Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/f4907413-bbac-3c03-a81b-652c4135a403.roa
File:                     f4907413-bbac-3c03-a81b-652c4135a403.roa (raw, json)
Hash identifier:          1cQun/vCJXUoULb19l6FBk5wzkZIyzmBAv9/3mcit70=
Subject key identifier:   0D:B9:E1:93:6C:D0:A2:72:6D:57:48:D8:D8:8F:8F:ED:63:88:A4:E6
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584900215E289A82680937E089A0
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/f4907413-bbac-3c03-a81b-652c4135a403.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     54484
IP address blocks:        138.229.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5e:28:9a:82:68:09:37:e0:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=27f0dc2e-4db8-4119-bddc-70331a799e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:25:78:bc:5b:7c:2d:01:e3:44:af:90:e7:f7:
                    4a:ac:b0:e3:9c:d6:08:72:13:d2:ec:92:1a:f5:28:
                    b3:bc:b6:22:6c:a4:22:27:19:4a:bf:56:57:c1:3e:
                    e1:3d:af:75:8c:d4:01:12:57:c9:36:35:df:d6:83:
                    45:2a:be:a9:72:ed:6e:5e:75:a6:dc:62:3e:16:93:
                    37:ad:c7:9d:96:43:a7:a9:2c:4a:67:46:08:f4:d5:
                    58:77:81:77:82:17:7a:9c:11:5b:90:c4:db:88:82:
                    6a:9c:11:66:34:f4:7b:a3:1e:79:d1:25:11:5b:b6:
                    a8:c0:0e:8f:59:8e:75:cc:06:eb:57:39:79:41:0d:
                    82:9f:58:9a:d4:43:d8:38:02:d1:2b:7b:b0:45:9f:
                    69:66:cb:b4:9a:35:fb:59:be:a7:19:9a:e8:2f:68:
                    f9:12:c6:f5:b5:61:87:12:6a:f4:66:c7:5f:55:73:
                    8f:88:a8:a7:81:cf:fd:bd:85:a4:1f:2a:75:9b:64:
                    d9:df:df:4c:8f:ab:18:8c:71:cc:9c:10:11:3e:87:
                    94:ac:4a:d5:dc:90:9b:a3:b8:15:6b:b7:5f:55:ce:
                    7f:78:44:69:63:6c:e9:52:93:c1:05:ef:0f:d5:39:
                    60:84:0c:dc:97:85:1c:56:c6:b6:2e:f0:c5:05:a1:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:E1:93:6C:D0:A2:72:6D:57:48:D8:D8:8F:8F:ED:63:88:A4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/f4907413-bbac-3c03-a81b-652c4135a403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:4a:9f:3d:37:41:a6:d5:81:a4:f6:07:b3:f6:e0:57:84:
         66:87:b8:2f:52:3a:8a:c0:97:9a:4e:78:37:c2:67:6a:c1:80:
         e5:67:e2:8d:aa:79:01:df:32:0c:a6:0b:0c:b7:41:cf:26:64:
         c1:92:a4:75:19:c4:ee:db:b5:e8:51:04:be:76:17:17:4c:2b:
         8c:06:6a:35:7d:f0:f4:17:83:46:16:e5:98:a8:ff:e8:4c:33:
         76:b3:76:d9:48:99:f5:d9:67:5e:65:1c:4a:e9:20:74:77:cb:
         f4:78:3f:a7:0c:1d:43:59:b6:0c:b6:25:bc:1d:01:17:01:9c:
         c7:65:5b:91:7c:ca:c6:5e:ae:d2:a7:c2:37:81:b9:fe:f8:f3:
         31:c2:e9:5c:6e:6f:7a:09:e3:6d:71:7c:c4:0b:cc:5f:02:db:
         a2:64:68:c8:48:69:15:ad:ca:90:c5:f1:f9:8b:2b:56:0d:05:
         54:27:56:4b:7b:43:3f:7c:19:ca:af:fe:0c:60:75:ce:e3:e6:
         83:a5:14:af:4c:ef:92:c0:42:a6:73:16:fd:52:39:7a:75:96:
         23:93:8f:d1:b3:27:84:de:f5:e5:83:0b:75:2d:fd:fe:11:a3:
         79:b8:0b:bc:55:ac:82:a0:9b:78:fa:41:5b:9d:2c:cc:17:78:
         a9:aa:81:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIV4omoJoCTfgiaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MjdmMGRjMmUtNGRiOC00MTE5LWJkZGMtNzAzMzFhNzk5ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CV4vFt8LQHjRK+Q5/dKrLDjnNYIchPS7JIa
9SizvLYibKQiJxlKv1ZXwT7hPa91jNQBElfJNjXf1oNFKr6pcu1uXnWm3GI+FpM3
rcedlkOnqSxKZ0YI9NVYd4F3ghd6nBFbkMTbiIJqnBFmNPR7ox550SURW7aowA6P
WY51zAbrVzl5QQ2Cn1ia1EPYOALRK3uwRZ9pZsu0mjX7Wb6nGZroL2j5Esb1tWGH
Emr0ZsdfVXOPiKingc/9vYWkHyp1m2TZ399Mj6sYjHHMnBARPoeUrErV3JCbo7gV
a7dfVc5/eERpY2zpUpPBBe8P1TlghAzcl4UcVsa2LvDFBaEIowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA254ZNs0KJybVdI2NiPj+1jiKTmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvZjQ5MDc0MTMtYmJhYy0z
YzAzLWE4MWItNjUyYzQxMzVhNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuVOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAeSp89N0Gm1YGk9gez9uBXhGaHuC9SOorAl5pOeDfCZ2rBgOVn4o2q
eQHfMgymCwy3Qc8mZMGSpHUZxO7btehRBL52FxdMK4wGajV98PQXg0YW5Zio/+hM
M3azdtlImfXZZ15lHErpIHR3y/R4P6cMHUNZtgy2JbwdARcBnMdlW5F8ysZertKn
wjeBuf748zHC6Vxub3oJ421xfMQLzF8C26JkaMhIaRWtypDF8fmLK1YNBVQnVkt7
Qz98Gcqv/gxgdc7j5oOlFK9M75LAQqZzFv1SOXp1liOTj9GzJ4Te9eWDC3Ut/f4R
o3m4C7xVrIKgm3j6QVudLMwXeKmqgaY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:42 2025 by rpki-client