Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa
File:                     b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa (raw, json)
Hash identifier:          WhUaGCovEEIVjP3E+sR8WRjuMKqHRPcqCKap9Gpit9w=
Subject key identifier:   6F:72:8D:D6:A5:4A:1A:41:F1:0A:7A:98:01:E3:24:BA:10:04:D4:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C95445031C225CFBA12C3F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa
Signing time:             Thu 08 May 2025 15:41:06 +0000
ROA not before:           Thu 08 May 2025 15:41:06 +0000
ROA not after:            Wed 06 Aug 2025 15:41:06 +0000
asID:                     397205
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:45:03:1c:22:5c:fb:a1:2c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:06 2025 GMT
            Not After : Aug  6 15:41:06 2025 GMT
        Subject: CN=da0ce15a-25bd-4e5d-bc70-0934d3766eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:c4:a2:f7:29:67:6d:17:2c:ee:81:cd:8c:
                    55:86:94:1c:4f:5c:32:ff:0a:16:32:c4:fe:5e:63:
                    86:29:3e:56:97:34:60:27:fa:fc:b9:58:d8:28:09:
                    79:9e:d5:55:d4:43:9b:c4:92:d1:d9:3f:82:03:2a:
                    39:bb:0d:7a:4c:e6:8f:b7:1b:8d:64:b9:5e:ac:d1:
                    16:14:ec:16:40:9a:f1:a0:7b:7a:8c:f9:03:05:77:
                    11:c0:4e:c2:c3:18:29:89:8a:d7:95:84:c7:6c:60:
                    98:88:75:7a:a9:81:87:ed:e5:34:06:ae:d1:fc:0f:
                    7c:9a:07:74:23:8a:fb:21:1b:73:d5:a3:a7:46:a4:
                    8b:61:ec:32:b2:77:9f:ff:ba:98:2a:a0:a1:14:54:
                    5d:9f:d5:4c:bd:ed:c6:9b:cb:94:13:83:9e:0e:97:
                    de:68:01:ce:76:ac:5e:79:e1:d7:01:c4:92:a6:c9:
                    3e:41:44:29:ac:78:0b:81:c8:ac:da:ac:34:17:82:
                    5d:27:c0:0f:c8:46:4c:e7:07:53:34:11:67:76:28:
                    2d:b9:31:b5:ed:a7:79:d7:6e:c4:a7:8f:ab:0a:15:
                    5a:60:12:ea:e4:7c:d4:45:ae:54:2e:f4:fd:74:93:
                    4c:80:6a:a8:59:de:91:f0:cd:37:2d:aa:d9:ac:45:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:8D:D6:A5:4A:1A:41:F1:0A:7A:98:01:E3:24:BA:10:04:D4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b40fb3c4-5bbd-3165-accd-9e1cde45c85c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:04:5a:60:8c:80:00:8c:89:a3:f9:95:d6:6b:15:20:9a:c3:
         9a:af:23:1c:68:22:75:de:70:b3:70:1d:c1:a9:cc:dc:b4:0e:
         43:2c:eb:ef:f1:f6:8a:d8:21:bd:ef:9e:c9:9e:23:12:c6:4c:
         18:7a:00:79:31:9d:64:4a:4f:3b:54:07:a4:7c:e8:15:de:3c:
         68:d6:35:2b:bc:5b:50:bf:af:d5:cb:d9:31:45:20:cf:13:e5:
         a5:b9:f0:ff:73:df:a5:72:1d:01:fb:ec:ad:4c:85:00:80:7f:
         f9:f6:db:c1:fa:c6:4a:e2:ff:58:4f:be:dd:23:52:54:97:42:
         c9:e3:96:5a:13:61:64:da:ab:81:f7:c7:53:fb:6e:62:86:6c:
         dd:e6:eb:f8:3c:f3:22:93:f8:a8:10:45:e0:25:8e:57:1b:40:
         32:c9:fa:b8:e3:d7:89:3d:28:b6:c9:20:4b:85:e2:11:30:8c:
         7b:90:a2:16:36:fb:93:67:5f:55:96:4b:87:82:ff:bb:20:c6:
         29:c9:61:b9:00:ad:9a:f7:69:d5:74:4d:bf:2c:ec:1e:7e:bc:
         8b:d3:6e:d4:b1:85:ac:9f:bd:e2:36:0e:83:b2:1f:42:4e:04:
         55:c9:1f:dc:75:c5:cb:c0:49:99:0d:a6:d7:f7:9f:7b:b6:2e:
         fb:23:db:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJVEUDHCJc+6EsP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUwODE1NDEwNloXDTI1MDgwNjE1NDEwNlowLzEtMCsGA1UEAxMk
ZGEwY2UxNWEtMjViZC00ZTVkLWJjNzAtMDkzNGQzNzY2ZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0vEovcpZ20XLO6BzYxVhpQcT1wy/woWMsT+
XmOGKT5WlzRgJ/r8uVjYKAl5ntVV1EObxJLR2T+CAyo5uw16TOaPtxuNZLlerNEW
FOwWQJrxoHt6jPkDBXcRwE7CwxgpiYrXlYTHbGCYiHV6qYGH7eU0Bq7R/A98mgd0
I4r7IRtz1aOnRqSLYewysnef/7qYKqChFFRdn9VMve3Gm8uUE4OeDpfeaAHOdqxe
eeHXAcSSpsk+QUQprHgLgcis2qw0F4JdJ8APyEZM5wdTNBFndigtuTG17ad5127E
p4+rChVaYBLq5HzURa5ULvT9dJNMgGqoWd6R8M03LarZrEUtawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9yjdalShpB8Qp6mAHjJLoQBNQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQwZmIzYzQtNWJiZC0z
MTY1LWFjY2QtOWUxY2RlNDVjODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8EWmCMgACMiaP5ldZrFSCaw5qvIxxoInXecLNwHcGpzNy0DkMs6+/x
9orYIb3vnsmeIxLGTBh6AHkxnWRKTztUB6R86BXePGjWNSu8W1C/r9XL2TFFIM8T
5aW58P9z36VyHQH77K1MhQCAf/n228H6xkri/1hPvt0jUlSXQsnjlloTYWTaq4H3
x1P7bmKGbN3m6/g88yKT+KgQReAljlcbQDLJ+rjj14k9KLbJIEuF4hEwjHuQohY2
+5NnX1WWS4eC/7sgxinJYbkArZr3adV0Tb8s7B5+vIvTbtSxhayfveI2DoOyH0JO
BFXJH9x1xcvASZkNptf3n3u2Lvsj24E=
-----END CERTIFICATE-----
Generated at Sun May 11 03:08:09 2025 by rpki-client