Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/73ff7ac5-7095-386b-ac66-45e1cd64bae2.roa
File:                     73ff7ac5-7095-386b-ac66-45e1cd64bae2.roa (raw, json)
Hash identifier:          EZnDiD4ieVVIO3z+R1lFP/zFMwhDH7P3aLH7HjoLS+Y=
Subject key identifier:   9A:A1:FD:25:32:0E:7A:5D:9A:B4:FA:63:65:62:86:F5:6A:03:D2:49
Certificate issuer:       /CN=e9687864-e283-4f19-98f3-a437efb373e8
Certificate serial:       010D0C9F432858489F7BBCDE0B7FF2CDCDD61480
Authority key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/73ff7ac5-7095-386b-ac66-45e1cd64bae2.roa
Signing time:             Tue 21 Jan 2025 23:09:44 +0000
ROA not before:           Tue 21 Jan 2025 23:09:44 +0000
ROA not after:            Mon 21 Apr 2025 22:09:44 +0000
asID:                     22772
IP address blocks:        192.195.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:7b:bc:de:0b:7f:f2:cd:cd:d6:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9687864-e283-4f19-98f3-a437efb373e8
        Validity
            Not Before: Jan 21 23:09:44 2025 GMT
            Not After : Apr 21 22:09:44 2025 GMT
        Subject: CN=298a6ec8-1bcc-4452-a28c-b3704b683f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:0f:fc:7b:57:95:fd:80:73:85:4e:3e:ae:
                    b4:e9:13:1e:19:54:21:3e:24:08:f4:1c:0f:85:24:
                    cc:25:b1:e7:0a:0b:3d:08:f4:75:5e:f8:94:45:ed:
                    07:d8:64:19:58:c9:06:ac:93:06:e3:db:68:cf:f7:
                    33:74:d4:ea:cf:12:9f:a4:c1:2d:55:18:75:56:73:
                    b6:dd:13:fa:30:d1:b6:d4:3d:5a:99:59:c5:d7:b2:
                    35:37:09:05:60:44:2d:5c:10:44:af:d4:48:d8:4b:
                    b4:2d:7a:37:3b:39:2b:94:99:09:10:a0:cd:88:e9:
                    02:c6:a6:65:e3:1f:0f:55:d8:d0:3b:7d:8a:fc:73:
                    b6:e0:e1:da:ae:3f:27:77:e6:bb:1f:2c:52:20:17:
                    22:84:c5:a4:16:25:21:60:3e:36:bd:40:a8:c6:99:
                    0a:6f:31:52:3d:8e:96:fb:32:b3:45:7b:5a:16:fe:
                    24:66:84:68:7d:65:b1:4e:4d:15:5e:59:46:13:01:
                    8b:a6:a0:33:64:a7:47:88:d4:35:a2:fc:3e:91:8c:
                    f5:7a:30:73:00:e2:f8:e5:9a:8f:92:bf:eb:98:91:
                    1c:36:29:45:47:da:18:2b:9f:4d:0f:e0:be:a2:26:
                    01:9f:bb:a8:dc:31:05:41:d5:27:34:28:95:aa:55:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A1:FD:25:32:0E:7A:5D:9A:B4:FA:63:65:62:86:F5:6A:03:D2:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/73ff7ac5-7095-386b-ac66-45e1cd64bae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:4e:6e:df:c7:71:7f:db:af:dd:a5:31:a2:39:42:73:1d:
