Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/03e55ac8-e38d-393f-8076-f57b1137bddd.roa
File:                     03e55ac8-e38d-393f-8076-f57b1137bddd.roa (raw, json)
Hash identifier:          3Uc/wacm34m3aihyauiXtzCCp2FB0149QJJlbag2S0c=
Subject key identifier:   21:07:E9:51:67:9B:AE:ED:D7:A7:C6:A0:19:C5:1C:6A:A2:4B:F7:3A
Certificate issuer:       /CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
Certificate serial:       010D0C9F43285849C0A4E01E89A41A73BF512800
Authority key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/03e55ac8-e38d-393f-8076-f57b1137bddd.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     41690
IP address blocks:        198.54.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e0:1e:89:a4:1a:73:bf:51:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=04741a56-c1a3-4b0a-be1f-a12038cdfa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:ef:f5:d2:03:52:2c:d5:ff:c7:6f:cf:19:
                    13:05:ed:06:fe:3e:6d:47:ea:f4:15:82:58:18:b7:
                    23:c6:38:09:64:14:b8:ae:15:2f:96:a5:84:ba:82:
                    cf:f3:0d:84:a9:e4:7f:89:86:58:f1:56:00:dc:2a:
                    17:5d:3e:b1:92:d3:86:a0:c2:ad:3f:88:83:4d:d1:
                    f6:ca:f0:44:72:3f:24:be:31:eb:2f:7f:f8:c5:8a:
                    45:8a:cb:29:89:b7:fe:22:94:8b:8f:70:69:5e:12:
                    fb:d1:00:2b:f6:3a:be:8a:c5:fb:91:ee:b2:35:c2:
                    1b:b5:f7:72:b8:7d:c5:cf:73:fa:65:a8:00:4b:ed:
                    f8:e4:22:38:b9:fd:ec:52:7d:83:ff:e4:a7:8e:f1:
                    89:d4:4f:f0:d9:ac:62:1c:27:58:d1:7c:82:20:a1:
                    3d:11:60:a3:3e:b9:60:2a:65:79:79:40:75:c7:68:
                    bc:ed:d6:fd:28:bf:df:45:37:7c:bf:c5:af:d5:7b:
                    a8:51:fc:68:df:d9:9f:11:8c:5c:66:10:c7:7b:dc:
                    82:9c:29:f9:f7:4f:88:83:04:02:28:ec:72:e7:b2:
                    34:f4:d2:bb:b9:31:e1:3f:90:53:80:50:27:c7:68:
                    e7:0e:05:4d:d5:3c:25:96:08:35:a8:9c:35:04:ee:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:07:E9:51:67:9B:AE:ED:D7:A7:C6:A0:19:C5:1C:6A:A2:4B:F7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/03e55ac8-e38d-393f-8076-f57b1137bddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl

            X509v3 Authority Key Identifier:
                keyid:88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.54.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e4:5c:7a:3e:33:50:ca:93:40:64:d0:e7:fd:45:60:0d:1e:
         36:fe:a6:84:d0:49:d8:48:04:3e:f8:02:61:3b:58:b5:d3:7a:
         cb:ef:1e:a4:ff:7a:31:a6:de:43:fd:07:14:43:97:b8:97:91:
         64:ae:fc:30:8b:a9:fd:fe:7e:72:00:5b:c0:29:dc:02:2e:bb:
         68:07:65:6f:ea:d1:b0:93:75:78:b4:f3:0d:4a:28:a0:07:da:
         47:3a:80:01:8d:81:34:e3:43:8b:c5:e9:c0:45:a4:5f:47:ed:
         12:e9:9b:ca:ae:57:e9:f9:8c:5b:8b:c3:ca:ac:8a:c7:ff:93:
         d1:dd:2e:6c:cb:86:57:ff:a4:dd:cd:c8:70:d8:d7:00:60:ef:
         9b:34:85:8c:4d:06:21:a2:87:59:28:cd:0b:c1:0a:c3:df:de:
         cb:03:5d:b7:96:d6:ee:6d:ce:3b:94:45:05:93:44:c2:13:bc:
         e4:9d:2d:1f:e3:3d:4f:99:00:93:73:1f:2e:74:fb:6d:9c:f4:
         39:4c:df:89:76:f8:5d:4e:65:64:f1:ca:3b:02:c5:e5:0d:db:
         9f:7b:da:ce:37:43:8f:9f:da:6b:7e:04:b3:e4:07:62:97:d2:
         6b:e3:d0:b9:fc:77:a0:d9:e7:6a:79:6f:0a:5b:3e:2f:90:44:
         c4:46:f1:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOAeiaQac79RKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJlOWMyNmQtYWRmYS00M2MzLWFhZmQtZDZjMjg2MDY1
Yjc3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
MDQ3NDFhNTYtYzFhMy00YjBhLWJlMWYtYTEyMDM4Y2RmYTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+rv9dIDUizV/8dvzxkTBe0G/j5tR+r0FYJY
GLcjxjgJZBS4rhUvlqWEuoLP8w2EqeR/iYZY8VYA3CoXXT6xktOGoMKtP4iDTdH2
yvBEcj8kvjHrL3/4xYpFisspibf+IpSLj3BpXhL70QAr9jq+isX7ke6yNcIbtfdy
uH3Fz3P6ZagAS+345CI4uf3sUn2D/+SnjvGJ1E/w2axiHCdY0XyCIKE9EWCjPrlg
KmV5eUB1x2i87db9KL/fRTd8v8Wv1XuoUfxo39mfEYxcZhDHe9yCnCn590+IgwQC
KOxy57I09NK7uTHhP5BTgFAnx2jnDgVN1Twllgg1qJw1BO7oRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEH6VFnm67t16fGoBnFHGqiS/c6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lYmU5
YzI2ZC1hZGZhLTQzYzMtYWFmZC1kNmMyODYwNjViNzcvMDNlNTVhYzgtZTM4ZC0z
OTNmLTgwNzYtZjU3YjExMzdiZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWJlOWMyNmQtYWRmYS00M2MzLWFh
ZmQtZDZjMjg2MDY1Yjc3L2ViZTljMjZkLWFkZmEtNDNjMy1hYWZkLWQ2YzI4NjA2
NWI3Ny5jcmwwHwYDVR0jBBgwFoAUiF/huxd3ZniYzBASDQoHisgQDHowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lYmU5YzI2ZC1hZGZhLTQzYzMtYWFmZC1kNmMy
ODYwNjViNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxjbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXkXHo+M1DKk0Bk0Of9RWANHjb+poTQSdhIBD74AmE7WLXTesvvHqT/
ejGm3kP9BxRDl7iXkWSu/DCLqf3+fnIAW8Ap3AIuu2gHZW/q0bCTdXi08w1KKKAH
2kc6gAGNgTTjQ4vF6cBFpF9H7RLpm8quV+n5jFuLw8qsisf/k9HdLmzLhlf/pN3N
yHDY1wBg75s0hYxNBiGih1kozQvBCsPf3ssDXbeW1u5tzjuURQWTRMITvOSdLR/j
PU+ZAJNzHy50+22c9DlM34l2+F1OZWTxyjsCxeUN25972s43Q4+f2mt+BLPkB2KX
0mvj0Ln8d6DZ52p5bwpbPi+QRMRG8eo=
-----END CERTIFICATE-----
Generated at Tue May 6 11:00:10 2025 by rpki-client