Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fb887e45-d37c-3171-9040-4309e8f0fd8b.roa
File:                     fb887e45-d37c-3171-9040-4309e8f0fd8b.roa (raw, json)
Hash identifier:          D/29EtrVjIch8wVIq1PUFilRswSYvs1WV/5JAccQNtk=
Subject key identifier:   CC:62:E4:77:26:51:BA:49:A9:FD:48:AE:F5:BB:D3:07:0F:3F:C9:C2
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285848EC9698147C13B75B1632A600
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fb887e45-d37c-3171-9040-4309e8f0fd8b.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        129.41.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:98:14:7c:13:b7:5b:16:32:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=ce5d6f03-761f-4875-9972-679ac3a12463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:ca:ad:bf:42:86:0f:ff:10:f1:87:df:24:
                    b2:8e:c4:1d:16:55:69:d9:7f:fb:be:75:51:c8:2a:
                    ef:2d:0c:48:e2:ce:90:50:9d:ff:54:01:a6:04:c8:
                    a5:0c:32:14:15:27:63:24:df:a7:5e:9f:3e:24:8a:
                    3e:96:4b:52:57:d2:44:9f:ea:29:cd:e8:d9:bd:80:
                    0f:56:3b:5a:56:5f:97:21:e3:6a:82:2b:e1:38:05:
                    cf:e6:ff:1b:88:29:62:4b:6e:62:bb:2c:df:05:0c:
                    d8:0c:61:a8:a5:da:eb:0a:92:a5:0f:fa:eb:35:de:
                    6e:c1:75:7e:37:5d:ec:ca:a4:36:6d:37:87:ac:a8:
                    56:ec:ab:f6:69:00:ce:98:74:52:d4:4e:6f:07:83:
                    ee:17:83:34:36:4d:83:ad:84:d8:6c:b3:1c:41:35:
                    32:2b:a1:ad:c4:ff:80:88:73:2b:44:27:39:5f:e9:
                    6a:91:38:ae:3e:f0:45:f6:7d:49:7f:5f:1f:93:15:
                    f4:0f:bd:58:44:c3:c7:4b:3e:06:33:9b:f9:15:0b:
                    58:e3:c4:18:74:e9:00:91:f7:17:3a:01:9a:04:18:
                    d1:1f:5f:0f:49:5e:b4:24:b2:14:e4:3c:fa:fe:55:
                    48:77:63:88:ef:6c:d7:1d:a0:4c:9d:1a:4a:83:6c:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:62:E4:77:26:51:BA:49:A9:FD:48:AE:F5:BB:D3:07:0F:3F:C9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/fb887e45-d37c-3171-9040-4309e8f0fd8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:32:f1:e1:dd:e4:44:34:4d:4d:de:b0:98:3e:56:05:45:f3:
         61:04:36:f4:21:9f:c4:10:88:2e:d0:45:30:6f:67:cd:8b:5f:
         f0:d1:bf:7e:4f:33:26:64:a0:e6:85:27:d5:20:0d:d4:3b:0b:
         df:96:eb:2a:93:61:c5:50:11:e7:67:b9:6d:ed:3a:db:07:fe:
         ea:2d:36:10:1c:fd:e1:54:33:94:ee:e6:54:15:27:1e:a5:58:
         80:a0:c4:11:52:0c:d5:12:27:49:eb:e8:d1:70:0f:9e:ba:1f:
         dd:15:34:6d:df:c1:15:c8:15:68:c3:02:e3:bb:a0:8f:3d:69:
         89:0a:14:50:33:58:9c:92:1c:f5:0a:f1:e0:c5:ca:23:a6:2d:
         91:32:4c:d3:28:84:40:cd:72:2d:b2:83:39:bf:78:57:2f:4a:
         d3:87:c2:ec:67:b4:84:6e:f2:90:a7:d8:5c:67:de:a4:01:47:
         ee:a6:45:15:78:4f:54:2d:0c:ab:fa:6b:51:2a:c8:2e:9d:18:
         de:00:fc:f3:9a:8c:d1:67:9a:bc:2a:a7:51:df:dd:c0:b7:55:
         af:d2:12:87:46:e3:f8:34:bb:19:11:2b:b6:36:8a:84:c5:9f:
         c8:7a:ea:59:ee:18:2a:c0:e5:2e:11:b3:35:b7:67:2b:12:62:
         84:1d:c8:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpgUfBO3WxYypgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
Y2U1ZDZmMDMtNzYxZi00ODc1LTk5NzItNjc5YWMzYTEyNDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GTKrb9Chg//EPGH3ySyjsQdFlVp2X/7vnVR
yCrvLQxI4s6QUJ3/VAGmBMilDDIUFSdjJN+nXp8+JIo+lktSV9JEn+opzejZvYAP
VjtaVl+XIeNqgivhOAXP5v8biCliS25iuyzfBQzYDGGopdrrCpKlD/rrNd5uwXV+
N13syqQ2bTeHrKhW7Kv2aQDOmHRS1E5vB4PuF4M0Nk2DrYTYbLMcQTUyK6GtxP+A
iHMrRCc5X+lqkTiuPvBF9n1Jf18fkxX0D71YRMPHSz4GM5v5FQtY48QYdOkAkfcX
OgGaBBjRH18PSV60JLIU5Dz6/lVId2OI72zXHaBMnRpKg2wVRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxi5HcmUbpJqf1IrvW70wcPP8nCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZmI4ODdlNDUtZDM3Yy0z
MTcxLTkwNDAtNDMwOWU4ZjBmZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSlMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwy8eHd5EQ0TU3esJg+VgVF82EENvQhn8QQiC7QRTBvZ82LX/DRv35P
MyZkoOaFJ9UgDdQ7C9+W6yqTYcVQEednuW3tOtsH/uotNhAc/eFUM5Tu5lQVJx6l
WICgxBFSDNUSJ0nr6NFwD566H90VNG3fwRXIFWjDAuO7oI89aYkKFFAzWJySHPUK
8eDFyiOmLZEyTNMohEDNci2ygzm/eFcvStOHwuxntIRu8pCn2Fxn3qQBR+6mRRV4
T1QtDKv6a1EqyC6dGN4A/POajNFnmrwqp1Hf3cC3Va/SEodG4/g0uxkRK7Y2ioTF
n8h66lnuGCrA5S4RszW3ZysSYoQdyOQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:32 2025 by rpki-client