Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f038281-eae4-3d90-98fd-045dbf1d5c32.roa
File:                     1f038281-eae4-3d90-98fd-045dbf1d5c32.roa (raw, json)
Hash identifier:          ZqErp22saql1BDd6hbpC1H46oMFRGSDX1giMjkICO0c=
Subject key identifier:   FC:45:11:83:A5:7A:7F:16:67:78:0A:BC:47:E5:AA:2A:08:58:42:F1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE43BAE1E7506BA872A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f038281-eae4-3d90-98fd-045dbf1d5c32.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        76.178.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e4:3b:ae:1e:75:06:ba:87:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e34bcbca-c86a-4ecc-a507-fe15287d4099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:21:eb:b0:db:c2:fc:f2:30:26:e3:93:a1:5f:
                    8b:9f:fc:76:7b:af:1a:22:71:b0:3b:17:5c:c4:09:
                    80:4f:53:d3:b3:e8:1d:23:ae:1c:d1:48:2e:06:7d:
                    cb:22:07:8e:29:bc:dd:38:43:ba:8e:68:2f:bc:dc:
                    75:57:f3:d3:fe:f5:e8:91:cf:7d:40:37:ec:5d:06:
                    6c:ea:5a:39:51:50:a5:c5:5e:79:9a:ae:21:54:7e:
                    b0:f5:9c:d0:fb:be:2a:1f:e0:64:e7:a7:b4:e6:8d:
                    ba:f5:55:81:78:52:b9:4f:f7:89:02:27:f8:f8:52:
                    f9:41:73:ce:4a:ce:e8:87:d7:68:24:cc:95:5b:0d:
                    86:7f:c8:90:99:cb:9f:75:9a:11:ae:8c:03:24:77:
                    11:cc:60:36:4d:ce:34:a4:df:29:44:62:81:f9:36:
                    a2:40:60:91:54:eb:91:93:1c:01:53:18:25:52:a1:
                    61:a4:fe:85:67:7c:43:70:b5:9c:f2:ca:69:db:9a:
                    88:a3:84:1b:a1:74:de:a6:12:ed:93:1a:5b:e1:63:
                    6b:40:24:36:7f:a7:df:4b:e4:11:3c:5b:68:e2:5d:
                    f9:8d:e3:e9:cb:cf:1b:6c:c1:b1:c3:1c:70:33:ce:
                    0e:d7:cb:92:92:8d:62:14:ef:37:96:92:26:87:27:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:45:11:83:A5:7A:7F:16:67:78:0A:BC:47:E5:AA:2A:08:58:42:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1f038281-eae4-3d90-98fd-045dbf1d5c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.178.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0a:58:9a:41:45:38:ae:2b:ba:27:eb:1e:29:75:94:3e:6f:
         70:93:51:b5:c0:60:f3:6a:1f:33:10:e2:a0:99:f2:26:ba:68:
         0e:9a:d1:60:4c:15:b1:a9:5c:0c:b9:6b:79:19:f8:f5:d5:34:
         4e:9f:85:8e:e1:ca:41:50:d0:0c:fd:34:45:22:de:fe:d4:83:
         ea:f5:85:62:ce:1e:d4:bb:45:b5:27:51:b9:fc:aa:e6:61:79:
         2a:2c:98:eb:84:59:62:04:c7:cb:de:ae:45:40:18:22:1d:85:
         b3:b2:bf:90:a9:e2:e8:6f:ea:6b:1b:e5:ac:58:07:47:a8:38:
         22:50:6a:ca:8c:ee:36:31:af:f7:d3:b4:99:44:a2:97:17:f5:
         66:d5:f7:f0:62:68:41:04:d3:31:2a:f1:6e:a5:29:6a:3c:43:
         a7:6c:60:e2:1a:e6:92:7e:c0:1a:8f:b5:28:86:df:0b:26:0f:
         03:46:f4:ea:7c:d7:52:a4:bb:33:75:24:37:44:50:3b:c7:d8:
         5e:5c:a7:f7:50:a9:bd:25:19:f8:50:86:5b:a7:ce:d0:1a:ec:
         0d:11:88:66:7b:71:ff:da:9c:83:cc:ea:a8:4c:6e:78:96:3f:
         48:df:6a:3b:72:38:8e:8b:54:b4:9e:a6:b7:73:69:31:6c:1e:
         3f:e5:b4:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCuQ7rh51BrqHKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZTM0YmNiY2EtYzg2YS00ZWNjLWE1MDctZmUxNTI4N2Q0MDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyHrsNvC/PIwJuOToV+Ln/x2e68aInGwOxdc
xAmAT1PTs+gdI64c0UguBn3LIgeOKbzdOEO6jmgvvNx1V/PT/vXokc99QDfsXQZs
6lo5UVClxV55mq4hVH6w9ZzQ+74qH+Bk56e05o269VWBeFK5T/eJAif4+FL5QXPO
Ss7oh9doJMyVWw2Gf8iQmcufdZoRrowDJHcRzGA2Tc40pN8pRGKB+TaiQGCRVOuR
kxwBUxglUqFhpP6FZ3xDcLWc8spp25qIo4QboXTephLtkxpb4WNrQCQ2f6ffS+QR
PFto4l35jePpy88bbMGxwxxwM84O18uSko1iFO83lpImhyc0/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxFEYOlen8WZ3gKvEflqioIWELxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMWYwMzgyODEtZWFlNC0z
ZDkwLTk4ZmQtMDQ1ZGJmMWQ1YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTLJ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsKWJpBRTiuK7on6x4pdZQ+b3CTUbXAYPNqHzMQ4qCZ8ia6aA6a0WBM
FbGpXAy5a3kZ+PXVNE6fhY7hykFQ0Az9NEUi3v7Ug+r1hWLOHtS7RbUnUbn8quZh
eSosmOuEWWIEx8verkVAGCIdhbOyv5Cp4uhv6msb5axYB0eoOCJQasqM7jYxr/fT
tJlEopcX9WbV9/BiaEEE0zEq8W6lKWo8Q6dsYOIa5pJ+wBqPtSiG3wsmDwNG9Op8
11KkuzN1JDdEUDvH2F5cp/dQqb0lGfhQhlunztAa7A0RiGZ7cf/anIPM6qhMbniW
P0jfajtyOI6LVLSeprdzaTFsHj/ltAo=
-----END CERTIFICATE-----
Generated at Tue May 13 00:39:00 2025 by rpki-client