Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa
File:                     2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa (raw, json)
Hash identifier:          UkVF+e4iZb3XWRikZXXZzSAyH+645AAWB80D1CGGalM=
Subject key identifier:   A2:36:DE:12:8A:A2:02:FB:20:C1:F0:CF:A8:B6:E3:13:98:3A:E9:45
Certificate issuer:       /CN=9b13d137-bc85-4935-b740-e59f0078def5
Certificate serial:       010D0C9F43285849C904F539D2856E4399A1BA80
Authority key identifier: E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     40443
IP address blocks:        198.133.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f5:39:d2:85:6e:43:99:a1:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b13d137-bc85-4935-b740-e59f0078def5
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=15b86abf-5f9c-420e-834e-fc0381e3ffca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:0b:c1:2c:7e:4a:eb:68:0c:70:15:43:e7:
                    74:ff:fa:9a:a3:c5:32:b1:7d:1c:d1:af:3f:7f:af:
                    5a:9a:c9:7a:2f:2b:9b:38:45:5b:ef:10:93:eb:92:
                    31:4d:ad:9b:c4:7f:8f:2d:39:34:d9:32:1d:7a:8a:
                    d5:83:10:d2:c1:f7:67:b2:50:98:0e:ed:a3:69:e6:
                    ca:28:f9:f3:8c:c2:61:7b:2e:ba:7b:7b:26:cb:b9:
                    55:d9:25:eb:93:3f:d3:33:06:d2:5f:32:7b:5e:48:
                    d0:97:53:0e:40:d1:37:ab:51:0f:4b:5d:f9:d1:26:
                    e9:a6:6f:72:ec:96:b0:11:b7:05:fb:70:de:00:7f:
                    b8:c3:51:d3:45:fd:2b:5d:3e:c1:38:2f:3d:5c:e8:
                    60:00:33:5e:8b:eb:a4:78:9c:3e:e1:09:cc:c9:22:
                    77:c2:38:d1:25:48:52:27:2c:ac:b3:c0:7d:5b:db:
                    16:39:33:16:30:e2:ce:92:88:f4:3e:66:ab:dc:7d:
                    24:97:4e:ad:e3:7a:33:bf:12:8c:b2:16:95:eb:dc:
                    fb:a7:97:09:73:e4:67:53:96:eb:51:d1:91:06:50:
                    c8:01:5e:e5:32:81:6e:78:c4:00:e4:eb:55:dc:30:
                    b5:54:49:01:28:c5:0a:80:c0:81:28:54:3c:91:06:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:DE:12:8A:A2:02:FB:20:C1:F0:CF:A8:B6:E3:13:98:3A:E9:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl

            X509v3 Authority Key Identifier:
                keyid:E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:ba:46:6b:80:d8:aa:ec:42:7d:3b:d2:6e:63:0a:b8:15:
         07:81:54:14:fd:1b:75:04:4a:6a:78:54:ed:fa:bb:6d:76:38:
         0f:7b:40:18:d6:19:47:85:bd:11:e8:15:bd:04:c3:bc:77:8f:
         e0:cc:3c:95:2f:c8:d2:0a:b9:c9:86:b2:86:43:19:a1:57:6e:
         35:01:14:80:68:a7:16:31:d3:a4:33:e7:05:95:45:57:5d:c2:
         15:d1:91:e7:3f:2c:78:bd:96:9f:46:6e:32:51:f8:4b:a4:0d:
         a8:62:56:e9:7b:45:f8:30:96:5d:0b:a6:e1:12:58:6a:e4:2a:
         90:98:7f:f0:16:71:53:98:35:1e:ac:2c:5f:90:ef:89:87:2b:
         e5:19:bc:01:2b:c6:ce:ba:67:57:9a:2b:e5:e2:72:f1:bb:65:
         4c:05:9d:da:53:69:22:08:23:a0:f5:65:c6:6f:fc:cd:8a:4c:
         83:80:8b:97:67:c6:50:06:bb:99:45:35:8b:ef:89:16:ad:2c:
         8a:9f:9d:72:7b:5a:f7:05:21:83:3f:cb:8b:e5:f3:89:c6:65:
         66:b9:9f:86:72:b9:7b:75:f1:c7:7d:cf:a4:e9:77:0d:33:a1:
         83:e3:86:4f:8b:51:e2:5a:c9:dc:82:6e:bc:6a:75:0e:e2:23:
         a2:c8:86:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPU50oVuQ5mhuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIxM2QxMzctYmM4NS00OTM1LWI3NDAtZTU5ZjAwNzhk
ZWY1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
MTViODZhYmYtNWY5Yy00MjBlLTgzNGUtZmMwMzgxZTNmZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TcLwSx+SutoDHAVQ+d0//qao8UysX0c0a8/
f69amsl6LyubOEVb7xCT65IxTa2bxH+PLTk02TIdeorVgxDSwfdnslCYDu2jaebK
KPnzjMJhey66e3smy7lV2SXrkz/TMwbSXzJ7XkjQl1MOQNE3q1EPS1350Sbppm9y
7JawEbcF+3DeAH+4w1HTRf0rXT7BOC89XOhgADNei+ukeJw+4QnMySJ3wjjRJUhS
Jyyss8B9W9sWOTMWMOLOkoj0Pmar3H0kl06t43ozvxKMshaV69z7p5cJc+RnU5br
UdGRBlDIAV7lMoFueMQA5OtV3DC1VEkBKMUKgMCBKFQ8kQbsqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKI23hKKogL7IMHwz6i24xOYOulFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjEz
ZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlmMDA3OGRlZjUvMmI0ZGM1YTktZDIzOS0z
ZjQ0LTgzYmMtOTA2NmE1MTk0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWIxM2QxMzctYmM4NS00OTM1LWI3
NDAtZTU5ZjAwNzhkZWY1LzliMTNkMTM3LWJjODUtNDkzNS1iNzQwLWU1OWYwMDc4
ZGVmNS5jcmwwHwYDVR0jBBgwFoAU4NQR1rs6X3q3iAaKYkcCM+IWTlUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjEzZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlm
MDA3OGRlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsNukZrgNiq7EJ9O9JuYwq4FQeBVBT9G3UESmp4VO36u212OA97QBjW
GUeFvRHoFb0Ew7x3j+DMPJUvyNIKucmGsoZDGaFXbjUBFIBopxYx06Qz5wWVRVdd
whXRkec/LHi9lp9GbjJR+EukDahiVul7Rfgwll0LpuESWGrkKpCYf/AWcVOYNR6s
LF+Q74mHK+UZvAErxs66Z1eaK+XicvG7ZUwFndpTaSIII6D1ZcZv/M2KTIOAi5dn
xlAGu5lFNYvviRatLIqfnXJ7WvcFIYM/y4vl84nGZWa5n4ZyuXt18cd9z6Tpdw0z
oYPjhk+LUeJaydyCbrxqdQ7iI6LIhm8=
-----END CERTIFICATE-----
Generated at Tue May 13 01:22:04 2025 by rpki-client