Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0e174844-8d30-349e-87b0-94d2543ea2ba.roa
File:                     0e174844-8d30-349e-87b0-94d2543ea2ba.roa (raw, json)
Hash identifier:          LOc5W8z6KnHbg2QzRqdMTOKYIT9lvfG2eXGBsJcorjE=
Subject key identifier:   FF:46:B0:49:D2:CA:02:8C:BB:99:FE:55:61:77:36:8F:75:44:9D:A8
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285849F715130EB32C280B2C8EA780
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0e174844-8d30-349e-87b0-94d2543ea2ba.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     33418
IP address blocks:        65.183.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:13:0e:b3:2c:28:0b:2c:8e:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=552fb685-b720-44a3-93c7-2550f5c5e8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:97:a5:ea:f8:36:00:6a:83:90:ac:8c:9b:
                    aa:36:21:10:16:7e:cd:b8:a0:5e:9f:74:01:b3:20:
                    7d:ab:82:b5:52:39:63:21:0b:ed:49:db:17:5a:e2:
                    f0:4e:7b:19:cf:15:72:33:43:c2:5b:45:68:86:f7:
                    16:8e:76:ee:90:34:f2:a5:1e:30:0f:67:46:4a:25:
                    4e:ec:63:ca:3e:89:94:d3:f3:87:62:b9:ae:89:05:
                    45:53:2d:78:5e:0d:38:dc:61:d4:5b:7c:58:70:95:
                    a4:16:29:83:6c:59:5c:42:cd:93:c4:a0:fa:cd:27:
                    ab:1e:ac:3b:f8:0d:d1:f3:1b:3f:f0:34:e5:dd:ea:
                    62:23:26:22:38:cc:b9:1f:51:76:fd:4c:48:13:4a:
                    6a:2e:80:e7:78:4a:e5:7a:af:95:ea:9c:cd:a1:87:
                    40:82:d6:03:68:2a:66:58:00:63:d9:37:89:59:c9:
                    95:4f:9c:2f:46:a7:eb:d4:f3:46:de:ac:c1:f3:18:
                    4f:fb:5d:59:d9:0b:11:6c:79:c8:39:2e:09:11:06:
                    aa:a5:cc:c5:ac:58:cc:fe:9c:d8:26:00:64:b6:28:
                    22:5e:1a:3f:02:78:0f:6d:ae:d7:88:c3:12:81:21:
                    cf:31:8d:0e:3c:b5:d0:50:e7:3d:62:bb:9c:9b:23:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:46:B0:49:D2:CA:02:8C:BB:99:FE:55:61:77:36:8F:75:44:9D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/0e174844-8d30-349e-87b0-94d2543ea2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:32:8d:57:ca:76:aa:00:c0:de:07:c5:33:44:3d:a0:f8:ed:
         ab:98:52:11:80:93:09:37:27:4f:16:e6:97:0e:b2:5b:2f:17:
         42:26:fd:05:e5:65:76:cb:27:89:8d:3f:2d:bf:78:3b:7d:20:
         0f:fb:ac:75:ad:25:d4:6e:3c:c6:60:e1:14:24:1d:71:e5:3c:
         d5:0c:76:6b:dc:4a:ac:90:8e:ff:d4:ea:95:d7:ae:aa:f5:80:
         53:f2:31:8d:d0:70:dd:65:e3:e0:db:9b:60:91:34:f2:14:fc:
         72:4b:b6:14:76:1a:c3:68:0f:e5:2d:ed:5a:b5:28:de:f9:6d:
         2c:90:a7:c8:0a:43:7b:29:3b:ad:85:5e:78:b9:d5:fd:89:07:
         23:2b:de:81:f6:91:6c:f0:3c:38:75:cd:82:05:6d:a2:7b:45:
         06:52:a2:dc:5b:2a:a0:c1:11:04:b6:fb:36:46:15:5b:56:85:
         79:cd:ea:85:7a:54:a7:d1:b1:c1:e7:c5:2b:1b:0b:49:23:67:
         4f:1a:d7:b9:17:68:e5:58:6e:4d:58:15:3a:be:62:1b:22:2c:
         e6:e2:57:53:78:90:68:02:ec:ff:78:39:0b:c9:4b:ba:0e:b8:
         ec:3e:85:8b:db:49:ae:11:3e:b3:98:c7:e8:fe:3e:46:46:ef:
         9e:c2:04:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRMOsywoCyyOp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
NTUyZmI2ODUtYjcyMC00NGEzLTkzYzctMjU1MGY1YzVlOGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtaXper4NgBqg5CsjJuqNiEQFn7NuKBen3QB
syB9q4K1UjljIQvtSdsXWuLwTnsZzxVyM0PCW0VohvcWjnbukDTypR4wD2dGSiVO
7GPKPomU0/OHYrmuiQVFUy14Xg043GHUW3xYcJWkFimDbFlcQs2TxKD6zSerHqw7
+A3R8xs/8DTl3epiIyYiOMy5H1F2/UxIE0pqLoDneErleq+V6pzNoYdAgtYDaCpm
WABj2TeJWcmVT5wvRqfr1PNG3qzB8xhP+11Z2QsRbHnIOS4JEQaqpczFrFjM/pzY
JgBktigiXho/AngPba7XiMMSgSHPMY0OPLXQUOc9YrucmyNXHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9GsEnSygKMu5n+VWF3No91RJ2oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMGUxNzQ4NDQtOGQzMC0z
NDllLTg3YjAtOTRkMjU0M2VhMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbesMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcyjVfKdqoAwN4HxTNEPaD47auYUhGAkwk3J08W5pcOslsvF0Im/QXl
ZXbLJ4mNPy2/eDt9IA/7rHWtJdRuPMZg4RQkHXHlPNUMdmvcSqyQjv/U6pXXrqr1
gFPyMY3QcN1l4+Dbm2CRNPIU/HJLthR2GsNoD+Ut7Vq1KN75bSyQp8gKQ3spO62F
Xni51f2JByMr3oH2kWzwPDh1zYIFbaJ7RQZSotxbKqDBEQS2+zZGFVtWhXnN6oV6
VKfRscHnxSsbC0kjZ08a17kXaOVYbk1YFTq+YhsiLObiV1N4kGgC7P94OQvJS7oO
uOw+hYvbSa4RPrOYx+j+PkZG757CBHY=
-----END CERTIFICATE-----
Generated at Sun Jun 1 16:52:25 2025 by rpki-client