Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa
File:                     6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa (raw, json)
Hash identifier:          ArQMeBLHGgPTCdsswh8RZrIY3oDmyPykpc63D0xIbYY=
Subject key identifier:   29:A4:B3:2C:56:0A:F2:77:78:3A:C8:DC:C4:DC:EC:4D:25:2B:0C:59
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858499DBF38B94DE1EDD555600F00
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     0
IP address blocks:        192.124.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:38:b9:4d:e1:ed:d5:55:60:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=caf4d5c4-1b19-4094-9c20-b102eba8ee30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:de:ba:70:21:ce:62:23:8f:5e:95:ff:ad:
                    13:56:76:90:20:d4:10:1b:4d:e0:59:54:1f:44:7e:
                    57:65:6b:a2:d8:23:d0:46:12:a6:73:f0:f1:9f:40:
                    d8:04:c5:56:30:7e:58:ed:fc:ff:1c:74:33:95:bd:
                    87:0e:c7:14:46:8f:70:5b:20:9e:e9:66:9a:aa:49:
                    c1:a1:63:43:1e:5a:2c:53:55:ea:0c:69:17:64:19:
                    b5:28:fc:7e:ca:84:89:f0:ac:ec:d3:ba:66:d6:41:
                    30:3f:a1:09:26:b3:63:d1:a8:aa:53:a0:e1:88:57:
                    d9:68:bc:2f:61:4e:89:6a:d1:50:65:55:09:f3:39:
                    b4:21:35:95:ae:a4:ac:f9:ee:10:0c:0d:1e:7f:ef:
                    35:ae:bd:1e:96:0f:84:b9:5a:50:f0:9b:3a:ef:8f:
                    57:dc:57:0f:3b:56:d3:4f:d8:69:10:96:43:41:7c:
                    3a:cf:2f:f7:c8:b8:4c:ee:23:49:ac:51:cc:86:6b:
                    63:29:5d:9a:1c:ad:df:99:6f:7c:69:3f:06:75:40:
                    68:e8:5c:ab:8b:8f:1c:fd:c6:df:2a:5e:61:d1:88:
                    a8:36:63:34:9d:b7:73:41:1c:ae:cb:e0:82:b9:03:
                    94:9b:66:41:9a:ac:49:dd:63:82:99:72:5e:3f:49:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:B3:2C:56:0A:F2:77:78:3A:C8:DC:C4:DC:EC:4D:25:2B:0C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/6966a942-6b1b-3e89-a9d0-01a52d5a331a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d1:85:ae:f3:78:91:4f:f9:4b:37:f7:f8:f7:53:e0:21:fe:
         a4:80:5a:1c:0c:c3:04:7b:8f:6d:8f:cf:cb:77:10:c2:64:9a:
         18:95:54:46:10:ff:1c:f8:66:e8:af:05:d5:ab:59:45:bd:d9:
         3e:2f:84:bf:06:8a:74:39:b7:ff:2a:6b:57:1f:02:ac:ee:0e:
         e3:a5:a1:d5:6c:6d:1c:59:5a:64:16:d4:f9:19:2d:1f:2c:28:
         da:61:65:8f:b0:85:d4:8a:39:42:a4:df:df:a7:cd:68:80:9b:
         4e:67:a3:2a:48:f2:75:59:6f:b0:38:68:f7:74:85:ca:24:83:
         15:e8:96:cc:b3:e4:17:48:64:fc:11:87:37:ca:1f:16:fc:1c:
         1a:e3:0f:52:4c:0a:a1:82:3f:b4:84:9c:cc:c4:e3:f5:46:68:
         60:03:27:03:af:bd:77:d5:51:32:a4:cd:26:79:88:db:e0:08:
         9c:8f:a9:9e:d6:ae:42:26:d9:8b:02:cc:54:4e:95:58:13:de:
         03:dd:65:c9:fa:e7:3b:f3:3f:da:64:d7:01:ec:e5:59:7c:a1:
         74:11:14:2d:dd:03:63:10:1e:fc:bf:d2:22:ae:70:2d:c7:23:
         68:fd:df:02:16:64:f3:03:d0:75:6d:57:b3:ee:c2:00:64:1e:
         f7:b4:25:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzi5TeHt1VVgDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz
ZmM1MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
Y2FmNGQ1YzQtMWIxOS00MDk0LTljMjAtYjEwMmViYThlZTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDXeunAhzmIjj16V/60TVnaQINQQG03gWVQf
RH5XZWui2CPQRhKmc/Dxn0DYBMVWMH5Y7fz/HHQzlb2HDscURo9wWyCe6WaaqknB
oWNDHlosU1XqDGkXZBm1KPx+yoSJ8Kzs07pm1kEwP6EJJrNj0aiqU6DhiFfZaLwv
YU6JatFQZVUJ8zm0ITWVrqSs+e4QDA0ef+81rr0elg+EuVpQ8Js6749X3FcPO1bT
T9hpEJZDQXw6zy/3yLhM7iNJrFHMhmtjKV2aHK3fmW98aT8GdUBo6Fyri48c/cbf
Kl5h0YioNmM0nbdzQRyuy+CCuQOUm2ZBmqxJ3WOCmXJeP0kNXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmksyxWCvJ3eDrI3MTc7E0lKwxZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2
ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvNjk2NmE5NDItNmIxYi0z
ZTg5LWE5ZDAtMDFhNTJkNWEzMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl
MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2
MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHw4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHRha7zeJFP+Us39/j3U+Ah/qSAWhwMwwR7j22Pz8t3EMJkmhiVVEYQ
/xz4ZuivBdWrWUW92T4vhL8GinQ5t/8qa1cfAqzuDuOlodVsbRxZWmQW1PkZLR8s
KNphZY+whdSKOUKk39+nzWiAm05noypI8nVZb7A4aPd0hcokgxXolsyz5BdIZPwR
hzfKHxb8HBrjD1JMCqGCP7SEnMzE4/VGaGADJwOvvXfVUTKkzSZ5iNvgCJyPqZ7W
rkIm2YsCzFROlVgT3gPdZcn65zvzP9pk1wHs5Vl8oXQRFC3dA2MQHvy/0iKucC3H
I2j93wIWZPMD0HVtV7PuwgBkHve0JYM=
-----END CERTIFICATE-----
Generated at Mon May 12 02:28:21 2025 by rpki-client