Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa
File:                     e8b6acee-814e-3fb7-815b-3025078610e3.roa (raw, json)
Hash identifier:          j+Eim55og3T8br22flis5+KRr//EtJZ/ws0aZ2sDEWQ=
Subject key identifier:   D4:DC:A5:74:C1:4C:9E:19:61:12:0D:57:BF:04:F9:7C:79:6D:E9:8E
Certificate issuer:       /CN=b7364c96-947b-4136-b697-c8cff591a8ec
Certificate serial:       010D0C9F432858493C09275DC7FDAD714E152C80
Authority key identifier: 95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     16844
IP address blocks:        198.190.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:27:5d:c7:fd:ad:71:4e:15:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7364c96-947b-4136-b697-c8cff591a8ec
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=0d9f1721-d688-4692-b387-0bf9e59e7cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:b0:f5:9f:e7:7f:85:c6:42:b9:44:f8:46:
                    a7:29:03:2e:39:7c:e6:b1:a1:97:29:1a:07:6a:11:
                    e7:a7:fe:23:fe:e3:d8:67:3e:0c:43:ea:45:90:03:
                    9f:4d:bb:89:e7:c0:ba:dc:78:b8:dc:00:48:7d:83:
                    83:bd:5b:07:69:de:a0:4b:22:25:74:e9:38:04:f4:
                    2a:d9:fa:84:dd:27:1c:c7:a1:a3:cc:70:73:9a:02:
                    09:ac:8d:39:fe:91:26:a5:ed:d4:79:6c:31:d6:36:
                    9b:08:64:da:fa:3f:52:9a:a3:ff:57:23:7c:cc:fd:
                    91:c8:45:69:5e:36:5f:f7:c4:ef:be:ef:88:f2:e8:
                    72:da:e3:b8:64:41:b6:45:87:2a:9a:19:5b:51:76:
                    a8:83:3b:97:ad:14:ac:2a:a8:79:d9:63:26:77:2a:
                    c2:d1:a5:89:97:43:8b:e0:cb:8e:f1:9c:56:bf:c4:
                    1a:b8:a9:c9:c7:11:6b:de:a7:6d:aa:bd:7d:48:38:
                    c0:cb:82:e8:d7:40:c8:78:bd:0a:1a:2c:db:22:cc:
                    66:70:8a:0b:08:57:7d:35:27:ad:a1:5b:28:24:df:
                    ec:cb:46:26:75:e7:aa:b6:97:ed:8a:9a:5c:ab:ee:
                    1d:61:82:2b:4b:17:33:af:5b:98:f2:f7:14:3c:6b:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DC:A5:74:C1:4C:9E:19:61:12:0D:57:BF:04:F9:7C:79:6D:E9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/e8b6acee-814e-3fb7-815b-3025078610e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec/b7364c96-947b-4136-b697-c8cff591a8ec.crl

            X509v3 Authority Key Identifier:
                keyid:95:66:5C:73:34:CD:29:7F:6A:F8:D1:F1:9C:1F:D6:C2:43:6D:35:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b7364c96-947b-4136-b697-c8cff591a8ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:2e:56:3d:30:41:29:9b:c9:42:14:f4:20:c8:c0:a5:17:
         b0:5b:f7:6f:ab:bf:6b:79:6f:42:2d:0f:8e:b4:21:dc:da:65:
         28:c2:c1:17:03:06:fb:51:ee:94:91:59:63:63:fc:c7:8b:ad:
         86:d8:81:97:65:8b:e1:69:e2:8f:57:aa:ff:28:0e:f8:9c:1c:
         1b:9a:c6:0a:57:13:df:cb:b8:7b:0a:d9:83:00:21:0b:ac:21:
         24:c2:49:9d:da:27:dc:89:b6:7f:f9:7e:06:fb:4e:67:d0:e1:
         58:88:b4:f1:16:4f:2a:20:16:47:68:be:5f:08:59:e1:7e:99:
         49:be:c7:91:12:32:8f:19:75:9e:5b:44:42:e4:05:9d:23:31:
         64:a1:74:33:e9:73:22:32:ac:09:db:90:fe:fa:17:cc:6f:9b:
         c8:92:40:02:6e:14:52:7e:1f:85:9c:1e:93:2f:a5:bd:0e:32:
         c2:da:a5:52:91:fc:86:48:b9:7f:8e:81:6c:ae:d3:0c:ae:97:
         8d:5e:87:e4:58:06:cd:0b:de:b3:91:2c:9e:5f:22:95:38:c6:
         43:93:d4:60:7e:6b:ea:78:18:85:94:cc:bb:c9:41:c0:c1:96:
         24:bf:0c:7a:bd:fa:0d:62:0f:30:ee:c2:24:1c:de:37:6f:93:
         09:f2:bb:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSddx/2tcU4VLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjczNjRjOTYtOTQ3Yi00MTM2LWI2OTctYzhjZmY1OTFh
OGVjMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MGQ5ZjE3MjEtZDY4OC00NjkyLWIzODctMGJmOWU1OWU3Y2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomKw9Z/nf4XGQrlE+EanKQMuOXzmsaGXKRoH
ahHnp/4j/uPYZz4MQ+pFkAOfTbuJ58C63Hi43ABIfYODvVsHad6gSyIldOk4BPQq
2fqE3Sccx6GjzHBzmgIJrI05/pEmpe3UeWwx1jabCGTa+j9SmqP/VyN8zP2RyEVp
XjZf98Tvvu+I8uhy2uO4ZEG2RYcqmhlbUXaogzuXrRSsKqh52WMmdyrC0aWJl0OL
4MuO8ZxWv8QauKnJxxFr3qdtqr19SDjAy4Lo10DIeL0KGizbIsxmcIoLCFd9NSet
oVsoJN/sy0Ymdeeqtpftippcq+4dYYIrSxczr1uY8vcUPGszrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTcpXTBTJ4ZYRINV78E+Xx5bemOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzM2
NGM5Ni05NDdiLTQxMzYtYjY5Ny1jOGNmZjU5MWE4ZWMvZThiNmFjZWUtODE0ZS0z
ZmI3LTgxNWItMzAyNTA3ODYxMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjczNjRjOTYtOTQ3Yi00MTM2LWI2
OTctYzhjZmY1OTFhOGVjL2I3MzY0Yzk2LTk0N2ItNDEzNi1iNjk3LWM4Y2ZmNTkx
YThlYy5jcmwwHwYDVR0jBBgwFoAUlWZcczTNKX9q+NHxnB/WwkNtNZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzM2NGM5Ni05NDdiLTQxMzYtYjY5Ny1jOGNm
ZjU5MWE4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxr4OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7wLlY9MEEpm8lCFPQgyMClF7Bb92+rv2t5b0ItD460IdzaZSjCwRcD
BvtR7pSRWWNj/MeLrYbYgZdli+Fp4o9Xqv8oDvicHBuaxgpXE9/LuHsK2YMAIQus
ISTCSZ3aJ9yJtn/5fgb7TmfQ4ViItPEWTyogFkdovl8IWeF+mUm+x5ESMo8ZdZ5b
RELkBZ0jMWShdDPpcyIyrAnbkP76F8xvm8iSQAJuFFJ+H4WcHpMvpb0OMsLapVKR
/IZIuX+OgWyu0wyul41eh+RYBs0L3rORLJ5fIpU4xkOT1GB+a+p4GIWUzLvJQcDB
liS/DHq9+g1iDzDuwiQc3jdvkwnyu3I=
-----END CERTIFICATE-----
Generated at Sat May 10 07:16:07 2025 by rpki-client