Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/68173c35-e474-3465-9d78-335452f93939.roa
File:                     68173c35-e474-3465-9d78-335452f93939.roa (raw, json)
Hash identifier:          JZUsMdQYjrJGmhQ0NOgj11QK8FS0e0+8bTcUkWNl1E0=
Subject key identifier:   21:8D:0F:1F:06:16:31:FD:06:E6:D8:15:F1:7A:69:95:57:67:71:E1
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F43285849D85F899FA9C4CDFDD87F36C0
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/68173c35-e474-3465-9d78-335452f93939.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        149.19.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:89:9f:a9:c4:cd:fd:d8:7f:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=9771fb6e-1a7e-44f2-9899-1b5983ce776b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:10:3c:20:ed:3d:85:ab:21:99:c4:0f:9d:
                    71:41:85:cd:dd:f9:ed:38:cb:17:33:8c:f4:44:f7:
                    c8:1c:d3:06:c0:d6:e6:32:46:ce:0f:47:e9:2c:84:
                    a3:4b:b5:58:2a:94:a8:df:d7:70:82:77:8a:84:af:
                    a8:d4:e7:b8:16:d9:bf:ee:ea:f6:29:fd:e9:91:e9:
                    68:5e:02:7c:ae:b5:1f:33:06:0a:1d:43:ee:9f:a4:
                    08:91:da:6f:9f:77:2c:1f:9f:3a:83:da:e3:0c:d0:
                    e7:3a:ad:9f:25:53:6c:8c:1f:32:16:c9:b2:6a:e8:
                    fc:71:10:6c:5d:27:fb:a9:e3:a7:25:73:49:72:56:
                    72:36:a3:82:22:c4:c5:dc:94:b2:7d:33:3a:30:53:
                    bd:0d:be:ca:8e:67:59:1b:77:16:35:b3:3e:c5:38:
                    12:97:7f:2e:1b:af:c9:77:22:fe:13:ed:bb:56:54:
                    5b:7e:12:6c:b7:e6:f0:65:3d:39:d2:fa:d9:21:24:
                    73:46:21:60:0a:b2:e6:3c:16:05:ea:0a:17:22:40:
                    69:d1:b3:02:82:20:c7:51:60:12:b3:3d:79:b7:bf:
                    5a:b9:83:ee:33:ff:63:2b:e0:43:db:b0:0d:ec:86:
                    ef:00:67:1a:9b:cb:b2:46:09:61:c6:29:62:01:1d:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8D:0F:1F:06:16:31:FD:06:E6:D8:15:F1:7A:69:95:57:67:71:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/68173c35-e474-3465-9d78-335452f93939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:d5:ab:26:8e:96:8f:41:4e:b4:69:f3:67:d5:6c:f3:fd:
         75:cd:54:1d:f1:ee:9d:a8:18:d3:44:f0:89:c9:b5:b3:3c:5c:
         98:68:3d:20:d5:58:66:93:3a:32:3a:51:3c:5c:04:68:cc:25:
         b1:92:79:75:33:23:d7:6f:4c:e3:5a:87:2b:56:43:df:00:13:
         17:6c:bc:57:6f:cd:5e:78:93:5b:8c:e4:cc:cd:3f:c6:c4:5e:
         1f:57:a5:79:01:25:72:87:8f:76:a1:01:3e:8b:24:b7:53:2a:
         d8:b3:e4:e2:b1:d1:7f:6b:13:f1:5e:31:c1:17:71:9d:22:a9:
         1e:26:75:55:f2:1d:a7:b6:4c:b9:60:c0:4c:b8:6a:79:ce:c1:
         47:df:61:ff:85:29:50:17:d2:8f:4a:b8:65:44:b9:c7:39:d7:
         03:39:89:b4:3a:f9:73:ee:1a:ce:43:20:f7:55:c8:60:bf:85:
         5d:9a:2f:13:62:c2:40:ee:25:20:c7:92:cb:b6:64:71:8c:91:
         f6:5b:a4:b1:54:40:3e:a7:b1:1f:ee:12:2f:78:f2:5f:40:98:
         15:fc:92:0e:f9:75:aa:c1:14:0b:38:af:66:7c:72:c7:f0:e9:
         3f:d4:55:a7:b8:39:da:7f:11:ad:80:99:b8:71:cb:05:bb:6d:
         d5:18:45:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4mfqcTN/dh/NsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZTdmYzMtMjE2OS00Njc2LTkzZmItZmUxYTU1Yjlh
MmIwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
OTc3MWZiNmUtMWE3ZS00NGYyLTk4OTktMWI1OTgzY2U3NzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMAQPCDtPYWrIZnED51xQYXN3fntOMsXM4z0
RPfIHNMGwNbmMkbOD0fpLISjS7VYKpSo39dwgneKhK+o1Oe4Ftm/7ur2Kf3pkelo
XgJ8rrUfMwYKHUPun6QIkdpvn3csH586g9rjDNDnOq2fJVNsjB8yFsmyauj8cRBs
XSf7qeOnJXNJclZyNqOCIsTF3JSyfTM6MFO9Db7KjmdZG3cWNbM+xTgSl38uG6/J
dyL+E+27VlRbfhJst+bwZT050vrZISRzRiFgCrLmPBYF6goXIkBp0bMCgiDHUWAS
sz15t79auYPuM/9jK+BD27AN7IbvAGcam8uyRglhxiliAR28QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGNDx8GFjH9BubYFfF6aZVXZ3HhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRl
N2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFhNTViOWEyYjAvNjgxNzNjMzUtZTQ3NC0z
NDY1LTlkNzgtMzM1NDUyZjkzOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTk0ZTdmYzMtMjE2OS00Njc2LTkz
ZmItZmUxYTU1YjlhMmIwL2U5NGU3ZmMzLTIxNjktNDY3Ni05M2ZiLWZlMWE1NWI5
YTJiMC5jcmwwHwYDVR0jBBgwFoAUeSzaFy0pIOWgmosSyK1fVxVcm/8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRlN2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFh
NTViOWEyYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlRMGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHu1asmjpaPQU60afNn1Wzz/XXNVB3x7p2oGNNE8InJtbM8XJhoPSDV
WGaTOjI6UTxcBGjMJbGSeXUzI9dvTONahytWQ98AExdsvFdvzV54k1uM5MzNP8bE
Xh9XpXkBJXKHj3ahAT6LJLdTKtiz5OKx0X9rE/FeMcEXcZ0iqR4mdVXyHae2TLlg
wEy4annOwUffYf+FKVAX0o9KuGVEucc51wM5ibQ6+XPuGs5DIPdVyGC/hV2aLxNi
wkDuJSDHksu2ZHGMkfZbpLFUQD6nsR/uEi948l9AmBX8kg75darBFAs4r2Z8csfw
6T/UVae4Odp/Ea2AmbhxywW7bdUYRcE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:05:32 2025 by rpki-client