Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/46cfbc7b-5284-3990-afa8-e20285f053dd.roa
File:                     46cfbc7b-5284-3990-afa8-e20285f053dd.roa (raw, json)
Hash identifier:          vSyjQXIpoubPWzlhk8oAtghhiwX5uMd4qh1Jrl4HNJQ=
Subject key identifier:   F3:0C:A1:80:61:04:90:F9:02:24:4E:F9:E9:51:DC:B2:E3:5C:6F:22
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285848530AF636E9C22CA4800B7B80
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/46cfbc7b-5284-3990-afa8-e20285f053dd.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     22635
IP address blocks:        146.115.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:f6:36:e9:c2:2c:a4:80:0b:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=c39c5cc5-b256-4962-aa30-3a95c6db30eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:ac:8b:df:97:e2:19:98:72:de:12:f9:14:
                    75:ce:a1:94:7c:0a:74:c3:e6:83:f8:d7:18:02:ad:
                    14:41:d8:c9:aa:40:e0:27:e3:6e:64:fc:d5:19:d9:
                    fd:a3:ce:eb:f8:b9:95:93:51:09:d0:f0:07:2f:85:
                    50:4f:75:1b:b3:37:a5:a6:a9:9e:80:9c:16:b7:03:
                    22:4b:b6:c7:ef:91:6d:f9:ab:81:9d:64:b1:70:f7:
                    d0:1f:4a:32:8a:d3:4e:9c:10:eb:c5:13:eb:74:6e:
                    aa:a6:d1:64:cd:03:dd:03:84:4c:45:75:ae:21:31:
                    16:09:e3:ea:92:9e:8a:6c:75:24:84:fb:8c:62:63:
                    5b:9e:d7:62:3e:be:15:fd:67:71:e4:82:06:68:da:
                    72:fb:03:ef:58:5c:29:99:38:fe:24:fd:48:2a:00:
                    8d:ed:4e:a8:ce:7f:02:6a:b7:4d:94:90:76:d1:23:
                    57:7b:67:53:03:a4:7f:fd:d7:e0:a6:9f:83:af:92:
                    1f:75:07:b9:39:ca:77:a2:85:d6:d2:5c:20:e5:23:
                    de:a4:4e:14:c5:ac:fb:45:6f:3e:b5:b6:e7:93:56:
                    1f:20:b9:be:32:1c:f2:a9:9d:9c:11:f5:e9:8b:af:
                    bb:8d:06:58:3a:41:ff:33:b0:e6:8d:ab:d7:1b:18:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0C:A1:80:61:04:90:F9:02:24:4E:F9:E9:51:DC:B2:E3:5C:6F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/46cfbc7b-5284-3990-afa8-e20285f053dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.115.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:c4:a8:1c:f0:49:d1:18:13:fd:ec:a6:9b:1d:44:06:6a:
         15:6f:86:62:51:f4:08:66:60:53:67:24:06:21:99:a0:bc:23:
         b4:4a:5d:10:3a:c4:31:fd:bb:63:fc:ce:89:dc:f8:8f:25:ce:
         5e:1b:f9:5a:68:2e:b5:7d:a1:1e:c5:35:e2:73:bd:61:51:86:
         39:a2:67:b9:18:45:08:12:66:87:b1:68:22:2b:c7:58:36:b5:
         ad:06:a8:08:67:24:f7:c9:d3:41:d4:7a:29:15:01:a3:78:87:
         1d:76:6e:9f:23:7f:12:1a:92:fa:13:50:c3:33:db:28:05:ad:
         71:88:a3:97:a2:67:ee:4d:bb:50:b3:02:92:70:9b:9f:19:9f:
         ce:e2:a8:bd:95:60:77:d4:b8:15:f7:37:63:bf:67:ad:b1:72:
         ae:3d:a7:fd:4f:96:68:a4:17:57:fd:42:05:78:60:76:42:b2:
         32:72:99:62:a1:5d:14:66:ec:db:b3:35:1f:0e:08:cf:a1:a6:
         fa:42:af:c7:ad:0d:48:af:ef:ba:0a:d8:ad:c9:25:5f:ff:8f:
         d6:ca:96:cf:10:12:f7:82:17:38:76:a3:93:f9:ea:a7:e1:ce:
         71:0c:85:cb:cb:18:49:7e:9c:15:b5:d7:d5:8f:d0:55:a9:00:
         31:f4:78:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCvY26cIspIALe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzM5YzVjYzUtYjI1Ni00OTYyLWFhMzAtM2E5NWM2ZGIzMGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8ysi9+X4hmYct4S+RR1zqGUfAp0w+aD+NcY
Aq0UQdjJqkDgJ+NuZPzVGdn9o87r+LmVk1EJ0PAHL4VQT3UbszelpqmegJwWtwMi
S7bH75Ft+auBnWSxcPfQH0oyitNOnBDrxRPrdG6qptFkzQPdA4RMRXWuITEWCePq
kp6KbHUkhPuMYmNbntdiPr4V/Wdx5IIGaNpy+wPvWFwpmTj+JP1IKgCN7U6ozn8C
ardNlJB20SNXe2dTA6R//dfgpp+Dr5IfdQe5Ocp3ooXW0lwg5SPepE4Uxaz7RW8+
tbbnk1YfILm+MhzyqZ2cEfXpi6+7jQZYOkH/M7DmjavXGxixGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMMoYBhBJD5AiRO+elR3LLjXG8iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvNDZjZmJjN2ItNTI4NC0z
OTkwLWFmYTgtZTIwMjg1ZjA1M2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknMMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExvxKgc8EnRGBP97KabHUQGahVvhmJR9AhmYFNnJAYhmaC8I7RKXRA6
xDH9u2P8zonc+I8lzl4b+VpoLrV9oR7FNeJzvWFRhjmiZ7kYRQgSZoexaCIrx1g2
ta0GqAhnJPfJ00HUeikVAaN4hx12bp8jfxIakvoTUMMz2ygFrXGIo5eiZ+5Nu1Cz
ApJwm58Zn87iqL2VYHfUuBX3N2O/Z62xcq49p/1PlmikF1f9QgV4YHZCsjJymWKh
XRRm7NuzNR8OCM+hpvpCr8etDUiv77oK2K3JJV//j9bKls8QEveCFzh2o5P56qfh
znEMhcvLGEl+nBW119WP0FWpADH0eIY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:01:55 2025 by rpki-client