Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa
File:                     d51e2141-526f-3d50-85c1-f992569c4005.roa (raw, json)
Hash identifier:          qc67SkwNn2P244Vw4TDTNaoa8YtuVnPw5d/29BFOA8M=
Subject key identifier:   B1:5C:87:DF:B0:20:17:C7:49:50:70:8D:40:55:C8:74:B1:C3:61:17
Certificate issuer:       /CN=a54703a4-3daa-455c-8724-7af942d1a391
Certificate serial:       010D0C9F432858495C243CBDB17A9E8DACFFEA80
Authority key identifier: C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        192.107.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3c:bd:b1:7a:9e:8d:ac:ff:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54703a4-3daa-455c-8724-7af942d1a391
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=14ca1d92-be0e-45ee-b6cd-38ebf07d9687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:0a:8d:bf:ce:9b:31:91:96:ee:58:79:e4:
                    36:fa:99:dc:17:8b:07:b9:13:33:ab:4d:c2:ec:c9:
                    ae:44:cc:9f:7f:52:92:9b:ff:49:ad:bd:c6:5e:21:
                    7a:d4:94:6d:7c:37:02:e1:71:c8:7f:f3:6d:22:58:
                    c7:7d:41:3a:42:01:9f:ad:35:1a:5b:ed:6e:cc:8d:
                    d6:48:2d:00:25:77:79:90:8c:9c:df:e0:06:60:6b:
                    e7:a8:d7:7b:1e:6c:bb:a9:93:04:d6:b9:3f:aa:2b:
                    f3:8b:11:3b:85:0c:95:da:1e:7e:7c:f1:eb:1e:a5:
                    80:26:80:72:e0:71:a7:72:93:2c:a1:1a:1d:88:66:
                    69:8e:3e:03:b9:c2:6f:fe:03:03:2d:f3:0d:37:40:
                    a7:7d:0b:ed:75:71:c7:a4:dd:51:db:64:46:10:ee:
                    25:1a:c6:1a:80:14:4d:76:04:f3:59:17:2c:79:16:
                    79:47:18:f1:fa:64:63:fc:8c:93:e2:e1:0e:ec:09:
                    48:94:6e:42:cf:2d:64:1a:9c:66:ff:8e:de:57:44:
                    dc:87:32:8c:96:78:aa:f5:65:46:0a:df:ff:f8:cf:
                    34:65:2f:a1:ff:4f:39:56:a2:ee:98:fd:6d:e8:8d:
                    a2:87:23:a0:3f:73:ef:f1:73:14:cd:69:c7:50:c3:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5C:87:DF:B0:20:17:C7:49:50:70:8D:40:55:C8:74:B1:C3:61:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/d51e2141-526f-3d50-85c1-f992569c4005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391/a54703a4-3daa-455c-8724-7af942d1a391.crl

            X509v3 Authority Key Identifier:
                keyid:C1:6C:5C:8A:3F:77:F6:A9:08:27:D4:A0:9D:84:80:E4:DD:DD:ED:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a54703a4-3daa-455c-8724-7af942d1a391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a0:94:18:83:8c:62:8c:6f:ff:9f:3e:79:55:6c:3a:30:20:
         cb:ca:f2:10:ea:d5:8f:54:1a:19:01:d0:01:bb:25:f8:99:8f:
         d9:b2:8b:31:92:f4:96:c9:b2:00:ad:15:5d:a8:93:47:cd:26:
         35:8a:e3:3b:59:53:be:21:20:53:8e:80:92:13:91:7d:d9:ac:
         7e:dc:7b:69:44:02:70:1e:97:ab:d2:fe:62:9b:e1:ef:ad:65:
         98:22:2e:74:71:b4:da:b2:b0:36:1c:4c:44:8e:63:f0:39:85:
         9c:b5:9a:60:9e:31:4a:f3:f0:98:4c:45:2e:81:81:f8:cf:84:
         8b:ed:35:20:c9:8c:0d:63:d7:d5:1f:64:36:21:fe:be:ee:08:
         73:75:9e:75:c2:d7:10:67:c5:df:6b:c9:b9:b9:b3:ab:03:82:
         79:7f:f8:a7:d8:7c:85:3a:db:26:52:85:06:01:cd:6a:79:68:
         c6:34:a2:86:e2:f3:8c:38:71:37:97:93:63:4e:fc:e9:7f:28:
         76:8b:f8:62:ca:dd:f5:8c:ed:39:ec:8a:22:c2:22:fd:49:65:
         40:02:65:09:e1:70:b5:3e:ed:e9:4f:72:c9:2b:48:97:56:07:
         3a:c9:b9:08:56:a9:2a:5e:d3:99:bc:86:0a:f9:b1:67:03:ce:
         e5:c0:ea:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDy9sXqejaz/6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU0NzAzYTQtM2RhYS00NTVjLTg3MjQtN2FmOTQyZDFh
MzkxMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
MTRjYTFkOTItYmUwZS00NWVlLWI2Y2QtMzhlYmYwN2Q5Njg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5sKjb/OmzGRlu5YeeQ2+pncF4sHuRMzq03C
7MmuRMyff1KSm/9Jrb3GXiF61JRtfDcC4XHIf/NtIljHfUE6QgGfrTUaW+1uzI3W
SC0AJXd5kIyc3+AGYGvnqNd7Hmy7qZME1rk/qivzixE7hQyV2h5+fPHrHqWAJoBy
4HGncpMsoRodiGZpjj4DucJv/gMDLfMNN0CnfQvtdXHHpN1R22RGEO4lGsYagBRN
dgTzWRcseRZ5Rxjx+mRj/IyT4uEO7AlIlG5Czy1kGpxm/47eV0TchzKMlniq9WVG
Ct//+M80ZS+h/085VqLumP1t6I2ihyOgP3Pv8XMUzWnHUMOlUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFch9+wIBfHSVBwjUBVyHSxw2EXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3
MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5NDJkMWEzOTEvZDUxZTIxNDEtNTI2Zi0z
ZDUwLTg1YzEtZjk5MjU2OWM0MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTU0NzAzYTQtM2RhYS00NTVjLTg3
MjQtN2FmOTQyZDFhMzkxL2E1NDcwM2E0LTNkYWEtNDU1Yy04NzI0LTdhZjk0MmQx
YTM5MS5jcmwwHwYDVR0jBBgwFoAUwWxcij939qkIJ9SgnYSA5N3d7fMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNTQ3MDNhNC0zZGFhLTQ1NWMtODcyNC03YWY5
NDJkMWEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGuFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiglBiDjGKMb/+fPnlVbDowIMvK8hDq1Y9UGhkB0AG7JfiZj9myizGS
9JbJsgCtFV2ok0fNJjWK4ztZU74hIFOOgJITkX3ZrH7ce2lEAnAel6vS/mKb4e+t
ZZgiLnRxtNqysDYcTESOY/A5hZy1mmCeMUrz8JhMRS6BgfjPhIvtNSDJjA1j19Uf
ZDYh/r7uCHN1nnXC1xBnxd9rybm5s6sDgnl/+KfYfIU62yZShQYBzWp5aMY0oobi
84w4cTeXk2NO/Ol/KHaL+GLK3fWM7TnsiiLCIv1JZUACZQnhcLU+7elPcskrSJdW
BzrJuQhWqSpe05m8hgr5sWcDzuXA6sI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:51:50 2025 by rpki-client