Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/37d5e105-821d-3991-938c-f7c4cd92d85f.roa
File:                     37d5e105-821d-3991-938c-f7c4cd92d85f.roa (raw, json)
Hash identifier:          MdMqAF/lOk7A8auBfIdvLE95I7Q/iWSeN8+GBPvh3Q0=
Subject key identifier:   39:C4:10:CF:80:AC:DC:BE:85:11:F7:DB:FF:F9:20:56:7A:A6:67:63
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F43285849A1EF7202421ADF6FEFAFCF40
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/37d5e105-821d-3991-938c-f7c4cd92d85f.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        148.5.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:72:02:42:1a:df:6f:ef:af:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=ff51937e-35c3-42de-88c3-6362b3e83bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:b6:70:d8:3c:81:11:b4:8a:a7:3c:cd:13:
                    c0:6a:75:72:cc:d2:01:6d:d8:46:3a:10:cc:db:ef:
                    8e:80:7c:29:e3:48:60:e4:3b:95:5a:9d:86:08:d3:
                    1e:6b:af:35:27:05:ca:86:d1:04:7d:05:fd:7e:87:
                    ab:b5:49:60:27:d2:0c:f3:69:af:ed:cf:1c:38:a2:
                    5e:66:a6:df:2b:80:64:f7:d2:cc:f2:1f:db:07:3a:
                    60:e4:89:34:b6:35:b1:41:ab:f8:87:18:a0:f2:10:
                    ee:08:c8:89:60:5d:a9:b7:46:26:e1:01:7f:c5:98:
                    a6:b8:9a:80:40:e4:99:4b:b7:12:18:16:fc:df:f0:
                    f5:42:f3:51:69:b7:2a:bd:32:a5:51:fe:8f:4d:b4:
                    ed:5c:45:62:d6:78:eb:66:89:92:f6:2e:10:89:26:
                    23:5d:65:ac:6c:2b:2b:9f:bb:5a:0e:64:3c:a9:95:
                    ae:0f:e8:d0:ec:84:ab:be:86:5c:e9:c0:4a:13:a2:
                    70:fb:ad:86:b5:c3:77:b7:a9:42:0c:df:1e:ea:a6:
                    a3:65:8e:67:52:04:7f:d2:e6:a4:36:e6:7b:80:14:
                    17:87:08:6a:04:9a:f0:f6:7e:44:93:b1:9f:f8:12:
                    7b:03:09:81:a5:17:97:9a:44:b2:fb:84:94:0b:d5:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C4:10:CF:80:AC:DC:BE:85:11:F7:DB:FF:F9:20:56:7A:A6:67:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/37d5e105-821d-3991-938c-f7c4cd92d85f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.5.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:d5:39:ab:7d:4c:39:8e:d7:1c:11:14:c3:fe:30:98:c5:
         79:c6:c5:39:ee:de:ed:bd:59:10:8a:c5:06:ff:5b:bb:e2:cb:
         c8:e5:f9:d8:4a:81:ff:ed:c8:a2:e9:71:21:82:aa:3a:77:5d:
         4f:31:ba:d8:74:d0:30:fd:85:a0:b5:14:c8:0c:16:db:2e:b7:
         53:0f:24:1d:34:02:0c:53:5b:10:7f:1c:3c:38:17:a1:08:cb:
         1a:fb:7e:46:33:32:5b:ce:1b:b0:87:f5:2a:54:1c:0a:c8:94:
         dd:6a:48:d7:8c:90:a1:11:db:4b:c7:eb:8b:a3:26:ed:6d:9d:
         7c:aa:3d:8d:8d:38:cb:81:5c:62:14:06:f5:fa:85:a3:ce:12:
         26:8c:bc:13:d5:45:99:0a:bd:eb:17:21:2a:aa:6a:6b:44:e5:
         e9:c5:bd:bb:b9:c3:28:88:8e:79:4a:6d:3a:7a:28:08:6b:8c:
         d6:10:af:4b:a6:e7:32:44:ad:9e:a5:80:43:82:08:7a:7e:2e:
         a2:51:a4:c1:66:82:04:34:1a:c2:6b:97:15:17:52:34:b5:18:
         b8:04:31:94:bc:72:29:21:c6:07:6a:9e:df:4b:b3:c6:16:63:
         9a:da:9b:ca:4c:3b:3a:13:bd:a4:2a:9f:35:9d:5e:d9:f1:35:
         23:1e:5b:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73ICQhrfb++vz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg0ZjQ1YmMtNjFiMy00M2RkLWI4NTgtMGViMWE2YTdi
NzJlMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
ZmY1MTkzN2UtMzVjMy00MmRlLTg4YzMtNjM2MmIzZTgzYmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5a2cNg8gRG0iqc8zRPAanVyzNIBbdhGOhDM
2++OgHwp40hg5DuVWp2GCNMea681JwXKhtEEfQX9foertUlgJ9IM82mv7c8cOKJe
ZqbfK4Bk99LM8h/bBzpg5Ik0tjWxQav4hxig8hDuCMiJYF2pt0Ym4QF/xZimuJqA
QOSZS7cSGBb83/D1QvNRabcqvTKlUf6PTbTtXEVi1njrZomS9i4QiSYjXWWsbCsr
n7taDmQ8qZWuD+jQ7ISrvoZc6cBKE6Jw+62GtcN3t6lCDN8e6qajZY5nUgR/0uak
NuZ7gBQXhwhqBJrw9n5Ek7Gf+BJ7AwmBpReXmkSy+4SUC9XXwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnEEM+ArNy+hRH32//5IFZ6pmdjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRm
NDViYy02MWIzLTQzZGQtYjg1OC0wZWIxYTZhN2I3MmUvMzdkNWUxMDUtODIxZC0z
OTkxLTkzOGMtZjdjNGNkOTJkODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTg0ZjQ1YmMtNjFiMy00M2RkLWI4
NTgtMGViMWE2YTdiNzJlLzE4NGY0NWJjLTYxYjMtNDNkZC1iODU4LTBlYjFhNmE3
YjcyZS5jcmwwHwYDVR0jBBgwFoAU1su1+FzryDHOMvoxQFhDa7e70sswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRmNDViYy02MWIzLTQzZGQtYjg1OC0wZWIx
YTZhN2I3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGlAVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtz1TmrfUw5jtccERTD/jCYxXnGxTnu3u29WRCKxQb/W7viy8jl+dhK
gf/tyKLpcSGCqjp3XU8xuth00DD9haC1FMgMFtsut1MPJB00AgxTWxB/HDw4F6EI
yxr7fkYzMlvOG7CH9SpUHArIlN1qSNeMkKER20vH64ujJu1tnXyqPY2NOMuBXGIU
BvX6haPOEiaMvBPVRZkKvesXISqqamtE5enFvbu5wyiIjnlKbTp6KAhrjNYQr0um
5zJErZ6lgEOCCHp+LqJRpMFmggQ0GsJrlxUXUjS1GLgEMZS8cikhxgdqnt9Ls8YW
Y5ram8pMOzoTvaQqnzWdXtnxNSMeW38=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:14 2025 by rpki-client