Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa
File:                     3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa (raw, json)
Hash identifier:          VR6P9GwgROpkvBUD1GbuTq3gBbm2Sf9OYZgtY22qahw=
Subject key identifier:   83:79:73:67:4C:13:1E:78:C3:35:33:49:D4:4C:33:7A:82:87:27:1E
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F43285848E59BC6842B8CCB5C352E2760
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        192.111.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c6:84:2b:8c:cb:5c:35:2e:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=063a809d-5af2-4e68-b621-717dad7f626e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:b9:72:8c:67:25:ec:38:16:c4:99:bb:14:
                    eb:97:0d:16:74:23:ea:e5:41:df:99:d1:66:cd:ad:
                    b6:37:d5:a6:eb:bb:08:e0:cc:8b:ba:f2:a8:af:8f:
                    92:bc:23:00:df:b4:ee:99:c0:15:2b:5a:6d:35:31:
                    d1:49:5f:63:ed:d7:69:e8:d4:8a:3c:1c:4a:a7:26:
                    76:f3:88:1d:24:ab:b3:19:8a:a5:44:bb:f2:94:40:
                    8d:cd:87:21:e1:83:d6:ec:72:2b:63:c5:6a:0c:0e:
                    e8:e6:ed:39:07:ec:5e:37:2f:10:aa:3d:da:a9:ad:
                    a0:45:02:7e:3a:2a:bb:45:a2:77:2e:88:38:83:a4:
                    fe:8e:fd:4d:32:f0:d3:d5:c4:64:b2:0f:92:c7:04:
                    9c:3e:94:fb:68:40:41:0b:b6:50:fd:e8:2b:eb:de:
                    e5:ee:fb:36:e0:ea:79:c2:60:7c:81:b3:f6:b9:a9:
                    d1:5a:13:28:72:7b:de:89:ac:7a:af:3e:67:3d:d2:
                    7a:bf:3a:3a:83:bb:c6:82:2f:cd:16:71:de:f9:b7:
                    01:a9:31:54:98:f7:38:e7:8f:e4:16:59:6c:c9:15:
                    78:f4:05:1f:d5:5c:a7:77:c4:2f:0a:db:75:36:1e:
                    ff:1b:dd:9a:eb:b1:3e:72:5e:8f:5b:b5:f5:85:58:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:79:73:67:4C:13:1E:78:C3:35:33:49:D4:4C:33:7A:82:87:27:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:64:ed:8d:12:b0:a6:60:d2:9d:e2:6b:a6:9d:0b:9e:36:be:
         ee:07:47:8f:23:93:6e:af:24:41:d8:4f:40:a5:9a:b7:fb:39:
         4e:89:08:ee:ff:e4:2d:ca:ad:64:bf:aa:86:32:b1:c3:b3:24:
         6d:d6:92:11:41:03:ba:ae:81:c8:10:05:fa:2f:09:6b:e4:e3:
         aa:19:b1:53:c4:8f:3d:3e:a9:c9:c4:7c:83:73:8f:78:bf:c0:
         b9:6a:e1:e5:f0:6c:b7:be:81:84:87:f1:8c:a8:73:15:33:e4:
         2b:0a:3b:b9:d3:4a:f0:fd:68:b4:d4:4a:70:6f:dd:48:b4:d7:
         b9:31:27:21:93:c6:88:a3:17:eb:c3:f4:19:b9:9f:ca:8f:ab:
         f6:76:27:3f:fe:a1:b9:83:a5:48:8f:3e:ec:00:a1:53:46:6f:
         fb:a5:37:75:7c:7e:52:2c:f1:e8:f1:81:57:ed:e6:8e:e3:61:
         a5:90:a5:85:73:ea:38:c9:ef:e3:4d:67:cc:93:6c:b9:7a:58:
         c5:b3:59:6f:27:0e:58:b5:48:14:7e:19:60:db:96:f5:78:6f:
         8d:fa:6c:72:db:e4:0f:09:33:c6:27:b4:d2:29:95:3d:67:c1:
         47:11:b7:69:0d:28:05:90:5e:af:47:ec:86:71:89:29:ba:f6:
         3c:25:24:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8aEK4zLXDUuJ2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0
ZmNiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MDYzYTgwOWQtNWFmMi00ZTY4LWI2MjEtNzE3ZGFkN2Y2MjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsW5coxnJew4FsSZuxTrlw0WdCPq5UHfmdFm
za22N9Wm67sI4MyLuvKor4+SvCMA37TumcAVK1ptNTHRSV9j7ddp6NSKPBxKpyZ2
84gdJKuzGYqlRLvylECNzYch4YPW7HIrY8VqDA7o5u05B+xeNy8Qqj3aqa2gRQJ+
Oiq7RaJ3Log4g6T+jv1NMvDT1cRksg+SxwScPpT7aEBBC7ZQ/egr697l7vs24Op5
wmB8gbP2uanRWhMocnveiax6rz5nPdJ6vzo6g7vGgi/NFnHe+bcBqTFUmPc454/k
FllsyRV49AUf1Vynd8QvCtt1Nh7/G92a67E+cl6PW7X1hVhWQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIN5c2dMEx54wzUzSdRMM3qChyceMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy
YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2MxZjUyZmUtM2NkNi0z
NTMxLTliOGEtZWFjNWRjNGZiMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw
NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh
NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi
ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJk7Y0SsKZg0p3ia6adC542vu4HR48jk26vJEHYT0Clmrf7OU6JCO7/
5C3KrWS/qoYyscOzJG3WkhFBA7qugcgQBfovCWvk46oZsVPEjz0+qcnEfINzj3i/
wLlq4eXwbLe+gYSH8YyocxUz5CsKO7nTSvD9aLTUSnBv3Ui017kxJyGTxoijF+vD
9Bm5n8qPq/Z2Jz/+obmDpUiPPuwAoVNGb/ulN3V8flIs8ejxgVft5o7jYaWQpYVz
6jjJ7+NNZ8yTbLl6WMWzWW8nDli1SBR+GWDblvV4b436bHLb5A8JM8YntNIplT1n
wUcRt2kNKAWQXq9H7IZxiSm69jwlJFE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:33 2025 by rpki-client