Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/180af376-56da-3f2b-9078-809988831f09.roa
File:                     180af376-56da-3f2b-9078-809988831f09.roa (raw, json)
Hash identifier:          43haSkxoN/Q54kkPXOXONem2e+esi9WRmqpcz6ET2Y0=
Subject key identifier:   A9:32:20:52:EA:03:46:2B:B0:7D:CE:A3:1A:69:99:23:C1:48:BE:E3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849AF751BCC6436C9DF10F5D000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/180af376-56da-3f2b-9078-809988831f09.roa
Signing time:             Tue 29 Apr 2025 09:16:15 +0000
ROA not before:           Tue 29 Apr 2025 09:16:15 +0000
ROA not after:            Mon 28 Jul 2025 09:16:15 +0000
asID:                     30036
IP address blocks:        107.167.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:75:1b:cc:64:36:c9:df:10:f5:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 29 09:16:15 2025 GMT
            Not After : Jul 28 09:16:15 2025 GMT
        Subject: CN=294cb62b-88c5-4ecd-9a5b-d67a1451aae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:73:fa:89:2a:d9:90:12:4a:32:d0:75:90:
                    f3:dd:01:0d:8a:ee:d2:a1:0f:8f:e0:8b:91:d6:fd:
                    13:e9:a7:b8:b1:a8:96:87:80:d6:0b:c1:36:92:fe:
                    5b:fd:34:c7:50:06:64:d5:39:b0:43:7e:fe:6b:9d:
                    32:da:b5:72:ae:5a:eb:8a:c7:6d:39:d3:48:c6:20:
                    cb:fb:f0:e8:7b:ff:80:3a:6b:e2:60:94:f4:29:01:
                    f4:50:52:12:6e:e8:7f:99:53:e5:95:20:e8:d9:4d:
                    1d:bd:0f:e0:3b:b6:c6:77:8f:a0:1e:22:ca:ef:c6:
                    0b:9a:8a:6d:75:d2:06:24:e2:07:e7:7c:c1:da:ef:
                    a6:ee:a9:f3:c9:2d:e0:36:db:26:15:6a:6f:bc:57:
                    1b:bc:af:06:e6:8c:ec:6f:5e:d2:72:68:9a:0c:9c:
                    36:05:f7:76:29:9a:1f:96:02:2a:32:f8:c2:9d:9e:
                    89:23:4e:a7:4e:a9:4b:ac:9f:13:d0:57:12:14:38:
                    3f:3b:8f:e1:34:ec:3b:16:b8:b8:89:8e:bd:2b:34:
                    79:77:a6:11:67:48:38:c5:b8:c6:a9:c2:31:39:da:
                    d9:23:28:73:d7:ed:d9:37:24:12:03:03:61:a8:89:
                    09:f8:0d:fd:81:5e:95:8e:45:df:c3:eb:fa:59:8f:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:32:20:52:EA:03:46:2B:B0:7D:CE:A3:1A:69:99:23:C1:48:BE:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/180af376-56da-3f2b-9078-809988831f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:52:6a:5c:73:24:5f:27:60:d3:7d:06:75:fa:7f:cb:ee:
         17:90:1d:7f:ad:4d:25:9e:dc:f1:04:37:46:a2:81:12:81:ba:
         54:d1:0f:f4:7f:38:2b:78:e1:dc:b4:99:37:2f:05:c5:8c:9b:
         bd:86:c4:b8:22:21:38:46:49:d8:95:85:51:e7:07:fd:a2:ce:
         e1:ca:07:2f:a8:fb:65:5c:c8:36:cb:b9:b8:ae:57:94:29:dc:
         24:aa:54:7a:5e:21:df:7f:2e:e4:e2:ba:78:05:d9:fa:2f:29:
         c0:dd:96:98:e0:97:f1:28:1f:66:06:d0:4b:60:cb:71:92:a0:
         ba:01:05:40:84:e0:89:05:0c:50:24:d1:7a:e5:77:b4:e5:f6:
         d3:da:f1:9e:ff:60:f7:c0:f8:d4:cc:b2:a7:7a:1f:26:36:56:
         ba:a2:65:c8:3a:45:aa:21:ec:b1:48:68:ba:dc:e2:3b:04:b6:
         13:88:3f:a3:c7:8b:1e:40:7b:2b:6e:76:5e:c7:a7:84:c8:15:
         58:4a:38:1a:8f:f7:bb:71:d7:56:49:4a:aa:c4:c5:87:ee:4b:
         78:91:64:b3:0e:be:0c:03:c7:76:44:fd:eb:ec:c6:04:8c:9c:
         54:14:a3:21:ac:df:02:2f:7f:30:29:d1:00:75:95:5c:41:f1:
         73:25:fc:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvdRvMZDbJ3xD10AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyOTA5MTYxNVoXDTI1MDcyODA5MTYxNVowLzEtMCsGA1UEAxMk
Mjk0Y2I2MmItODhjNS00ZWNkLTlhNWItZDY3YTE0NTFhYWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPVz+okq2ZASSjLQdZDz3QENiu7SoQ+P4IuR
1v0T6ae4saiWh4DWC8E2kv5b/TTHUAZk1TmwQ37+a50y2rVyrlrrisdtOdNIxiDL
+/Doe/+AOmviYJT0KQH0UFISbuh/mVPllSDo2U0dvQ/gO7bGd4+gHiLK78YLmopt
ddIGJOIH53zB2u+m7qnzyS3gNtsmFWpvvFcbvK8G5ozsb17ScmiaDJw2Bfd2KZof
lgIqMvjCnZ6JI06nTqlLrJ8T0FcSFDg/O4/hNOw7Fri4iY69KzR5d6YRZ0g4xbjG
qcIxOdrZIyhz1+3ZNyQSAwNhqIkJ+A39gV6VjkXfw+v6WY/jFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkyIFLqA0YrsH3OoxppmSPBSL7jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTgwYWYzNzYtNTZkYS0z
ZjJiLTkwNzgtODA5OTg4ODMxZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFa6fAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJu3UmpccyRfJ2DTfQZ1+n/L7heQHX+tTSWe3PEEN0aigRKBulTRD/R/
OCt44dy0mTcvBcWMm72GxLgiIThGSdiVhVHnB/2izuHKBy+o+2VcyDbLubiuV5Qp
3CSqVHpeId9/LuTiungF2fovKcDdlpjgl/EoH2YG0Etgy3GSoLoBBUCE4IkFDFAk
0Xrld7Tl9tPa8Z7/YPfA+NTMsqd6HyY2VrqiZcg6Raoh7LFIaLrc4jsEthOIP6PH
ix5Aeytudl7Hp4TIFVhKOBqP97tx11ZJSqrExYfuS3iRZLMOvgwDx3ZE/evsxgSM
nFQUoyGs3wIvfzAp0QB1lVxB8XMl/J0=
-----END CERTIFICATE-----
Generated at Thu May 15 08:50:28 2025 by rpki-client