Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa
File:                     cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa (raw, json)
Hash identifier:          +BW0HpvejdxGjRLvJ3ugd0r3d/LzYL4RK+sxqBJWCkw=
Subject key identifier:   99:EE:A7:EC:A9:DE:4A:A5:23:20:3E:27:BD:04:CA:F1:4A:92:07:9D
Certificate issuer:       /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial:       010D0C9F43285849244E7845892DC3400B6ECF80
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        193.149.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:78:45:89:2d:c3:40:0b:6e:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=4bffcfc6-cc2a-46f4-9dfc-277c40b0dd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:72:51:e1:2e:e8:34:f3:c6:96:14:7c:1c:
                    ca:ac:86:f4:e0:58:83:f5:2e:f6:7f:d4:67:1c:73:
                    94:62:fc:05:a1:1f:f2:3c:e1:ab:b6:69:99:b6:84:
                    be:07:0f:97:7f:a7:b3:be:b9:81:29:05:58:46:1a:
                    0b:37:d1:62:aa:f9:65:01:d7:d2:d2:11:43:15:3f:
                    10:0f:e9:90:0c:79:fe:11:cf:cf:b6:29:0b:5f:88:
                    36:dd:84:54:a7:bf:7d:73:e8:c2:8f:a2:a5:98:5d:
                    9f:78:8c:6a:b6:1f:14:3b:f6:63:31:8f:6a:65:83:
                    ae:d9:89:65:c9:5a:ee:9a:8c:06:74:ee:67:69:28:
                    28:8e:75:bb:f3:62:40:97:d1:72:0f:0a:aa:ef:1f:
                    25:db:77:bc:4c:54:8c:c2:8a:fb:2b:c7:e8:65:b1:
                    bb:67:2d:9f:c4:40:b7:8c:5c:2f:88:f7:d2:ca:22:
                    97:ff:0c:fb:f6:65:dc:7c:8d:32:8e:f7:33:db:a5:
                    00:4a:17:7c:6e:3d:5d:33:4e:53:7b:49:59:97:e9:
                    d2:a2:99:fa:f7:d9:42:23:9f:e3:f5:8a:94:5e:69:
                    82:d6:22:3c:39:6d:c4:a3:28:ad:78:78:da:61:e7:
                    99:0b:21:57:d4:89:e5:49:fc:5c:8b:4c:13:c9:2d:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EE:A7:EC:A9:DE:4A:A5:23:20:3E:27:BD:04:CA:F1:4A:92:07:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/cbb6ecb7-7567-3eb9-9b46-66501fc109ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl

            X509v3 Authority Key Identifier:
                keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:49:54:3f:ea:22:9a:57:a6:fc:7c:34:2f:c8:bf:ab:2c:
         36:f0:ce:a6:ce:4e:a3:c1:57:39:7a:99:15:2b:02:27:bd:40:
         84:34:0c:fe:cc:4c:1a:95:f4:88:9f:30:23:b8:53:cd:c3:5e:
         10:c6:74:ae:24:4d:6b:fd:00:61:cc:0b:d7:67:88:b5:fb:55:
         de:d4:7a:25:7d:18:41:7a:bc:83:c3:fa:5c:cd:83:36:48:0f:
         ac:12:24:9f:77:cf:e4:eb:66:fa:3e:93:4e:2c:be:a7:ea:83:
         b0:d2:7d:85:92:53:ce:d1:29:2f:d6:17:f0:fb:b0:ec:03:7c:
         4a:62:4d:f1:10:98:12:59:74:19:d6:0f:1f:58:08:fa:fb:49:
         cd:5b:3b:e5:2a:84:e3:b9:ce:57:80:fc:68:2b:36:a9:17:28:
         a0:c3:4d:a7:05:bf:40:43:76:89:3d:fd:2c:8d:81:5c:e2:3a:
         59:67:5f:f0:6e:b4:95:4a:06:3b:a4:00:d9:69:75:d5:bb:3d:
         10:cc:ce:7c:e2:bc:91:e3:2e:95:6e:49:65:e7:eb:0d:21:a4:
         ec:5a:4a:96:fa:8b:e6:f2:dc:fe:42:d6:e1:5d:b8:f5:26:0a:
         64:ca:6a:16:4e:ac:aa:dd:72:f1:e8:1a:d2:ab:71:b3:b2:75:
         4e:23:c7:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnhFiS3DQAtuz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi
ZjE0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
NGJmZmNmYzYtY2MyYS00NmY0LTlkZmMtMjc3YzQwYjBkZDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ZyUeEu6DTzxpYUfBzKrIb04FiD9S72f9Rn
HHOUYvwFoR/yPOGrtmmZtoS+Bw+Xf6ezvrmBKQVYRhoLN9FiqvllAdfS0hFDFT8Q
D+mQDHn+Ec/PtikLX4g23YRUp799c+jCj6KlmF2feIxqth8UO/ZjMY9qZYOu2Yll
yVrumowGdO5naSgojnW782JAl9FyDwqq7x8l23e8TFSMwor7K8foZbG7Zy2fxEC3
jFwviPfSyiKX/wz79mXcfI0yjvcz26UAShd8bj1dM05Te0lZl+nSopn699lCI5/j
9YqUXmmC1iI8OW3EoyiteHjaYeeZCyFX1InlSfxci0wTyS0e2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnup+yp3kqlIyA+J70EyvFKkgedMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5
NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvY2JiNmVjYjctNzU2Ny0z
ZWI5LTliNDYtNjY1MDFmYzEwOWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5
OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw
YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5
ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZWIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQ7SVQ/6iKaV6b8fDQvyL+rLDbwzqbOTqPBVzl6mRUrAie9QIQ0DP7M
TBqV9IifMCO4U83DXhDGdK4kTWv9AGHMC9dniLX7Vd7UeiV9GEF6vIPD+lzNgzZI
D6wSJJ93z+TrZvo+k04svqfqg7DSfYWSU87RKS/WF/D7sOwDfEpiTfEQmBJZdBnW
Dx9YCPr7Sc1bO+UqhOO5zleA/GgrNqkXKKDDTacFv0BDdok9/SyNgVziOllnX/Bu
tJVKBjukANlpddW7PRDMznzivJHjLpVuSWXn6w0hpOxaSpb6i+by3P5C1uFduPUm
CmTKahZOrKrdcvHoGtKrcbOydU4jx5w=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:29:02 2025 by rpki-client