Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3bc4ff2b-d665-388c-bd64-2d6badaa12aa.roa
File:                     3bc4ff2b-d665-388c-bd64-2d6badaa12aa.roa (raw, json)
Hash identifier:          u8PXnzrB1osrZdwTFlmBX8v1S0P+mnbX4/s+qT2P4TE=
Subject key identifier:   C4:9C:54:1E:4A:1E:9B:E0:E9:F2:74:61:45:05:D3:7B:90:3D:E1:E2
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F43285849C6FEA5C080552A2468070280
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3bc4ff2b-d665-388c-bd64-2d6badaa12aa.roa
Signing time:             Wed 07 May 2025 19:36:58 +0000
ROA not before:           Wed 07 May 2025 19:36:58 +0000
ROA not after:            Tue 05 Aug 2025 19:36:58 +0000
asID:                     393485
IP address blocks:        12.166.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:fe:a5:c0:80:55:2a:24:68:07:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: May  7 19:36:58 2025 GMT
            Not After : Aug  5 19:36:58 2025 GMT
        Subject: CN=465948a6-3f66-4826-9672-9b38e424e949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:51:99:47:a1:7e:f1:d6:3c:0c:e9:01:cb:
                    90:9f:ab:48:7b:fa:06:3c:8c:4d:dc:0e:e9:35:98:
                    e8:6f:5f:48:2f:ae:3e:c7:89:c3:d2:99:54:35:c8:
                    26:65:47:b7:0f:6d:08:9a:50:e1:98:42:48:b3:17:
                    f6:d5:e0:3c:15:31:3c:8d:94:4e:e2:08:92:4b:e7:
                    78:e7:34:d5:0a:5e:47:64:8a:54:bb:d0:2c:5e:4e:
                    d5:d7:64:cd:a3:3a:fc:af:c0:55:ab:40:33:e3:09:
                    2f:82:81:45:3c:08:1f:7d:99:5d:14:a6:ab:4f:2f:
                    a2:c3:cb:63:c7:a1:21:21:37:1e:b8:7b:9a:65:a9:
                    26:e7:97:62:d3:8e:e5:16:56:f3:85:2b:33:a8:c3:
                    ed:99:1a:f2:44:ec:17:87:da:16:9f:14:c3:c0:8c:
                    24:e7:d8:c9:1b:44:a4:65:fa:a0:c7:ae:74:27:d7:
                    b7:e0:0a:5b:6d:8f:eb:28:b5:ae:a8:5e:a3:de:19:
                    6a:d6:af:5f:67:8a:01:96:a7:3e:d0:9d:42:a0:ee:
                    db:f2:d4:70:c1:b5:9a:f7:c2:03:80:db:2a:f3:9e:
                    19:94:dd:5d:14:88:28:8c:72:f1:71:66:61:76:d9:
                    cf:3c:d8:d2:81:51:13:0e:cb:9c:36:f3:5b:f7:a1:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9C:54:1E:4A:1E:9B:E0:E9:F2:74:61:45:05:D3:7B:90:3D:E1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/3bc4ff2b-d665-388c-bd64-2d6badaa12aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.166.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c3:22:2a:b9:50:6a:35:13:2e:cc:1c:45:6d:a4:9d:57:0c:
         c9:b5:55:12:4d:85:c6:02:ee:8c:c1:61:b7:ec:b7:25:c6:fb:
         42:1c:62:0c:07:d7:37:06:1a:8a:1f:97:cd:f9:e4:27:4a:2c:
         98:41:5d:a7:c9:95:67:2d:b3:cb:c8:09:63:59:45:92:34:a4:
         2e:83:e5:85:37:5a:5c:5e:cc:c5:43:47:83:10:bc:f6:e7:28:
         96:b6:47:dc:12:db:ca:82:c5:b5:90:91:d8:1e:0f:56:a4:2c:
         68:17:4e:68:ec:63:e0:50:5c:66:e6:bb:95:63:e8:81:7b:72:
         9b:c7:14:c4:31:0a:04:a8:33:3e:6e:de:f7:c9:4f:3c:89:3e:
         2b:9f:6c:10:ce:97:d0:c9:a8:cc:ee:38:07:24:0e:01:df:d1:
         6e:cb:1b:b9:f7:0a:7d:11:10:dc:ca:78:20:cc:ec:9a:ac:b0:
         58:ba:97:f2:ab:43:56:f8:a0:42:cc:5f:0e:a5:5c:18:d7:e9:
         d7:74:5b:b6:6a:25:ea:37:de:db:4c:19:76:69:1e:2e:f7:93:
         4f:67:71:1b:11:d1:86:7f:e6:d8:ec:f7:dd:55:4b:08:56:4c:
         f2:b3:12:c0:38:49:f3:a9:9f:bb:02:b5:16:6a:2c:cf:d9:18:
         60:97:fa:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnG/qXAgFUqJGgHAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI1MDUwNzE5MzY1OFoXDTI1MDgwNTE5MzY1OFowLzEtMCsGA1UEAxMk
NDY1OTQ4YTYtM2Y2Ni00ODI2LTk2NzItOWIzOGU0MjRlOTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWBRmUehfvHWPAzpAcuQn6tIe/oGPIxN3A7p
NZjob19IL64+x4nD0plUNcgmZUe3D20ImlDhmEJIsxf21eA8FTE8jZRO4giSS+d4
5zTVCl5HZIpUu9AsXk7V12TNozr8r8BVq0Az4wkvgoFFPAgffZldFKarTy+iw8tj
x6EhITceuHuaZakm55di047lFlbzhSszqMPtmRryROwXh9oWnxTDwIwk59jJG0Sk
Zfqgx650J9e34ApbbY/rKLWuqF6j3hlq1q9fZ4oBlqc+0J1CoO7b8tRwwbWa98ID
gNsq854ZlN1dFIgojHLxcWZhdtnPPNjSgVETDsucNvNb96EmwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMScVB5KHpvg6fJ0YUUF03uQPeHiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvM2JjNGZmMmItZDY2NS0z
ODhjLWJkNjQtMmQ2YmFkYWExMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADKYuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3DIiq5UGo1Ey7MHEVtpJ1XDMm1VRJNhcYC7ozBYbfstyXG+0IcYgwH
1zcGGoofl8355CdKLJhBXafJlWcts8vICWNZRZI0pC6D5YU3WlxezMVDR4MQvPbn
KJa2R9wS28qCxbWQkdgeD1akLGgXTmjsY+BQXGbmu5Vj6IF7cpvHFMQxCgSoMz5u
3vfJTzyJPiufbBDOl9DJqMzuOAckDgHf0W7LG7n3Cn0RENzKeCDM7JqssFi6l/Kr
Q1b4oELMXw6lXBjX6dd0W7ZqJeo33ttMGXZpHi73k09ncRsR0YZ/5tjs991VSwhW
TPKzEsA4SfOpn7sCtRZqLM/ZGGCX+iw=
-----END CERTIFICATE-----
Generated at Sat May 10 15:10:58 2025 by rpki-client