Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c543a3f-ff83-32cf-b711-7abee46913d7.roa
File:                     4c543a3f-ff83-32cf-b711-7abee46913d7.roa (raw, json)
Hash identifier:          INe2Q6zuC797teUtWA+0z4MeUKyLKrRFx3U8DdE79BM=
Subject key identifier:   AA:D1:A7:07:6F:46:4D:74:E9:A4:3E:28:4C:38:8A:99:BC:9F:BF:05
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DF5A520169C037FFBDBD7980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c543a3f-ff83-32cf-b711-7abee46913d7.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     30036
IP address blocks:        192.119.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:52:01:69:c0:37:ff:bd:bd:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=c8b36536-2bd2-4682-bddb-8c03c84bd716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:c2:6a:5b:b7:3b:1a:8a:c6:35:b1:44:ce:
                    ca:71:a8:49:0a:46:11:0a:eb:83:e0:5a:12:c8:9c:
                    d0:98:6f:ed:28:cf:21:da:34:8d:aa:c2:76:bc:4d:
                    2b:bc:82:85:24:b9:d2:8c:69:7b:4d:7b:44:5f:c2:
                    06:07:50:67:dc:98:27:53:1d:f9:96:57:22:d2:12:
                    2f:68:bc:6a:35:eb:9a:89:1e:22:57:e9:ed:62:23:
                    b1:aa:b9:87:50:53:0c:ec:a9:81:77:33:c9:62:f7:
                    63:78:14:99:22:82:27:1f:62:8b:b6:36:e6:97:4b:
                    d4:3c:84:45:32:c8:12:b8:16:9f:57:11:6a:6f:56:
                    41:3c:bf:c7:20:0a:4e:7e:3d:db:c2:9f:3d:35:5b:
                    c4:6d:e5:d6:ef:05:d9:d1:97:b3:19:d6:b7:f8:9d:
                    38:de:5d:87:34:6f:7a:10:b2:f3:3a:ce:fc:07:7e:
                    05:aa:4d:67:b4:a0:b0:85:1b:1a:98:4b:b4:be:28:
                    b9:68:ba:20:fe:11:07:44:c7:f2:a6:7f:e1:22:b5:
                    52:95:0a:e7:59:bf:e4:72:28:36:78:5f:df:18:2f:
                    0d:75:db:e4:b8:f7:b2:e5:9e:44:fc:02:0d:1c:1f:
                    09:7b:90:4a:a8:70:27:7d:b0:33:a4:7c:e3:f1:a8:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D1:A7:07:6F:46:4D:74:E9:A4:3E:28:4C:38:8A:99:BC:9F:BF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4c543a3f-ff83-32cf-b711-7abee46913d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ef:74:92:4b:4a:ed:14:62:3c:c0:de:01:39:d7:58:52:57:
         5c:82:84:4e:aa:9a:c2:60:80:98:0c:73:d4:f4:22:0e:81:93:
         1d:6f:f1:3e:74:ba:81:c9:23:ad:25:7e:9b:0d:76:92:f2:c0:
         ea:0a:af:10:4a:f3:8f:97:5b:11:14:77:e7:bf:15:36:18:71:
         69:bd:aa:1f:58:8c:70:0a:54:98:16:ff:53:64:8e:27:11:d8:
         b2:62:84:40:ba:4d:ed:99:8e:1a:4e:d8:47:29:75:57:46:58:
         79:eb:4f:0c:20:93:b8:57:b8:ac:e9:0c:8e:55:d4:59:7c:36:
         d9:99:dc:a8:58:05:55:41:20:4b:80:61:d9:1d:a0:56:7f:15:
         62:a1:66:fd:b7:46:cb:f4:15:cc:73:e3:a3:f9:d3:80:9a:67:
         8c:d2:88:28:a6:99:ba:92:b4:d7:99:cb:1c:a8:6f:17:64:b2:
         7c:b9:1c:37:db:ed:6a:ab:04:ef:5d:53:7d:4e:6e:ec:41:11:
         ad:a5:34:ad:3d:ce:99:27:1b:a0:e9:fc:d2:37:60:44:42:24:
         a9:0d:66:38:78:bd:d5:03:54:83:6e:5d:92:c7:6f:63:2e:67:
         79:16:a1:66:fc:d8:23:b5:ef:ba:ff:7c:c0:6e:29:fd:ea:a0:
         88:e5:63:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWlIBacA3/729eYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
YzhiMzY1MzYtMmJkMi00NjgyLWJkZGItOGMwM2M4NGJkNzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/Calu3OxqKxjWxRM7KcahJCkYRCuuD4FoS
yJzQmG/tKM8h2jSNqsJ2vE0rvIKFJLnSjGl7TXtEX8IGB1Bn3JgnUx35llci0hIv
aLxqNeuaiR4iV+ntYiOxqrmHUFMM7KmBdzPJYvdjeBSZIoInH2KLtjbml0vUPIRF
MsgSuBafVxFqb1ZBPL/HIApOfj3bwp89NVvEbeXW7wXZ0ZezGda3+J043l2HNG96
ELLzOs78B34Fqk1ntKCwhRsamEu0vii5aLog/hEHRMfypn/hIrVSlQrnWb/kcig2
eF/fGC8NddvkuPey5Z5E/AINHB8Je5BKqHAnfbAzpHzj8ajLWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrRpwdvRk106aQ+KEw4ipm8n78FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGM1NDNhM2YtZmY4My0z
MmNmLWI3MTEtN2FiZWU0NjkxM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvvdJJLSu0UYjzA3gE511hSV1yChE6qmsJggJgMc9T0Ig6Bkx1v8T50
uoHJI60lfpsNdpLywOoKrxBK84+XWxEUd+e/FTYYcWm9qh9YjHAKVJgW/1NkjicR
2LJihEC6Te2ZjhpO2EcpdVdGWHnrTwwgk7hXuKzpDI5V1Fl8NtmZ3KhYBVVBIEuA
YdkdoFZ/FWKhZv23Rsv0Fcxz46P504CaZ4zSiCimmbqStNeZyxyobxdksny5HDfb
7WqrBO9dU31ObuxBEa2lNK09zpknG6Dp/NI3YERCJKkNZjh4vdUDVINuXZLHb2Mu
Z3kWoWb82CO177r/fMBuKf3qoIjlY+k=
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:25:47 2025 by rpki-client