         47:58:db:88:0d:64:d1:61:f6:d3:95:13:6b:3b:cb:8e:f1:05:
         f5:59:cd:87:69:f6:32:0c:8a:d2:f1:6e:f1:02:b6:65:9c:d1:
         3f:42:ef:89:d2:3c:1f:7f:10:b4:b5:69:d6:bd:63:29:d9:5a:
         2d:64:9e:ad:1a:c8:36:ea:49:79:fb:f1:fd:bb:81:a4:fa:93:
         56:d6:c8:8f:2b:0d:ad:ea:cf:00:ff:8c:59:ea:df:64:08:c7:
         8e:6f:6b:c3:bf:46:b8:0b:76:64:cd:51:66:44:bf:36:17:01:
         b6:c8:ce:a6:7f:87:9c:84:6b:56:8b:df:86:37:9b:e3:de:03:
         a6:91:62:62:a3:54:8a:9b:45:9f:f3:64:e3:67:03:8d:9c:3a:
         29:43:0b:2b:27:2a:29:1b:1c:c7:d9:6a:fb:e0:94:d7:53:bb:
         2b:b4:e6:84:ee:c1:cb:82:eb:d1:30:47:c7:b2:71:66:5b:e0:
         29:51:08:5f:b2:7c:b1:01:fc:32:89:8c:2c:ea:64:e1:f6:70:
         84:72:13:a3:81:f1:07:1d:45:78:09:12:34:c0:e7:39:14:1c:
         a2:e4:f2:a3:28:ed:d0:2d:25:7f:a9:6f:d1:30:ab:34:e5:df:
         04:8b:2c:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEife7zeC3/yzc3WFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2ODc4NjQtZTI4My00ZjE5LTk4ZjMtYTQzN2VmYjM3
M2U4MB4XDTI1MDEyMTIzMDk0NFoXDTI1MDQyMTIyMDk0NFowLzEtMCsGA1UEAxMk
Mjk4YTZlYzgtMWJjYy00NDUyLWEyOGMtYjM3MDRiNjgzZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOQP/HtXlf2Ac4VOPq606RMeGVQhPiQI9BwP
hSTMJbHnCgs9CPR1XviURe0H2GQZWMkGrJMG49toz/czdNTqzxKfpMEtVRh1VnO2
3RP6MNG21D1amVnF17I1NwkFYEQtXBBEr9RI2Eu0LXo3OzkrlJkJEKDNiOkCxqZl
4x8PVdjQO32K/HO24OHarj8nd+a7HyxSIBcihMWkFiUhYD42vUCoxpkKbzFSPY6W
+zKzRXtaFv4kZoRofWWxTk0VXllGEwGLpqAzZKdHiNQ1ovw+kYz1ejBzAOL45ZqP
kr/rmJEcNilFR9oYK59ND+C+oiYBn7uo3DEFQdUnNCiVqlWbOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqh/SUyDnpdmrT6Y2VihvVqA9JJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTY4
Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3ZWZiMzczZTgvNzNmZjdhYzUtNzA5NS0z
ODZiLWFjNjYtNDVlMWNkNjRiYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk2ODc4NjQtZTI4My00ZjE5LTk4
ZjMtYTQzN2VmYjM3M2U4L2U5Njg3ODY0LWUyODMtNGYxOS05OGYzLWE0MzdlZmIz
NzNlOC5jcmwwHwYDVR0jBBgwFoAUDrmDJwH3BnrLpZyaXmHLx9lYw+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTY4Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3
ZWZiMzczZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFn+Tm7fx3F/26/dpTGiOUJzHUdY24gNZNFh9tOVE2s7y47xBfVZzYdp
9jIMitLxbvECtmWc0T9C74nSPB9/ELS1ada9YynZWi1knq0ayDbqSXn78f27gaT6
k1bWyI8rDa3qzwD/jFnq32QIx45va8O/RrgLdmTNUWZEvzYXAbbIzqZ/h5yEa1aL
34Y3m+PeA6aRYmKjVIqbRZ/zZONnA42cOilDCysnKikbHMfZavvglNdTuyu05oTu
wcuC69EwR8eycWZb4ClRCF+yfLEB/DKJjCzqZOH2cIRyE6OB8QcdRXgJEjTA5zkU
HKLk8qMo7dAtJX+pb9EwqzTl3wSLLGY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:19 2025 by rpki-client