Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa
File:                     966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa (raw, json)
Hash identifier:          b6/LO7XP7dvU38PV13P52o1qiRHkgDhX9hiSJZJPXkc=
Subject key identifier:   17:96:35:B8:B4:AF:A9:C4:EB:97:D4:13:FD:FF:3F:4F:41:2B:AD:65
Certificate issuer:       /CN=cadf002a-d081-4e51-89c4-f7121259516d
Certificate serial:       010D0C9F43285849ABB4A7DCBC6AA5DF05726C00
Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     398813
IP address blocks:        192.206.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a7:dc:bc:6a:a5:df:05:72:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=1fdd9ea8-6bb2-4266-a4b3-167bb05d8e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:d9:74:ed:c7:ad:05:21:7a:f6:32:f8:47:
                    d5:8b:62:4d:ce:cd:5c:a1:86:c2:50:20:64:d6:71:
                    7e:b6:3e:49:00:58:26:5e:4f:8d:07:6d:8d:a8:12:
                    0b:fd:21:e1:f0:45:08:fa:9b:9d:b7:1b:7a:ad:99:
                    2a:4b:bb:b6:9e:49:87:96:0e:fb:c0:ec:9f:74:7e:
                    30:2d:37:41:a0:ed:00:9f:16:87:1d:38:4a:38:7e:
                    18:46:4e:07:22:eb:95:ed:84:e6:ea:57:f1:7a:86:
                    84:80:22:76:6a:18:3a:e0:35:2a:65:a7:b8:0a:a0:
                    1a:23:cf:d9:86:d0:7e:fb:a1:a6:11:86:e3:38:b9:
                    b4:7d:1c:c8:e1:b6:c3:7e:51:d2:3f:9d:3d:16:e6:
                    b2:06:5e:8e:aa:be:ee:32:a9:61:cd:5f:3d:ec:6a:
                    a1:a5:72:07:a2:bb:b6:f4:96:79:dd:58:f4:ba:c6:
                    f8:d7:74:5b:3b:0d:13:6d:fa:c6:f4:38:cc:ec:7d:
                    1f:b6:02:0a:33:e3:68:5a:3a:34:73:68:47:f7:db:
                    ee:0a:5c:7e:01:f1:e2:cd:cd:ed:c9:b1:6b:46:8d:
                    8e:00:32:01:a8:4b:f2:54:43:c3:9f:4c:20:7c:44:
                    a3:ac:a9:7c:70:10:0c:9e:85:b8:8b:47:5a:bc:39:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:35:B8:B4:AF:A9:C4:EB:97:D4:13:FD:FF:3F:4F:41:2B:AD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/966b2ef4-2f76-3472-87f5-a5d6c1fc2aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl

            X509v3 Authority Key Identifier:
                keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:c6:0f:a9:1e:bc:2d:34:88:54:7c:f8:13:61:dd:f1:15:
         82:9f:ae:88:63:84:be:2a:ce:19:4d:78:1d:4b:66:07:d4:8f:
         33:a8:6f:1f:9b:11:0e:f2:2a:62:51:2e:89:7a:dd:e3:aa:a1:
         e3:54:9f:93:3e:90:a4:43:0f:6e:ae:1a:f0:1c:54:15:6e:24:
         73:71:cc:81:f0:3f:32:42:93:55:e6:c4:87:30:73:6b:e2:e9:
         9c:52:98:c6:3c:7d:70:51:0d:36:0b:80:d5:72:48:0e:0f:a6:
         4d:2d:ed:20:6b:cd:75:aa:28:7f:ed:72:2a:e7:8c:46:ca:2d:
         9d:0a:3f:95:72:86:72:e1:9f:6a:28:c4:84:af:d6:79:e7:5d:
         ce:80:f6:2a:f8:78:85:b2:e1:d9:13:14:51:ac:5f:d7:75:c0:
         68:b3:02:ce:ce:bc:1a:62:c1:40:18:31:7b:4c:92:c8:45:d7:
         e0:19:b6:a5:f9:8d:54:97:d0:87:fe:d0:31:38:2d:96:9a:88:
         f6:b7:bc:f2:d2:c8:77:d6:e8:da:39:80:da:1f:fe:22:df:14:
         78:4a:81:77:6a:cf:87:af:85:5d:4a:f8:85:1d:fb:b9:19:75:
         72:bf:49:cb:70:7b:03:d6:49:c5:fb:7f:2c:a8:8e:70:97:3d:
         ba:9b:aa:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKfcvGql3wVybAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1
MTZkMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
MWZkZDllYTgtNmJiMi00MjY2LWE0YjMtMTY3YmIwNWQ4ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1XZdO3HrQUhevYy+EfVi2JNzs1coYbCUCBk
1nF+tj5JAFgmXk+NB22NqBIL/SHh8EUI+pudtxt6rZkqS7u2nkmHlg77wOyfdH4w
LTdBoO0AnxaHHThKOH4YRk4HIuuV7YTm6lfxeoaEgCJ2ahg64DUqZae4CqAaI8/Z
htB++6GmEYbjOLm0fRzI4bbDflHSP509FuayBl6Oqr7uMqlhzV897GqhpXIHoru2
9JZ53Vj0usb413RbOw0TbfrG9DjM7H0ftgIKM+NoWjo0c2hH99vuClx+AfHizc3t
ybFrRo2OADIBqEvyVEPDn0wgfESjrKl8cBAMnoW4i0davDmY6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBeWNbi0r6nE65fUE/3/P09BK61lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm
MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvOTY2YjJlZjQtMmY3Ni0z
NDcyLTg3ZjUtYTVkNmMxZmMyYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5
YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5
NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy
MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnWxg+pHrwtNIhUfPgTYd3xFYKfrohjhL4qzhlNeB1LZgfUjzOobx+b
EQ7yKmJRLol63eOqoeNUn5M+kKRDD26uGvAcVBVuJHNxzIHwPzJCk1XmxIcwc2vi
6ZxSmMY8fXBRDTYLgNVySA4Ppk0t7SBrzXWqKH/tcirnjEbKLZ0KP5VyhnLhn2oo
xISv1nnnXc6A9ir4eIWy4dkTFFGsX9d1wGizAs7OvBpiwUAYMXtMkshF1+AZtqX5
jVSX0If+0DE4LZaaiPa3vPLSyHfW6No5gNof/iLfFHhKgXdqz4evhV1K+IUd+7kZ
dXK/SctwewPWScX7fyyojnCXPbqbqho=
-----END CERTIFICATE-----
Generated at Tue May 6 15:12:04 2025 by rpki-client