Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/054eb023-6180-34c4-bf2d-5ad0538099ae.roa
File:                     054eb023-6180-34c4-bf2d-5ad0538099ae.roa (raw, json)
Hash identifier:          lf0I2zrfHYzzJRm6iQycYooTsfWgqlV2rYb+feBZKQw=
Subject key identifier:   9D:39:7F:F7:F6:BF:DD:7D:53:78:45:9A:C3:F5:91:CC:2F:71:B7:00
Certificate issuer:       /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Certificate serial:       010D0C9F432858498CFF1C5D2AC232F01ECFB980
Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/054eb023-6180-34c4-bf2d-5ad0538099ae.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     10753
IP address blocks:        192.228.19.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1c:5d:2a:c2:32:f0:1e:cf:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=a87af87d-c551-450b-a788-ae865e32374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f6:61:80:a2:dc:c5:67:30:25:60:84:53:c2:
                    a5:0d:b0:af:44:ba:82:c5:c9:be:14:d9:2a:83:c8:
                    cf:55:79:b6:50:93:28:a7:c8:05:76:e7:19:7a:2f:
                    ae:79:81:44:16:7d:7d:9c:22:a5:3a:8c:56:c8:1c:
                    92:ac:f7:0a:36:5d:25:96:e8:b3:45:62:2a:e3:8b:
                    e1:25:4d:f4:67:e9:2b:f5:c0:38:20:11:d8:d7:86:
                    5b:d3:da:ae:3a:30:3f:10:50:d6:7f:13:9b:38:1e:
                    7e:5d:10:07:c8:dc:b0:2f:6f:af:01:01:08:85:b5:
                    f9:05:76:45:2c:50:84:10:d6:19:99:09:36:75:6f:
                    6d:f5:fa:b1:79:9d:b7:de:99:69:a0:a4:3c:8d:12:
                    68:d8:9c:29:46:54:e7:6e:6b:77:73:0f:cb:f7:8d:
                    45:44:ed:4c:05:5c:27:2c:1f:67:28:43:38:f2:5d:
                    36:fe:d8:eb:01:50:3a:9c:80:3d:dd:75:9c:3c:b5:
                    52:00:b7:ec:01:40:15:76:fe:21:ca:4f:32:12:37:
                    1b:45:ad:84:ea:3a:96:3b:f1:b8:23:37:8e:49:c1:
                    aa:ff:6b:53:8c:4e:69:07:be:20:69:ed:e3:7d:c6:
                    70:56:b8:7a:bd:68:2c:28:be:a3:36:29:07:e3:f1:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:39:7F:F7:F6:BF:DD:7D:53:78:45:9A:C3:F5:91:CC:2F:71:B7:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/054eb023-6180-34c4-bf2d-5ad0538099ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:6f:13:e1:33:bc:32:53:c9:0d:ab:1d:63:c5:b4:e4:25:
         77:be:41:aa:b3:84:0f:ae:b2:ad:81:d8:01:d2:15:54:e5:11:
         07:7a:57:39:0f:1b:fb:20:06:4e:a1:c8:9b:80:6c:2d:20:5d:
         04:8a:02:ad:94:92:a2:01:c4:e4:41:87:66:8a:25:e6:48:e1:
         a7:f9:79:de:dd:0f:2f:45:60:83:7d:c4:da:21:dd:66:3e:40:
         b4:2e:c4:5d:86:01:4f:be:39:ff:40:35:a3:2a:20:e6:09:eb:
         9d:95:0d:2a:e3:4a:48:ff:51:00:01:f6:00:85:b9:f0:11:ab:
         ab:dd:21:f1:ec:19:a4:f0:f2:72:be:1a:2f:10:77:9e:69:21:
         34:0b:c9:f3:d0:dd:91:92:71:0f:87:47:ee:23:1d:a4:fe:ad:
         13:b2:14:c0:7d:76:3e:ab:87:20:95:77:fd:75:0b:88:10:80:
         8b:27:3e:e4:1c:e7:1d:c5:92:db:b2:4d:86:76:0c:12:d2:cf:
         11:72:e7:15:e4:fd:b3:95:ec:b9:dd:87:a7:87:0d:f3:c0:1e:
         38:5c:e9:57:4f:8f:f0:5f:7c:db:e5:d0:a5:43:67:ce:a7:99:
         ee:91:2f:aa:ad:1c:c7:a7:84:eb:a2:e5:21:cc:27:f8:df:39:
         aa:66:19:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xxdKsIy8B7PuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk
NGNiMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
YTg3YWY4N2QtYzU1MS00NTBiLWE3ODgtYWU4NjVlMzIzNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPZhgKLcxWcwJWCEU8KlDbCvRLqCxcm+FNkq
g8jPVXm2UJMop8gFducZei+ueYFEFn19nCKlOoxWyBySrPcKNl0lluizRWIq44vh
JU30Z+kr9cA4IBHY14Zb09quOjA/EFDWfxObOB5+XRAHyNywL2+vAQEIhbX5BXZF
LFCEENYZmQk2dW9t9fqxeZ233plpoKQ8jRJo2JwpRlTnbmt3cw/L941FRO1MBVwn
LB9nKEM48l02/tjrAVA6nIA93XWcPLVSALfsAUAVdv4hyk8yEjcbRa2E6jqWO/G4
IzeOScGq/2tTjE5pB74gae3jfcZwVrh6vWgsKL6jNikH4/HC1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ05f/f2v919U3hFmsP1kcwvcbcAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi
ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvMDU0ZWIwMjMtNjE4MC0z
NGM0LWJmMmQtNWFkMDUzODA5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz
N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5
ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw
YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuzbxPhM7wyU8kNqx1jxbTkJXe+QaqzhA+usq2B2AHSFVTlEQd6VzkP
G/sgBk6hyJuAbC0gXQSKAq2UkqIBxORBh2aKJeZI4af5ed7dDy9FYIN9xNoh3WY+
QLQuxF2GAU++Of9ANaMqIOYJ652VDSrjSkj/UQAB9gCFufARq6vdIfHsGaTw8nK+
Gi8Qd55pITQLyfPQ3ZGScQ+HR+4jHaT+rROyFMB9dj6rhyCVd/11C4gQgIsnPuQc
5x3FktuyTYZ2DBLSzxFy5xXk/bOV7Lndh6eHDfPAHjhc6VdPj/BffNvl0KVDZ86n
me6RL6qtHMenhOui5SHMJ/jfOapmGSg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:24:45 2025 by rpki-client