Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa
File:                     5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa (raw, json)
Hash identifier:          ZmCSMFL99kcpQgZZ/wUBpY7YE7LbmNmOsax2XNQaewQ=
Subject key identifier:   4F:A8:CF:59:89:8A:1C:03:45:92:4C:58:3D:44:5E:72:EB:F6:B5:44
Certificate issuer:       /CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
Certificate serial:       010D0C9F43285849AA4F6ECEC531B6A5CE1AE500
Authority key identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     21529
IP address blocks:        149.112.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6e:ce:c5:31:b6:a5:ce:1a:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=e0209e7b-c3c2-4904-8321-f99c0f4a7e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:1b:12:ae:d9:0f:63:cf:c9:67:38:dc:dd:
                    ef:9a:33:67:07:51:2b:8b:0c:07:bc:ab:b2:01:83:
                    51:61:0e:17:3e:ea:1a:b9:b4:de:bd:3a:0f:7c:7e:
                    71:cc:6c:d8:16:7a:58:b2:12:8d:f4:1a:52:83:67:
                    6e:9d:c3:e9:ac:44:30:dc:e4:a4:c1:72:95:fd:8d:
                    7c:c9:94:ad:5c:5a:76:c7:65:75:11:4e:de:79:3b:
                    e8:4d:b1:72:b2:4f:9c:d2:60:ba:d1:c7:e4:b5:b5:
                    a9:60:de:b2:37:0d:10:0c:6d:6f:da:ae:99:be:e5:
                    98:83:88:e3:cc:90:70:49:9b:87:2a:16:a7:06:5c:
                    e3:71:f1:ba:7f:70:a7:5d:0a:98:17:0c:a4:bd:54:
                    12:5e:a9:e5:61:68:e3:9d:2a:df:2c:8a:1d:4f:d7:
                    1a:e8:17:b9:95:dc:36:a1:34:24:3d:73:34:d8:66:
                    47:d9:10:ac:3e:d9:39:68:3a:e9:be:11:0c:a3:c5:
                    08:39:47:3b:ff:3f:54:d7:52:56:da:77:82:57:17:
                    ea:6e:10:a4:59:11:a0:32:87:ed:67:6c:b5:64:d9:
                    07:9c:2c:30:fe:7d:f5:d6:e0:44:04:11:8b:f9:88:
                    6c:39:6f:b0:da:46:1b:1b:87:74:2a:37:38:f0:28:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A8:CF:59:89:8A:1C:03:45:92:4C:58:3D:44:5E:72:EB:F6:B5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/5af6646f-bf4a-3ded-b3b4-7532fa81fdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:90:60:78:2d:c2:0e:98:40:b4:82:93:f4:d2:cd:0f:a2:
         1d:4a:39:b9:70:b5:bc:d2:af:50:61:ca:82:2d:9f:af:7f:03:
         16:f1:d8:3e:f1:5c:d9:cc:2a:d6:a2:b8:0a:35:ca:a8:09:10:
         ca:4f:ac:26:ac:b9:d4:ec:a5:76:38:3b:96:24:10:0e:bf:28:
         8c:11:76:48:01:be:11:dd:72:5f:4e:54:72:e4:66:5f:c0:5c:
         b1:cd:33:b7:d4:99:52:45:2b:af:8f:a9:1a:be:6c:ff:e7:cc:
         ad:85:4b:07:ea:d6:9d:44:0f:6a:a1:79:4f:cc:6e:95:9c:19:
         72:38:c9:55:9a:18:98:89:10:cc:53:11:75:d2:07:86:39:13:
         d9:a8:7b:59:9f:23:7b:5d:33:4b:c1:d4:a0:a8:98:22:4b:3b:
         e4:31:f9:4e:19:b2:ee:33:04:dc:1e:64:6d:4a:71:20:6c:6f:
         aa:6b:32:40:e1:e7:fe:22:42:16:f6:fd:ca:4c:43:44:fc:be:
         96:73:86:2b:df:6e:8f:a6:4d:3f:64:f1:9b:1b:ae:cf:be:91:
         7d:75:96:26:55:49:36:93:27:73:3c:c6:5d:b6:72:a1:2d:15:
         49:80:5c:23:d1:c7:b2:96:a6:e4:0f:66:c0:92:e2:e1:7c:23:
         f5:9f:66:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT27OxTG2pc4a5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkzNGZhMDUtZDdhMy00YjdkLWJlNWQtZGM4M2Q0YTcx
OTlkMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk
ZTAyMDllN2ItYzNjMi00OTA0LTgzMjEtZjk5YzBmNGE3ZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXYbEq7ZD2PPyWc43N3vmjNnB1EriwwHvKuy
AYNRYQ4XPuoaubTevToPfH5xzGzYFnpYshKN9BpSg2duncPprEQw3OSkwXKV/Y18
yZStXFp2x2V1EU7eeTvoTbFysk+c0mC60cfktbWpYN6yNw0QDG1v2q6ZvuWYg4jj
zJBwSZuHKhanBlzjcfG6f3CnXQqYFwykvVQSXqnlYWjjnSrfLIodT9ca6Be5ldw2
oTQkPXM02GZH2RCsPtk5aDrpvhEMo8UIOUc7/z9U11JW2neCVxfqbhCkWRGgMoft
Z2y1ZNkHnCww/n311uBEBBGL+YhsOW+w2kYbG4d0Kjc48CgPYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE+oz1mJihwDRZJMWD1EXnLr9rVEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTM0
ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgzZDRhNzE5OWQvNWFmNjY0NmYtYmY0YS0z
ZGVkLWIzYjQtNzUzMmZhODFmZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkzNGZhMDUtZDdhMy00YjdkLWJl
NWQtZGM4M2Q0YTcxOTlkLzE5MzRmYTA1LWQ3YTMtNGI3ZC1iZTVkLWRjODNkNGE3
MTk5ZC5jcmwwHwYDVR0jBBgwFoAUOIuVNSytrzzuaOApRYYPJ0jQ1MEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xOTM0ZmEwNS1kN2EzLTRiN2QtYmU1ZC1kYzgz
ZDRhNzE5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXAMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD97kGB4LcIOmEC0gpP00s0Poh1KOblwtbzSr1BhyoItn69/Axbx2D7x
XNnMKtaiuAo1yqgJEMpPrCasudTspXY4O5YkEA6/KIwRdkgBvhHdcl9OVHLkZl/A
XLHNM7fUmVJFK6+PqRq+bP/nzK2FSwfq1p1ED2qheU/MbpWcGXI4yVWaGJiJEMxT
EXXSB4Y5E9moe1mfI3tdM0vB1KComCJLO+Qx+U4Zsu4zBNweZG1KcSBsb6prMkDh
5/4iQhb2/cpMQ0T8vpZzhivfbo+mTT9k8Zsbrs++kX11liZVSTaTJ3M8xl22cqEt
FUmAXCPRx7KWpuQPZsCS4uF8I/WfZtM=
-----END CERTIFICATE-----
Generated at Mon May 5 16:47:10 2025 by rpki-client