Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa
File:                     1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa (raw, json)
Hash identifier:          RKBHZ+yb6kbfOIYYFPOMlxVeoCpsjLTkUoErlfFPcu8=
Subject key identifier:   2D:79:95:A7:7C:6D:9D:42:0B:B6:BD:79:44:5E:1D:E4:34:BF:7A:E4
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F432858492184086B79A819B81D41D4C0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        162.255.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:08:6b:79:a8:19:b8:1d:41:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=745daa2d-db89-4afd-99d4-2f00d6f3541f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:78:21:ea:cc:79:61:50:53:11:31:7d:76:
                    44:46:de:c2:09:49:f5:37:8f:58:0e:a3:b0:6e:12:
                    23:b9:84:73:12:99:8b:28:fe:0c:67:27:55:82:8d:
                    cd:2c:ee:09:91:58:69:2b:8d:b7:25:2f:78:f6:4c:
                    20:32:85:87:a6:70:64:a6:40:46:d2:4b:f4:ca:9a:
                    01:a1:30:3d:85:da:44:3e:77:4c:9e:f0:80:45:12:
                    34:ba:83:99:60:f6:67:e5:51:0e:ce:9c:86:90:77:
                    22:67:8b:cc:37:aa:60:e9:48:b7:ec:1b:49:9b:41:
                    33:cd:9e:75:71:09:a6:a9:9b:3c:34:1b:31:2e:f7:
                    9b:60:c8:83:b8:d7:a1:1b:b6:f3:ca:11:8a:13:2a:
                    89:63:42:d8:4c:46:b8:ef:5e:73:58:3c:32:4e:45:
                    c9:43:57:a5:54:f8:80:14:51:cd:d0:92:5c:08:52:
                    eb:89:e4:86:b4:48:57:2c:ea:a3:d7:5a:9a:56:9d:
                    9a:c5:8b:14:49:4d:47:6a:41:0f:7b:f9:cd:43:52:
                    5a:74:56:b9:ab:76:5f:a1:d0:84:3f:c0:14:9f:36:
                    bf:ea:24:55:c5:ca:34:3d:ce:8a:0e:0b:ed:cc:4f:
                    89:8d:b7:31:3b:0c:0d:c8:8f:34:95:ee:ab:d5:59:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:79:95:A7:7C:6D:9D:42:0B:B6:BD:79:44:5E:1D:E4:34:BF:7A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/1224d9a7-064f-3f80-8be3-cb8039c5e55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:77:41:78:3f:72:61:53:91:7e:21:8c:06:56:11:ec:40:
         cf:2d:4b:ca:c2:91:56:6a:5e:c2:ef:b6:06:a4:1d:e6:ef:24:
         23:48:0b:b2:84:35:39:70:f0:2f:70:f7:f6:f9:2c:b4:ab:27:
         9f:18:ab:d4:42:34:11:fe:e5:73:5f:9c:77:b6:b8:ca:47:ad:
         73:f4:0c:13:33:c8:14:00:e0:ce:7f:00:c2:38:5d:59:c0:e2:
         b7:94:da:ac:4c:34:0b:1e:d5:b1:f9:75:f7:27:c1:15:f6:ff:
         80:cf:78:d0:88:de:68:9a:22:a2:80:7e:15:5f:70:3b:e7:3d:
         19:d0:1c:a1:8f:05:c9:cf:40:3e:5b:e6:7c:1c:73:e3:81:bb:
         ad:44:79:7b:bf:8c:cc:76:85:b7:0c:c7:03:f6:37:e3:ec:cf:
         f7:e8:d3:f8:39:23:50:8b:28:1d:9f:13:4b:83:ef:2d:9f:1f:
         04:54:fd:37:b9:c6:1c:7c:db:12:6d:75:6c:66:81:71:7b:f9:
         76:c9:02:60:ae:1c:af:ab:0d:de:94:b6:2f:af:a8:16:4b:4c:
         05:cf:6e:86:6b:4f:30:55:57:0f:50:63:92:28:32:f1:01:f8:
         7a:4a:94:7f:87:ec:75:7a:91:9f:c5:38:a2:06:a5:e2:89:8e:
         9f:00:46:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAhreagZuB1B1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NzQ1ZGFhMmQtZGI4OS00YWZkLTk5ZDQtMmYwMGQ2ZjM1NDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mp4IerMeWFQUxExfXZERt7CCUn1N49YDqOw
bhIjuYRzEpmLKP4MZydVgo3NLO4JkVhpK423JS949kwgMoWHpnBkpkBG0kv0ypoB
oTA9hdpEPndMnvCARRI0uoOZYPZn5VEOzpyGkHciZ4vMN6pg6Ui37BtJm0EzzZ51
cQmmqZs8NBsxLvebYMiDuNehG7bzyhGKEyqJY0LYTEa4715zWDwyTkXJQ1elVPiA
FFHN0JJcCFLrieSGtEhXLOqj11qaVp2axYsUSU1HakEPe/nNQ1JadFa5q3ZfodCE
P8AUnza/6iRVxco0Pc6KDgvtzE+JjbcxOwwNyI80le6r1VlyKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC15lad8bZ1CC7a9eUReHeQ0v3rkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvMTIyNGQ5YTctMDY0Zi0z
ZjgwLThiZTMtY2I4MDM5YzVlNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov8uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvcd0F4P3JhU5F+IYwGVhHsQM8tS8rCkVZqXsLvtgakHebvJCNIC7KE
NTlw8C9w9/b5LLSrJ58Yq9RCNBH+5XNfnHe2uMpHrXP0DBMzyBQA4M5/AMI4XVnA
4reU2qxMNAse1bH5dfcnwRX2/4DPeNCI3miaIqKAfhVfcDvnPRnQHKGPBcnPQD5b
5nwcc+OBu61EeXu/jMx2hbcMxwP2N+Psz/fo0/g5I1CLKB2fE0uD7y2fHwRU/Te5
xhx82xJtdWxmgXF7+XbJAmCuHK+rDd6Uti+vqBZLTAXPboZrTzBVVw9QY5IoMvEB
+HpKlH+H7HV6kZ/FOKIGpeKJjp8ARr8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:45 2025 by rpki-client