Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa
File:                     fc734abe-84cb-31fb-9091-572995e67bbc.roa (raw, json)
Hash identifier:          zgzDsH+HlYWo1f+2Bs0fOUQlI4kJCcyzNyK2wgjvZMc=
Subject key identifier:   DA:5D:D4:60:FC:09:3C:6A:65:D4:94:0A:1D:13:6B:CC:3E:9C:65:C4
Certificate issuer:       /CN=08a6d347-5170-4470-abb6-1b99491a1406
Certificate serial:       010D0C9F43285848B2B982C260CC745F3538A340
Authority key identifier: 34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa
Signing time:             Tue 28 Jan 2025 20:34:33 +0000
ROA not before:           Tue 28 Jan 2025 20:34:33 +0000
ROA not after:            Mon 28 Apr 2025 19:34:33 +0000
asID:                     199959
IP address blocks:        192.189.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Mar 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:b9:82:c2:60:cc:74:5f:35:38:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a6d347-5170-4470-abb6-1b99491a1406
        Validity
            Not Before: Jan 28 20:34:33 2025 GMT
            Not After : Apr 28 19:34:33 2025 GMT
        Subject: CN=c0a4a6cf-5f25-4750-9a17-7682cfa34ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:c3:06:22:7d:ae:dc:bb:20:e9:be:7a:47:
                    72:33:57:9c:be:40:4d:8b:2e:63:13:56:9d:6c:4c:
                    a3:4d:90:c5:bf:7d:94:02:1c:33:5f:b2:34:fe:f5:
                    25:5f:5f:91:b6:06:65:7d:5a:80:37:62:b6:5b:3a:
                    8b:cb:53:52:51:73:20:0f:8a:a8:33:75:11:cc:ce:
                    e7:b8:57:4c:a2:1b:b0:e6:12:83:6b:2c:f1:e0:ef:
                    6d:2e:4b:2f:76:58:01:53:f8:4a:87:ce:0b:e4:26:
                    42:bc:1a:30:bc:e3:02:e1:49:43:c5:01:ac:ec:1a:
                    12:22:8b:1a:d9:5a:14:ca:32:0a:be:a8:03:1a:04:
                    8d:5d:6c:f7:f5:ff:63:1d:37:7c:cd:e7:24:93:6f:
                    d5:9f:45:62:10:17:5c:4c:00:f1:2e:5f:b6:ef:f0:
                    af:84:9d:09:14:04:a1:7a:db:68:d2:94:2c:4e:b6:
                    3d:ee:6d:d5:75:e8:ea:1b:76:62:fd:1f:bd:b7:f8:
                    2b:42:b0:81:49:b6:b8:23:11:5c:c5:49:eb:56:db:
                    42:1e:49:68:ef:82:18:a7:74:11:0e:2a:79:4b:70:
                    1c:2c:eb:dc:20:d0:e3:72:c4:a0:2a:d4:17:d2:cf:
                    30:39:b9:f8:54:d0:f8:d5:8f:cf:09:3f:df:3b:7a:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5D:D4:60:FC:09:3C:6A:65:D4:94:0A:1D:13:6B:CC:3E:9C:65:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/fc734abe-84cb-31fb-9091-572995e67bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406/08a6d347-5170-4470-abb6-1b99491a1406.crl

            X509v3 Authority Key Identifier:
