Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa
File:                     ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa (raw, json)
Hash identifier:          wqaV2x9sYWIycdkfRQL4nqzyCtRaNqAal91AVrkCxu4=
Subject key identifier:   BE:3C:A5:AE:82:DD:F6:63:3E:EB:BD:01:C6:5D:C7:88:C9:05:6E:5C
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F432858498CFF15AFE500A760773A1318
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     199856
IP address blocks:        192.154.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:15:af:e5:00:a7:60:77:3a:13:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=8de0b034-0103-47bd-a0de-e99ee6e96b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:d1:c6:26:16:6a:15:3f:29:ee:59:d5:a3:
                    f9:14:41:4e:77:93:37:91:63:b2:47:68:8a:af:53:
                    71:b0:9f:d8:8b:75:d1:65:71:48:43:4f:1b:23:b5:
                    20:f0:a8:4c:15:c6:b7:1c:82:94:05:20:48:16:5c:
                    82:65:cd:91:14:c5:90:a4:11:1f:c1:c4:9e:c4:de:
                    5b:7d:4a:92:cc:50:ae:8b:be:eb:6b:93:97:ff:75:
                    4a:a6:fb:a7:78:72:63:55:24:6d:f4:b4:de:3b:17:
                    84:84:f7:0f:e2:44:08:7e:43:c6:51:c8:3d:c2:70:
                    8a:43:06:1f:a0:84:48:96:50:66:a6:d4:0b:b4:51:
                    6f:75:e7:ba:cb:e3:b4:af:d7:fe:dd:50:9a:63:5d:
                    ad:8a:75:8e:cf:da:60:b8:18:20:60:8d:34:5f:f4:
                    60:af:c8:ff:5a:a4:70:b2:f4:cd:a1:3f:12:fa:b3:
                    4e:7f:28:a2:a3:2b:14:f4:a9:29:eb:b8:07:80:c2:
                    11:df:47:9c:34:1e:37:64:51:7e:9b:57:20:db:f0:
                    6b:c4:17:26:fe:4a:62:de:20:c3:b9:47:20:8f:36:
                    0e:5a:3f:96:4b:b3:30:89:47:e3:13:1d:e2:98:fb:
                    ac:24:5c:06:bf:99:72:aa:4c:45:5b:dc:f0:b8:c0:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3C:A5:AE:82:DD:F6:63:3E:EB:BD:01:C6:5D:C7:88:C9:05:6E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:aa:1a:f8:4b:f7:d2:2e:45:05:c6:44:54:aa:1b:31:86:5f:
         28:dd:77:ab:55:d5:25:d5:f4:09:99:d7:71:b0:be:7a:38:a3:
         2f:ca:1e:17:ac:51:e1:2e:f7:39:60:0d:81:7b:8c:97:a3:46:
         6a:97:0e:03:b1:6a:5d:2d:ef:88:26:58:4b:81:95:dc:25:23:
         b7:16:7a:80:9f:90:53:27:d9:ff:57:e8:94:49:06:9e:92:ec:
         21:ad:06:11:e2:a7:a0:2d:ba:07:2c:e6:c7:56:92:62:08:f0:
         de:c1:1b:f0:34:81:df:13:d0:a1:0f:7e:d3:03:06:f8:73:c8:
         45:d0:cd:a1:0f:be:ba:2f:34:89:7b:a6:28:e4:42:1e:51:e6:
         07:e6:93:d6:50:c7:b5:ff:28:1e:79:24:b7:47:fb:2e:02:88:
         3d:e0:e8:21:ee:da:a2:58:b5:5b:3d:85:de:8c:64:88:db:23:
         6e:3f:c8:41:48:3c:5e:26:2b:68:af:36:af:ff:e4:58:db:98:
         ea:27:b6:fd:e7:24:b6:b0:c4:45:c0:d2:20:b9:d8:e7:55:fb:
         2a:c2:cd:7b:7e:c4:e6:05:32:48:1d:9e:90:6a:3a:7a:a3:28:
         3e:0c:8c:62:fc:7b:cd:3a:45:b9:16:89:f0:da:8b:c4:d1:2b:
         2e:45:e7:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xWv5QCnYHc6ExgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
OGRlMGIwMzQtMDEwMy00N2JkLWEwZGUtZTk5ZWU2ZTk2YjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgjRxiYWahU/Ke5Z1aP5FEFOd5M3kWOyR2iK
r1NxsJ/Yi3XRZXFIQ08bI7Ug8KhMFca3HIKUBSBIFlyCZc2RFMWQpBEfwcSexN5b
fUqSzFCui77ra5OX/3VKpvuneHJjVSRt9LTeOxeEhPcP4kQIfkPGUcg9wnCKQwYf
oIRIllBmptQLtFFvdee6y+O0r9f+3VCaY12tinWOz9pguBggYI00X/Rgr8j/WqRw
svTNoT8S+rNOfyiioysU9Kkp67gHgMIR30ecNB43ZFF+m1cg2/BrxBcm/kpi3iDD
uUcgjzYOWj+WS7MwiUfjEx3imPusJFwGv5lyqkxFW9zwuMDLJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL48pa6C3fZjPuu9AcZdx4jJBW5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZWUxOWM0NjItZjY5ZC0z
OGNlLTg3ZDItN2NkMWIzYjM4ZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiqGvhL99IuRQXGRFSqGzGGXyjdd6tV1SXV9AmZ13Gwvno4oy/KHhes
UeEu9zlgDYF7jJejRmqXDgOxal0t74gmWEuBldwlI7cWeoCfkFMn2f9X6JRJBp6S
7CGtBhHip6Atugcs5sdWkmII8N7BG/A0gd8T0KEPftMDBvhzyEXQzaEPvrovNIl7
pijkQh5R5gfmk9ZQx7X/KB55JLdH+y4CiD3g6CHu2qJYtVs9hd6MZIjbI24/yEFI
PF4mK2ivNq//5FjbmOontv3nJLawxEXA0iC52OdV+yrCzXt+xOYFMkgdnpBqOnqj
KD4MjGL8e806RbkWifDai8TRKy5F59w=
-----END CERTIFICATE-----
Generated at Mon May 5 15:29:23 2025 by rpki-client