Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa
File:                     c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa (raw, json)
Hash identifier:          C+0OxQYSiqgPsLNP4aqXS1WwtyOAZ6tA4dvdbhykKtA=
Subject key identifier:   9F:9C:0B:B2:AC:A4:05:8F:46:12:96:73:F6:99:EB:68:A0:CB:54:A0
Certificate issuer:       /CN=01430e13-506f-444b-8727-f36154b32c07
Certificate serial:       010D0C9F43285849B149F6B3DF35CF3F48247DE0
Authority key identifier: 49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     46256
IP address blocks:        198.217.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:f6:b3:df:35:cf:3f:48:24:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01430e13-506f-444b-8727-f36154b32c07
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=e91c911f-913c-4145-b144-adb57a39572d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:54:af:fd:ba:74:e4:d3:47:17:fc:37:72:
                    95:b3:bd:5b:03:9c:a4:a5:34:d5:df:6e:6e:2f:37:
                    17:43:67:88:b4:3e:22:23:b1:7d:d7:ff:e6:54:fb:
                    ab:e9:67:b9:25:0b:02:16:60:7f:8f:d0:6b:f7:18:
                    6d:a2:6e:eb:3f:43:df:74:e2:d0:c0:e1:9e:2f:dd:
                    4d:06:32:8f:99:bc:e5:f1:19:e9:3e:77:20:0b:a8:
                    a3:9d:49:cb:cd:14:54:bb:7e:84:74:7f:0b:b7:03:
                    98:46:7b:47:c1:cf:f4:66:87:ac:e5:6e:2b:1e:77:
                    f0:f4:ff:dc:94:5e:de:a4:2b:c4:aa:5d:f8:80:6f:
                    bb:53:ab:9b:72:f6:67:90:42:06:8b:a7:a7:96:6a:
                    0b:c7:d3:f7:8d:6b:39:9f:e7:8d:e5:8e:38:54:bd:
                    0d:97:ec:2d:80:4a:db:33:88:e7:16:7a:99:fb:c8:
                    d0:5d:62:1b:d2:9d:6c:b3:83:88:bf:e3:30:67:66:
                    b1:f7:dd:4e:68:e2:dd:db:e7:4b:ba:8d:31:17:95:
                    c9:eb:b7:42:45:f0:73:27:af:33:36:9a:f7:72:04:
                    8e:e6:81:d7:da:e0:f6:3a:2c:d0:4d:fa:c0:f3:21:
                    46:3e:ae:cf:e7:eb:8b:11:a5:1f:8f:3b:b2:e5:4b:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9C:0B:B2:AC:A4:05:8F:46:12:96:73:F6:99:EB:68:A0:CB:54:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/c8d20943-c459-32dc-bb1b-21a6aaa29f13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.crl

            X509v3 Authority Key Identifier:
                keyid:49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9c:3a:49:d4:b3:8b:5f:70:bd:46:a4:9f:ec:97:81:01:45:
         5a:e3:10:02:88:5d:59:30:bd:fc:d4:ee:df:5d:36:67:76:56:
         8a:1d:e2:9b:04:18:2a:bd:03:0b:aa:b0:41:1f:e8:39:78:85:
         ac:4e:d3:57:84:e0:ca:7f:ee:5a:88:2b:22:43:f1:83:86:75:
         35:92:4d:ff:7c:33:9f:7f:bf:5d:19:25:d3:a3:83:74:b6:f0:
         70:a2:72:13:a6:84:3d:b7:b8:05:61:43:ad:1a:6b:53:70:fa:
         d3:08:39:b7:19:8f:f7:68:33:29:62:99:25:81:17:7a:81:5b:
         3a:80:f8:e6:72:15:e7:88:68:14:f4:e3:4d:dd:e1:06:23:7b:
         51:38:a0:d4:8c:81:11:59:5e:f7:3b:35:91:dc:19:e7:bf:a8:
         cc:70:a5:20:43:62:85:09:da:a0:a6:87:e1:c2:94:cf:43:cf:
         b7:4b:c1:dd:aa:e6:3c:8f:d7:ce:8b:bd:c2:f4:0e:e6:e6:9c:
         8e:b6:21:ed:c4:b9:3b:bd:2a:07:3e:87:f5:a0:80:16:2e:22:
         3c:31:1c:5b:47:68:a3:7a:f4:ba:06:7c:66:e8:12:e0:f7:6c:
         08:f8:10:5f:21:da:15:65:bd:39:10:7b:36:5d:3f:a4:33:66:
         41:c8:86:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfaz3zXPP0gkfeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE0MzBlMTMtNTA2Zi00NDRiLTg3MjctZjM2MTU0YjMy
YzA3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
ZTkxYzkxMWYtOTEzYy00MTQ1LWIxNDQtYWRiNTdhMzk1NzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfNUr/26dOTTRxf8N3KVs71bA5ykpTTV325u
LzcXQ2eItD4iI7F91//mVPur6We5JQsCFmB/j9Br9xhtom7rP0PfdOLQwOGeL91N
BjKPmbzl8RnpPncgC6ijnUnLzRRUu36EdH8LtwOYRntHwc/0Zoes5W4rHnfw9P/c
lF7epCvEql34gG+7U6ubcvZnkEIGi6enlmoLx9P3jWs5n+eN5Y44VL0Nl+wtgErb
M4jnFnqZ+8jQXWIb0p1ss4OIv+MwZ2ax991OaOLd2+dLuo0xF5XJ67dCRfBzJ68z
Npr3cgSO5oHX2uD2OizQTfrA8yFGPq7P5+uLEaUfjzuy5UvzOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+cC7KspAWPRhKWc/aZ62igy1SgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMTQz
MGUxMy01MDZmLTQ0NGItODcyNy1mMzYxNTRiMzJjMDcvYzhkMjA5NDMtYzQ1OS0z
MmRjLWJiMWItMjFhNmFhYTI5ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDE0MzBlMTMtNTA2Zi00NDRiLTg3
MjctZjM2MTU0YjMyYzA3LzAxNDMwZTEzLTUwNmYtNDQ0Yi04NzI3LWYzNjE1NGIz
MmMwNy5jcmwwHwYDVR0jBBgwFoAUSZ3GhVXxbkemQmYr+iuaFpHKKt8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMTQzMGUxMy01MDZmLTQ0NGItODcyNy1mMzYx
NTRiMzJjMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExtlgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWcOknUs4tfcL1GpJ/sl4EBRVrjEAKIXVkwvfzU7t9dNmd2Vood4psE
GCq9AwuqsEEf6Dl4haxO01eE4Mp/7lqIKyJD8YOGdTWSTf98M59/v10ZJdOjg3S2
8HCichOmhD23uAVhQ60aa1Nw+tMIObcZj/doMylimSWBF3qBWzqA+OZyFeeIaBT0
403d4QYje1E4oNSMgRFZXvc7NZHcGee/qMxwpSBDYoUJ2qCmh+HClM9Dz7dLwd2q
5jyP186LvcL0DubmnI62Ie3EuTu9Kgc+h/WggBYuIjwxHFtHaKN69LoGfGboEuD3
bAj4EF8h2hVlvTkQezZdP6QzZkHIhls=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:21:16 2025 by rpki-client