Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1b834dc1-8f5e-316d-99af-abd7d78afeed.roa
File:                     1b834dc1-8f5e-316d-99af-abd7d78afeed.roa (raw, json)
Hash identifier:          9CX9LCTFRzMLfdGpPJjOr7XQU7nMqXViB5OmJZF/mV8=
Subject key identifier:   18:9C:74:6B:F3:09:E0:A0:AE:E8:AA:53:9E:D8:DD:7E:FE:DF:8D:D4
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584913AC15509802E9E8A1BC8A80
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1b834dc1-8f5e-316d-99af-abd7d78afeed.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     55195
IP address blocks:        162.219.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:15:50:98:02:e9:e8:a1:bc:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=2f493df2-b94d-4be3-86d4-a102ca0ff6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:25:e7:9f:0d:7b:43:03:6d:02:44:e4:39:10:
                    33:a5:a7:18:60:5d:e0:7d:2a:f1:79:da:98:84:22:
                    11:05:c9:04:5e:84:b8:ee:8f:d9:f2:d9:1f:68:1e:
                    01:7b:80:bb:ef:36:09:28:42:71:09:bc:4e:47:45:
                    d2:c3:b7:54:75:34:8e:86:20:fe:ad:63:b5:19:fe:
                    1f:b7:dd:db:40:d7:ce:ee:77:7d:f6:e3:74:b1:9c:
                    35:36:c3:e1:73:85:67:f4:8a:fa:95:94:0c:04:b4:
                    64:1e:72:58:9c:1f:de:d3:3c:e1:af:eb:62:1e:78:
                    df:61:05:92:b1:a4:66:f3:97:01:37:ca:33:ba:79:
                    d9:6e:85:4a:53:94:bc:85:d2:a2:77:91:b1:99:e8:
                    af:c6:00:ca:ff:f1:93:51:35:99:3d:6d:e2:87:85:
                    f0:ce:f6:9f:57:76:20:c2:d7:3f:d1:29:c1:d8:5c:
                    e1:81:6e:45:bd:5c:0a:c3:47:11:ee:9d:35:58:7f:
                    18:45:31:e3:23:d5:80:76:4d:2a:83:da:9b:04:c8:
                    11:a4:5f:7d:0a:2f:d7:e1:54:b4:46:64:f1:d5:55:
                    d6:ce:4e:07:d3:f7:06:1a:c6:7d:4e:e2:03:b6:cf:
                    82:e5:45:95:9a:37:e3:10:71:5b:c5:b4:00:3a:87:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:74:6B:F3:09:E0:A0:AE:E8:AA:53:9E:D8:DD:7E:FE:DF:8D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1b834dc1-8f5e-316d-99af-abd7d78afeed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:63:ce:27:f2:17:a4:d9:0a:53:32:dd:c2:88:83:6b:ca:fb:
         7d:64:ce:d4:31:6a:e0:ee:b9:25:a9:70:24:7f:f6:85:3c:58:
         55:6c:b0:ac:25:b8:b6:2c:ac:f3:c6:1f:38:17:57:ee:12:a7:
         75:2c:be:e8:ab:5c:99:27:1a:3f:27:30:ec:90:63:44:9b:30:
         2a:54:41:06:b2:c4:50:1a:c0:cf:50:82:56:b0:52:1d:1e:dc:
         05:24:6a:61:36:87:c4:39:32:bf:7e:2b:ec:7b:06:d8:9a:e0:
         30:7b:49:ee:d5:4b:cf:c8:42:b6:46:e4:30:06:94:3b:e2:87:
         92:b4:54:03:06:75:a9:b6:a7:75:32:64:9e:7e:48:b2:cc:08:
         61:10:26:89:09:15:33:3c:45:d7:02:83:4f:5d:79:a3:9c:9d:
         f3:ba:f9:a3:84:59:ed:30:89:07:68:27:54:89:c1:67:52:b2:
         ac:02:32:8d:b2:8d:c5:05:ad:a8:d6:d1:a8:b8:92:8d:fa:d6:
         bb:4e:62:49:7e:3d:b1:ab:80:ca:85:31:5b:38:10:1e:28:f9:
         8a:da:64:32:6a:e5:0e:8a:24:55:6e:04:32:92:71:9e:ea:c1:
         22:36:2e:85:9a:e2:75:db:f7:47:45:d7:3e:19:3d:38:7f:55:
         16:b8:5b:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBVQmALp6KG8ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx
OGU4MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
MmY0OTNkZjItYjk0ZC00YmUzLTg2ZDQtYTEwMmNhMGZmNmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSXnnw17QwNtAkTkORAzpacYYF3gfSrxedqY
hCIRBckEXoS47o/Z8tkfaB4Be4C77zYJKEJxCbxOR0XSw7dUdTSOhiD+rWO1Gf4f
t93bQNfO7nd99uN0sZw1NsPhc4Vn9Ir6lZQMBLRkHnJYnB/e0zzhr+tiHnjfYQWS
saRm85cBN8ozunnZboVKU5S8hdKid5GxmeivxgDK//GTUTWZPW3ih4XwzvafV3Yg
wtc/0SnB2FzhgW5FvVwKw0cR7p01WH8YRTHjI9WAdk0qg9qbBMgRpF99Ci/X4VS0
RmTx1VXWzk4H0/cGGsZ9TuIDts+C5UWVmjfjEHFbxbQAOocibwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBicdGvzCeCgruiqU57Y3X7+343UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2
MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMWI4MzRkYzEtOGY1ZS0z
MTZkLTk5YWYtYWJkN2Q3OGFmZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2
MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi
MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5
NzZhYjE4ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotswMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJjzifyF6TZClMy3cKIg2vK+31kztQxauDuuSWpcCR/9oU8WFVssKwl
uLYsrPPGHzgXV+4Sp3UsvuirXJknGj8nMOyQY0SbMCpUQQayxFAawM9QglawUh0e
3AUkamE2h8Q5Mr9+K+x7Btia4DB7Se7VS8/IQrZG5DAGlDvih5K0VAMGdam2p3Uy
ZJ5+SLLMCGEQJokJFTM8RdcCg09deaOcnfO6+aOEWe0wiQdoJ1SJwWdSsqwCMo2y
jcUFrajW0ai4ko361rtOYkl+PbGrgMqFMVs4EB4o+YraZDJq5Q6KJFVuBDKScZ7q
wSI2LoWa4nXb90dF1z4ZPTh/VRa4W3I=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:05 2025 by rpki-client