:af:4d:66:b2:9e:98:79:
                    cc:60:01:61:d0:eb:12:5f:01:f4:f7:c9:27:fd:ea:
                    67:7f:54:f5:a1:43:8b:c5:44:e5:05:5b:ad:64:51:
                    75:7a:bd:80:8d:00:cd:61:bd:7b:e0:e8:55:ea:65:
                    22:29:8b:b4:fc:ea:c5:8c:fa:cf:6e:55:ce:e7:9f:
                    39:38:05:1e:96:03:bf:16:d0:d7:b0:cd:50:17:c6:
                    75:22:69:da:9f:11:d6:e9:ab:63:18:ed:ee:32:b4:
                    a2:05:b9:03:92:7d:49:13:16:13:ab:8d:60:0e:9b:
                    6f:78:d7:bf:3a:a4:32:84:dd:e2:e9:10:8d:51:3a:
                    09:76:d9:ba:9e:16:57:b6:26:32:45:e7:4f:bf:f2:
                    97:02:d1:1f:99:74:59:2e:b2:54:94:40:d7:30:82:
                    ba:30:f8:ba:c5:a6:7e:9a:d9:96:7b:04:4e:2d:4a:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1B:74:CF:0B:3E:FF:29:45:C0:5D:60:3E:F8:3F:54:CC:85:10:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/4065f43f-ee36-3824-890b-4696c8253f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a/a68ef886-c437-4b77-8d56-b917b6150d9a.crl

            X509v3 Authority Key Identifier:
                keyid:7C:09:E8:AF:EE:91:79:F5:08:2C:B7:C8:0A:3C:38:63:D4:E2:1C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a68ef886-c437-4b77-8d56-b917b6150d9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:04:a6:ea:18:c2:95:69:d1:b4:15:b5:3f:ea:14:b2:5a:
         af:6e:22:53:c5:1a:a1:0d:6d:ea:97:4c:5b:5d:37:f8:40:f3:
         72:57:b7:bf:ed:ec:86:44:30:ac:3e:b3:11:c0:b9:4d:15:9a:
         3b:8d:4b:35:0a:51:ab:50:f8:cd:ad:60:d3:4c:97:e8:33:78:
         16:11:af:5a:e6:33:ac:a8:ad:92:01:65:7e:cb:69:3b:ae:ff:
         4e:11:f4:8c:64:4a:04:ea:c1:3e:37:88:89:65:ff:25:cc:10:
         d1:79:d1:90:11:8e:b0:de:1c:28:82:e0:62:c9:3f:2a:51:0b:
         70:d1:b4:d5:58:4f:e8:99:fc:15:35:65:bb:1f:04:c2:ba:2c:
         99:cf:0a:b6:31:a5:2b:89:1d:96:f8:71:b4:44:df:bb:e4:c0:
         c3:19:cb:93:b6:a8:95:67:83:8f:4b:f5:b1:9d:f9:7d:37:e0:
         1b:66:b0:2f:26:90:b9:ee:34:d8:e3:94:7a:bb:4c:85:64:d0:
         db:dd:fe:f8:af:17:2d:60:c1:8d:18:2a:d3:61:2d:89:bb:f7:
         02:c2:5a:f4:4b:09:87:c7:d6:79:40:7a:cc:14:97:a7:ac:b8:
         4c:6e:6f:af:21:37:2d:c4:e8:b7:07:58:78:56:a9:39:34:8f:
         14:25:7f:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQK0K85r6YB7q6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY4ZWY4ODYtYzQzNy00Yjc3LThkNTYtYjkxN2I2MTUw
ZDlhMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
YTQzNDNlOGYtZGYyYy00YmVlLTg5MjQtNDhmNDM4MDRhMzcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UwAQrwkj4OjRQ8CNGln/zvdmENjSXqQXOYE
8LHqQ1LwcqWKCY2ScDO0Sn96R1qrgGFjcNM1R+roNKA3pxWtl5O0wsfL41cDVh3d
VzH3n/d5GK9NZrKemHnMYAFh0OsSXwH098kn/epnf1T1oUOLxUTlBVutZFF1er2A
jQDNYb174OhV6mUiKYu0/OrFjPrPblXO5585OAUelgO/FtDXsM1QF8Z1ImnanxHW
6atjGO3uMrSiBbkDkn1JExYTq41gDptveNe/OqQyhN3i6RCNUToJdtm6nhZXtiYy
RedPv/KXAtEfmXRZLrJUlEDXMIK6MPi6xaZ+mtmWewROLUpZ+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkbdM8LPv8pRcBdYD74P1TMhRDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjhl
Zjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3YjYxNTBkOWEvNDA2NWY0M2YtZWUzNi0z
ODI0LTg5MGItNDY5NmM4MjUzZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTY4ZWY4ODYtYzQzNy00Yjc3LThk
NTYtYjkxN2I2MTUwZDlhL2E2OGVmODg2LWM0MzctNGI3Ny04ZDU2LWI5MTdiNjE1
MGQ5YS5jcmwwHwYDVR0jBBgwFoAUfAnor+6RefUILLfICjw4Y9TiHA4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hNjhlZjg4Ni1jNDM3LTRiNzctOGQ1Ni1iOTE3
YjYxNTBkOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZuBKbqGMKVadG0FbU/6hSyWq9uIlPFGqENbeqXTFtdN/hA83JXt7/t
7IZEMKw+sxHAuU0VmjuNSzUKUatQ+M2tYNNMl+gzeBYRr1rmM6yorZIBZX7LaTuu
/04R9IxkSgTqwT43iIll/yXMENF50ZARjrDeHCiC4GLJPypRC3DRtNVYT+iZ/BU1
ZbsfBMK6LJnPCrYxpSuJHZb4cbRE37vkwMMZy5O2qJVng49L9bGd+X034BtmsC8m
kLnuNNjjlHq7TIVk0Nvd/vivFy1gwY0YKtNhLYm79wLCWvRLCYfH1nlAeswUl6es
uExub68hNy3E6LcHWHhWqTk0jxQlf+M=
-----END CERTIFICATE-----
Generated at Wed Mar 26 14:40:09 2025 by rpki-client