Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa
File:                     068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa (raw, json)
Hash identifier:          pVwr4F7jGKju/revRQmaxIbFJ8kH8CrfOo9QV0bT1oE=
Subject key identifier:   5F:74:90:3D:4B:E2:BD:40:E9:47:42:8C:41:FB:83:DE:B6:F3:DB:D5
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F43285849C79F61262B0D464FAF8A0090
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     55178
IP address blocks:        192.230.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:61:26:2b:0d:46:4f:af:8a:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=15b7aa64-975e-426c-9ec4-fc73c5a2ba05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:03:82:06:53:3e:c5:4e:e9:06:b0:92:ce:
                    07:d7:99:f6:7e:f9:7c:bd:6a:94:3e:b9:df:0f:0e:
                    ca:82:b5:6d:de:df:90:b9:a3:9e:ed:bb:33:c8:0d:
                    b6:f9:1c:f3:a7:c5:ea:57:f4:a4:fe:71:c8:39:4d:
                    7c:f0:b9:29:98:97:3e:52:2b:fb:95:66:7b:1e:32:
                    2e:87:b8:4f:ad:87:c0:1a:1a:95:a6:c3:aa:8c:9f:
                    1f:7b:e2:52:34:b7:7e:50:66:cd:18:a6:3e:9a:ea:
                    44:ad:d4:a7:69:1d:73:cb:c3:aa:4b:5b:08:5b:48:
                    05:00:dc:40:a8:b9:15:3e:f0:7f:87:46:42:ec:e3:
                    f9:c2:27:61:84:22:70:6e:0e:8d:c8:51:e0:a9:34:
                    b9:e8:96:67:6b:ac:6e:9c:c3:7e:f2:61:de:9c:3c:
                    41:2a:6a:71:b6:62:a8:57:19:d8:f4:07:e8:7d:c2:
                    0d:0a:87:0d:4e:73:92:ad:e2:7d:fa:cd:41:c2:fa:
                    ba:a5:38:2a:f9:ba:8f:aa:cc:89:4c:0c:db:6e:37:
                    60:f2:8a:fc:4d:69:cd:3c:f8:8f:ef:b2:49:87:11:
                    81:9f:47:7f:bd:30:9d:35:0f:87:21:63:c1:a0:c9:
                    5a:a4:92:29:ba:ad:d6:e6:a5:a4:65:58:a8:de:2b:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:74:90:3D:4B:E2:BD:40:E9:47:42:8C:41:FB:83:DE:B6:F3:DB:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/068cdd65-3c15-372f-b3e3-0d301d7c37f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8d:72:2c:93:2b:82:5b:95:a5:d0:4e:fc:62:aa:55:7d:7a:
         91:f8:11:e7:e0:0b:1b:89:ed:f6:07:50:05:65:1f:d1:b3:03:
         e0:4c:fe:91:88:89:97:c6:ec:d1:01:c7:9c:24:f5:56:b0:0f:
         40:fc:2d:e3:c4:fc:69:cb:e6:c0:04:54:41:8d:48:f7:2b:7e:
         90:e7:52:f0:00:b3:67:cb:a2:cd:05:be:4b:dd:be:9a:89:a9:
         ac:55:ed:4a:c5:9a:8a:50:49:01:88:cb:d2:b4:e0:f2:45:d8:
         57:38:90:a9:27:b4:a3:0e:98:9e:de:96:36:bf:71:49:07:99:
         04:44:60:c8:18:ab:ba:33:33:f2:9c:00:a1:1e:36:c4:6d:e2:
         18:ef:eb:3e:fc:1c:98:d1:2e:7e:cc:1b:f0:c1:b9:c8:6f:4b:
         97:cc:bc:8d:af:41:75:64:6c:a6:76:01:bf:62:2a:c5:e4:91:
         31:06:7b:ce:77:c2:a1:3c:8d:d4:9d:f6:fa:69:f4:fd:c4:1d:
         d4:79:c2:ac:31:23:ef:a9:46:a5:6c:05:22:ee:8d:de:ff:d8:
         b6:6d:ed:89:2d:f1:ad:e3:84:30:6a:7c:70:72:cc:89:77:a8:
         3e:3c:28:28:ed:97:89:1a:a2:df:b8:ba:fb:0a:ad:5a:31:42:
         99:13:b5:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2EmKw1GT6+KAJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg5MDNhMTQtZWY1Zi00MzEwLWI2OTQtNjBmNDliMWM2
MWE5MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk
MTViN2FhNjQtOTc1ZS00MjZjLTllYzQtZmM3M2M1YTJiYTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3cDggZTPsVO6Qawks4H15n2fvl8vWqUPrnf
Dw7KgrVt3t+QuaOe7bszyA22+Rzzp8XqV/Sk/nHIOU188LkpmJc+Uiv7lWZ7HjIu
h7hPrYfAGhqVpsOqjJ8fe+JSNLd+UGbNGKY+mupErdSnaR1zy8OqS1sIW0gFANxA
qLkVPvB/h0ZC7OP5widhhCJwbg6NyFHgqTS56JZna6xunMN+8mHenDxBKmpxtmKo
VxnY9AfofcINCocNTnOSreJ9+s1Bwvq6pTgq+bqPqsyJTAzbbjdg8or8TWnNPPiP
77JJhxGBn0d/vTCdNQ+HIWPBoMlapJIpuq3W5qWkZVio3iu9jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF90kD1L4r1A6UdCjEH7g96289vVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkw
M2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0OWIxYzYxYTkvMDY4Y2RkNjUtM2MxNS0z
NzJmLWIzZTMtMGQzMDFkN2MzN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg5MDNhMTQtZWY1Zi00MzEwLWI2
OTQtNjBmNDliMWM2MWE5L2E4OTAzYTE0LWVmNWYtNDMxMC1iNjk0LTYwZjQ5YjFj
NjFhOS5jcmwwHwYDVR0jBBgwFoAUcjvjDDCo3dCu/FhWC6SEaIgkq2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hODkwM2ExNC1lZjVmLTQzMTAtYjY5NC02MGY0
OWIxYzYxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOa/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiNciyTK4JblaXQTvxiqlV9epH4EefgCxuJ7fYHUAVlH9GzA+BM/pGI
iZfG7NEBx5wk9VawD0D8LePE/GnL5sAEVEGNSPcrfpDnUvAAs2fLos0FvkvdvpqJ
qaxV7UrFmopQSQGIy9K04PJF2Fc4kKkntKMOmJ7elja/cUkHmQREYMgYq7ozM/Kc
AKEeNsRt4hjv6z78HJjRLn7MG/DBuchvS5fMvI2vQXVkbKZ2Ab9iKsXkkTEGe853
wqE8jdSd9vpp9P3EHdR5wqwxI++pRqVsBSLujd7/2LZt7Ykt8a3jhDBqfHByzIl3
qD48KCjtl4kaot+4uvsKrVoxQpkTtQ8=
-----END CERTIFICATE-----
Generated at Sat May 10 03:34:36 2025 by rpki-client