                keyid:34:E9:93:A8:56:86:39:15:85:BA:37:93:95:1E:90:CA:D0:9C:13:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/08a6d347-5170-4470-abb6-1b99491a1406.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:de:2f:8e:40:f0:30:e8:01:26:ef:f5:17:93:0b:e7:51:
         3e:25:f4:9a:e9:23:b1:a9:15:c2:91:68:1a:e0:de:9f:75:6b:
         85:ec:0c:e8:4c:5d:c9:bc:08:b8:63:d1:cd:cb:cc:97:bb:5b:
         ff:5b:09:3c:c3:6d:f5:6e:c2:7b:58:a1:3a:5a:e5:5c:28:ef:
         7a:08:b7:d1:5e:5b:18:73:9d:c2:ff:ba:36:e6:d7:cd:49:d1:
         ef:a1:fc:c9:42:94:73:65:2b:f4:2c:14:cf:fd:68:da:a5:89:
         c3:3b:49:69:8d:6b:fa:9f:8c:90:9b:95:5b:11:28:c4:c0:ea:
         0f:98:78:d1:2b:ce:ac:0d:b8:77:e3:85:51:5f:fd:80:cb:be:
         99:c0:7d:03:a0:7e:53:f7:c3:55:8f:ff:bf:8f:5d:18:2a:87:
         09:85:da:c4:31:9a:c9:6f:c7:27:9d:9e:d1:26:72:11:2d:1e:
         73:16:ea:04:fc:19:98:6c:18:5c:3e:e3:e9:cc:fe:e2:f9:1a:
         07:4a:90:b9:22:25:55:29:0a:b9:63:31:39:cc:3d:00:07:d1:
         27:27:5d:7c:41:52:fc:be:7b:00:ae:b5:f4:4f:94:fd:fd:89:
         e9:d0:d0:5f:c1:4c:b3:68:a8:a5:61:d5:59:26:ef:bb:d2:4a:
         7f:5a:8f:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiyuYLCYMx0XzU4o0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhhNmQzNDctNTE3MC00NDcwLWFiYjYtMWI5OTQ5MWEx
NDA2MB4XDTI1MDEyODIwMzQzM1oXDTI1MDQyODE5MzQzM1owLzEtMCsGA1UEAxMk
YzBhNGE2Y2YtNWYyNS00NzUwLTlhMTctNzY4MmNmYTM0ZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH7DBiJ9rty7IOm+ekdyM1ecvkBNiy5jE1ad
bEyjTZDFv32UAhwzX7I0/vUlX1+RtgZlfVqAN2K2WzqLy1NSUXMgD4qoM3URzM7n
uFdMohuw5hKDayzx4O9tLksvdlgBU/hKh84L5CZCvBowvOMC4UlDxQGs7BoSIosa
2VoUyjIKvqgDGgSNXWz39f9jHTd8zeckk2/Vn0ViEBdcTADxLl+27/CvhJ0JFASh
etto0pQsTrY97m3VdejqG3Zi/R+9t/grQrCBSba4IxFcxUnrVttCHklo74IYp3QR
Dip5S3AcLOvcINDjcsSgKtQX0s8wObn4VND41Y/PCT/fO3poVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpd1GD8CTxqZdSUCh0Ta8w+nGXEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wOGE2
ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5NDkxYTE0MDYvZmM3MzRhYmUtODRjYi0z
MWZiLTkwOTEtNTcyOTk1ZTY3YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDhhNmQzNDctNTE3MC00NDcwLWFi
YjYtMWI5OTQ5MWExNDA2LzA4YTZkMzQ3LTUxNzAtNDQ3MC1hYmI2LTFiOTk0OTFh
MTQwNi5jcmwwHwYDVR0jBBgwFoAUNOmTqFaGORWFujeTlR6QytCcE48wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wOGE2ZDM0Ny01MTcwLTQ0NzAtYWJiNi0xYjk5
NDkxYTE0MDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL0CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsp3i+OQPAw6AEm7/UXkwvnUT4l9JrpI7GpFcKRaBrg3p91a4XsDOhM
Xcm8CLhj0c3LzJe7W/9bCTzDbfVuwntYoTpa5Vwo73oIt9FeWxhzncL/ujbm181J
0e+h/MlClHNlK/QsFM/9aNqlicM7SWmNa/qfjJCblVsRKMTA6g+YeNErzqwNuHfj
hVFf/YDLvpnAfQOgflP3w1WP/7+PXRgqhwmF2sQxmslvxyedntEmchEtHnMW6gT8
GZhsGFw+4+nM/uL5GgdKkLkiJVUpCrljMTnMPQAH0ScnXXxBUvy+ewCutfRPlP39
ienQ0F/BTLNoqKVh1Vkm77vSSn9aj40=
-----END CERTIFICATE-----
Generated at Tue Mar 11 19:42:46 2025 by rpki-client