Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/e0b7f0f7-6f94-3ad1-8f3c-2cfd2dd3b619.roa
File:                     e0b7f0f7-6f94-3ad1-8f3c-2cfd2dd3b619.roa (raw, json)
Hash identifier:          QIK11pF8E0vwWASke/p8xdmrncnWTx0RYorjFZViDPE=
Subject key identifier:   60:25:AC:62:08:A2:09:7F:2F:83:41:A7:33:07:21:90:6A:51:E5:15
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F432858498CFF16F758385D8294634880
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/e0b7f0f7-6f94-3ad1-8f3c-2cfd2dd3b619.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     10497
IP address blocks:        192.86.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:16:f7:58:38:5d:82:94:63:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=0479f8f2-9e7c-4b6c-8928-b848accaacc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:42:30:6d:6d:68:61:23:d3:59:9a:e2:b6:
                    19:d2:ac:48:75:aa:8b:6c:a5:57:4f:44:70:8d:8b:
                    14:61:8b:ae:22:eb:03:41:6d:a0:6d:36:9b:ff:27:
                    ce:ba:1d:c5:76:95:3c:a4:bd:94:a9:32:fd:cf:e8:
                    82:cc:4d:f0:a2:d8:8b:a4:12:9d:ca:73:0c:ce:b4:
                    87:a4:10:25:a4:25:d2:4b:d5:53:da:97:23:66:47:
                    96:ee:ef:6a:66:e1:f3:b3:9c:ca:b4:4f:2f:6a:bc:
                    d5:4f:56:3e:ab:37:28:df:54:06:19:ca:1b:2d:54:
                    ca:85:b7:a0:27:04:69:38:c9:dd:ae:c0:13:8b:23:
                    d5:0d:89:85:79:11:63:04:af:a7:a2:66:36:6f:dd:
                    9b:51:87:69:ac:81:35:4c:2a:4a:77:b1:65:3f:cc:
                    be:06:03:dc:32:8f:8b:39:a2:89:da:45:20:d4:9f:
                    58:52:6e:cb:2a:a4:ac:c7:4d:9a:5a:4d:33:c5:c5:
                    7b:46:54:58:d0:a4:9e:18:df:35:38:b8:c0:74:35:
                    66:43:f0:cb:43:e3:82:06:50:7c:bd:0e:8b:04:f0:
                    c4:9a:08:fb:0d:68:65:37:08:34:1f:34:bc:f0:d1:
                    54:a1:02:f4:e2:f3:bc:70:84:e9:a1:15:d7:cc:73:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:25:AC:62:08:A2:09:7F:2F:83:41:A7:33:07:21:90:6A:51:E5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/e0b7f0f7-6f94-3ad1-8f3c-2cfd2dd3b619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:53:0a:0e:cc:63:70:02:a1:8f:f2:d3:9a:43:45:5e:49:cb:
         90:a0:fd:ce:7b:fa:4e:5a:60:2d:01:2c:4e:f2:54:4e:a5:d9:
         c3:79:0b:8b:80:58:d3:f2:4b:59:e9:23:7d:36:00:22:ac:84:
         5d:9f:57:05:13:8c:0b:5e:2d:35:f3:d8:40:cd:a5:17:3a:15:
         a5:ee:56:71:85:4c:fa:2f:2a:26:ae:79:ed:7e:78:c6:42:5e:
         75:65:c6:30:90:3f:62:b1:8b:16:b0:69:0a:00:f5:e7:6f:05:
         04:df:1f:2a:56:ae:54:bf:3e:b0:32:de:85:12:b6:dd:36:ee:
         b0:d0:66:38:34:1a:23:2c:1b:1c:01:94:24:e4:df:d6:54:2a:
         35:45:5a:7f:99:28:98:8c:c2:4e:fe:3a:9f:ca:a7:03:bd:2d:
         30:0d:7c:f2:a2:52:4c:e8:b2:32:f6:16:fd:ad:31:f7:b1:d1:
         6d:aa:ca:4f:26:10:6a:f9:60:32:a3:84:cb:e5:ac:ea:ae:e9:
         0a:af:94:06:fd:60:c3:31:a3:b6:37:9e:37:cd:bb:61:c2:49:
         59:08:69:8b:39:c2:9c:4b:01:76:97:a4:f9:8b:2d:dd:2b:ca:
         1a:5b:ea:ad:c1:80:1b:98:4a:8c:69:df:37:31:96:58:ec:96:
         5c:34:3f:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xb3WDhdgpRjSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk
Y2RjMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
MDQ3OWY4ZjItOWU3Yy00YjZjLTg5MjgtYjg0OGFjY2FhY2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2pCMG1taGEj01ma4rYZ0qxIdaqLbKVXT0Rw
jYsUYYuuIusDQW2gbTab/yfOuh3FdpU8pL2UqTL9z+iCzE3wotiLpBKdynMMzrSH
pBAlpCXSS9VT2pcjZkeW7u9qZuHzs5zKtE8varzVT1Y+qzco31QGGcobLVTKhbeg
JwRpOMndrsATiyPVDYmFeRFjBK+nomY2b92bUYdprIE1TCpKd7FlP8y+BgPcMo+L
OaKJ2kUg1J9YUm7LKqSsx02aWk0zxcV7RlRY0KSeGN81OLjAdDVmQ/DLQ+OCBlB8
vQ6LBPDEmgj7DWhlNwg0HzS88NFUoQL04vO8cITpoRXXzHMFxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAlrGIIogl/L4NBpzMHIZBqUeUVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz
NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvZTBiN2YwZjctNmY5NC0z
YWQxLThmM2MtMmNmZDJkZDNiNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm
OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz
ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1
MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFZmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNTCg7MY3ACoY/y05pDRV5Jy5Cg/c57+k5aYC0BLE7yVE6l2cN5C4uA
WNPyS1npI302ACKshF2fVwUTjAteLTXz2EDNpRc6FaXuVnGFTPovKiauee1+eMZC
XnVlxjCQP2KxixawaQoA9edvBQTfHypWrlS/PrAy3oUStt027rDQZjg0GiMsGxwB
lCTk39ZUKjVFWn+ZKJiMwk7+Op/KpwO9LTANfPKiUkzosjL2Fv2tMfex0W2qyk8m
EGr5YDKjhMvlrOqu6QqvlAb9YMMxo7Y3njfNu2HCSVkIaYs5wpxLAXaXpPmLLd0r
yhpb6q3BgBuYSoxp3zcxlljsllw0P/4=
-----END CERTIFICATE-----
Generated at Fri May 9 08:36:36 2025 by rpki-client