Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/be08875f-e705-3ff9-89b8-057bd7061382.roa
File:                     be08875f-e705-3ff9-89b8-057bd7061382.roa (raw, json)
Hash identifier:          ova0r2ZEkwocHLD/OmyPtGllMGh6F3hiDM4lZECJZKI=
Subject key identifier:   BA:1A:11:80:48:B5:75:0B:5C:AF:7D:19:BE:88:D0:D0:9C:50:64:FF
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F43285849EA85205A522CD36EF59E4F80
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/be08875f-e705-3ff9-89b8-057bd7061382.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     160
IP address blocks:        192.170.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:20:5a:52:2c:d3:6e:f5:9e:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=7ca8832a-fd8c-4491-8d1b-50fda4b1581b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:82:78:86:b2:2d:82:cf:35:a3:e1:0b:4a:
                    a3:0c:10:71:05:21:b5:41:a3:16:59:ef:81:39:15:
                    e2:10:f0:5f:89:23:4d:f6:fb:cd:65:51:f1:fe:b0:
                    89:11:af:ce:ce:d9:b6:b0:fc:a6:23:9e:c1:34:42:
                    7d:1b:80:a2:ba:a7:19:da:31:71:16:83:72:7b:26:
                    fc:e7:a7:0c:ae:e5:1b:03:ee:b4:08:77:6c:55:d8:
                    40:bf:ed:30:06:1b:b6:73:fb:dc:5f:f1:08:bf:02:
                    09:a9:d1:df:df:39:5a:b5:ff:73:6b:0a:15:6b:b4:
                    40:63:ad:a2:fd:5b:8f:7f:46:91:52:7b:c9:bd:1c:
                    20:c4:b7:c6:51:77:b1:55:63:26:ee:71:d3:82:e3:
                    c3:b9:b4:3c:8b:61:4c:69:39:00:f8:f6:ef:d1:82:
                    fd:08:c9:ec:cf:65:1b:b9:7a:af:49:e9:e0:ad:f4:
                    24:78:b9:3a:e9:bb:c9:cc:9a:9b:e5:56:42:e9:74:
                    c0:65:55:2e:9d:91:24:f6:d0:55:57:79:74:96:7c:
                    b3:0d:4b:e2:60:6c:27:38:be:ac:70:55:3c:b2:19:
                    76:e2:db:0a:d0:eb:9f:a8:c0:a0:10:2e:02:b4:06:
                    33:b6:df:f3:e5:68:2c:78:2e:5c:7a:13:6f:fb:16:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1A:11:80:48:B5:75:0B:5C:AF:7D:19:BE:88:D0:D0:9C:50:64:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/be08875f-e705-3ff9-89b8-057bd7061382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:2e:10:7a:fc:3b:54:9d:42:6c:95:50:a5:58:33:1a:95:fd:
         9a:66:70:3a:c2:31:74:7e:6b:92:a3:85:b0:16:06:b3:16:f8:
         26:7c:66:f5:60:59:15:0e:81:98:d7:fd:a2:4e:5a:37:5e:c1:
         6c:56:4e:5a:0d:db:c8:c0:4b:81:a1:69:c9:2b:b0:7d:6e:57:
         e9:92:2e:57:b0:61:ee:67:ec:31:00:ea:7e:0c:d5:b5:6b:32:
         89:a5:20:3c:46:bf:f2:e8:63:2d:33:d4:b4:05:99:d7:57:3b:
         3c:0d:3b:ec:ec:84:24:4d:45:f3:d7:17:59:3c:83:e0:d2:a6:
         dc:87:9f:22:ac:b9:52:85:82:2a:86:3f:95:1a:02:23:59:76:
         73:17:9d:df:b0:90:de:92:9b:77:e7:aa:9b:f5:81:93:d2:cf:
         52:ad:05:33:37:ae:5a:a0:e4:d2:b6:93:41:44:b6:6a:44:98:
         e2:be:ad:54:6c:e9:1a:89:da:8e:c8:2a:fa:3e:bc:9c:91:55:
         73:2a:f2:eb:02:35:8d:73:47:74:c6:c9:a0:88:74:f3:b3:d4:
         57:07:ad:60:45:bf:7b:8b:58:c1:82:78:aa:32:51:20:dd:e1:
         e9:2d:d3:7d:8e:3a:0e:1e:80:91:e6:48:66:56:1b:2c:6a:17:
         85:da:7b:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSBaUizTbvWeT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi
MzMzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
N2NhODgzMmEtZmQ4Yy00NDkxLThkMWItNTBmZGE0YjE1ODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkiCeIayLYLPNaPhC0qjDBBxBSG1QaMWWe+B
ORXiEPBfiSNN9vvNZVHx/rCJEa/Oztm2sPymI57BNEJ9G4CiuqcZ2jFxFoNyeyb8
56cMruUbA+60CHdsVdhAv+0wBhu2c/vcX/EIvwIJqdHf3zlatf9zawoVa7RAY62i
/VuPf0aRUnvJvRwgxLfGUXexVWMm7nHTguPDubQ8i2FMaTkA+Pbv0YL9CMnsz2Ub
uXqvSengrfQkeLk66bvJzJqb5VZC6XTAZVUunZEk9tBVV3l0lnyzDUviYGwnOL6s
cFU8shl24tsK0OufqMCgEC4CtAYztt/z5WgseC5cehNv+xYLLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoaEYBItXULXK99Gb6I0NCcUGT/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy
MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvYmUwODg3NWYtZTcwNS0z
ZmY5LTg5YjgtMDU3YmQ3MDYxMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw
ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz
YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl
MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwKrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcuEHr8O1SdQmyVUKVYMxqV/ZpmcDrCMXR+a5KjhbAWBrMW+CZ8ZvVg
WRUOgZjX/aJOWjdewWxWTloN28jAS4GhackrsH1uV+mSLlewYe5n7DEA6n4M1bVr
MomlIDxGv/LoYy0z1LQFmddXOzwNO+zshCRNRfPXF1k8g+DSptyHnyKsuVKFgiqG
P5UaAiNZdnMXnd+wkN6Sm3fnqpv1gZPSz1KtBTM3rlqg5NK2k0FEtmpEmOK+rVRs
6RqJ2o7IKvo+vJyRVXMq8usCNY1zR3TGyaCIdPOz1FcHrWBFv3uLWMGCeKoyUSDd
4ekt032OOg4egJHmSGZWGyxqF4Xae/c=
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:12 2025 by rpki-client