Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32440121-925a-3115-b4ef-672dfb8a6c8a.roa
File:                     32440121-925a-3115-b4ef-672dfb8a6c8a.roa (raw, json)
Hash identifier:          viO8XqMZe6d73/DVYRhY0vtsIOXc+yC7tK/YQ6jWi/Y=
Subject key identifier:   5E:95:68:14:72:EF:E8:68:BA:0C:2B:62:95:27:7D:CB:33:20:76:6B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAB64D834EA7907CE66BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32440121-925a-3115-b4ef-672dfb8a6c8a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        198.45.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:b6:4d:83:4e:a7:90:7c:e6:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=06b35bd8-e669-4e9e-bd0e-11fd3af097fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:41:dc:57:26:bc:16:c5:5e:d7:42:5f:59:
                    96:7b:66:7a:fb:a9:a1:f7:ce:23:d9:57:22:f9:36:
                    bd:0d:4b:91:ae:f6:84:33:23:7f:41:80:65:31:fe:
                    52:8a:cc:13:a9:0e:ab:58:52:b4:b6:09:20:e4:51:
                    37:a0:78:f5:7b:29:1a:cb:68:b3:7b:d0:a2:db:04:
                    b1:44:33:d4:c1:2a:48:6b:47:e1:31:96:4a:db:04:
                    ad:a7:6f:7f:f1:42:ac:44:f5:c4:90:64:bb:53:f7:
                    75:00:54:24:6c:b4:ac:95:21:0e:85:7a:28:42:a1:
                    a6:60:75:33:0e:d3:ce:3a:59:e9:87:d9:2f:13:ad:
                    a6:fd:f5:19:7f:0a:51:b7:24:50:ca:0d:5c:79:23:
                    2a:d1:b2:71:22:58:17:85:be:3a:6c:95:ba:b4:25:
                    03:ee:bd:f1:4c:61:eb:47:56:f4:31:20:61:39:49:
                    3b:77:bb:96:ac:6a:22:6b:ff:cd:0c:3a:5a:87:58:
                    79:54:4d:48:d3:ca:5f:bd:54:99:3f:6a:b4:b3:31:
                    cd:54:9f:a3:25:0d:97:33:4b:2b:89:be:ea:64:4d:
                    e6:84:33:ab:b5:c9:c2:64:ca:19:aa:69:fc:cf:88:
                    ae:7d:a1:a4:77:f5:77:a5:85:48:e4:e8:0d:45:15:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:95:68:14:72:EF:E8:68:BA:0C:2B:62:95:27:7D:CB:33:20:76:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32440121-925a-3115-b4ef-672dfb8a6c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:0f:82:52:89:31:5e:90:aa:55:e9:63:5c:17:0b:b6:52:e2:
         ef:2d:36:0b:8f:e4:a1:1a:ac:47:d8:af:b8:38:7f:5a:66:d6:
         5f:eb:4d:85:d6:16:aa:8e:d3:ef:31:97:bd:dd:db:2c:e7:02:
         bf:63:d4:80:40:15:a4:78:97:d9:b6:ae:57:5e:ac:f2:46:3e:
         dd:c0:4d:80:07:a1:c8:a7:3b:4e:d7:09:ee:10:f3:e3:5f:fe:
         92:57:dd:66:1d:52:e2:fa:ee:ee:29:e0:8a:03:f4:ba:4e:f5:
         9e:49:32:92:e0:e8:8e:c4:f0:fe:4b:e0:40:9b:ce:5f:f1:04:
         31:34:45:e5:eb:40:df:45:63:f7:22:a7:79:36:58:1e:58:c1:
         5c:08:da:b9:5f:1f:2a:88:f0:53:8b:10:ce:c5:c4:12:91:09:
         6f:89:f9:4c:66:8f:b1:3e:2c:1b:c6:ab:02:64:59:91:63:f7:
         3e:31:65:06:e7:99:62:57:68:05:a0:4b:3b:1e:f9:aa:07:e4:
         4f:4f:f6:32:bc:3a:9d:c4:ab:59:93:8a:1e:47:4c:0e:fd:b9:
         3c:fa:47:5c:ae:89:04:87:2f:bd:fa:c4:eb:d7:e7:dc:5a:1f:
         d0:28:9e:fe:33:fa:7d:89:bb:cc:e4:f4:7b:68:14:68:fc:4f:
         6c:ad:82:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurZNg06nkHzma8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MDZiMzViZDgtZTY2OS00ZTllLWJkMGUtMTFmZDNhZjA5N2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF9B3FcmvBbFXtdCX1mWe2Z6+6mh984j2Vci
+Ta9DUuRrvaEMyN/QYBlMf5SiswTqQ6rWFK0tgkg5FE3oHj1eykay2ize9Ci2wSx
RDPUwSpIa0fhMZZK2wStp29/8UKsRPXEkGS7U/d1AFQkbLSslSEOhXooQqGmYHUz
DtPOOlnph9kvE62m/fUZfwpRtyRQyg1ceSMq0bJxIlgXhb46bJW6tCUD7r3xTGHr
R1b0MSBhOUk7d7uWrGoia//NDDpah1h5VE1I08pfvVSZP2q0szHNVJ+jJQ2XM0sr
ib7qZE3mhDOrtcnCZMoZqmn8z4iufaGkd/V3pYVI5OgNRRU09QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6VaBRy7+hougwrYpUnfcszIHZrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzI0NDAxMjEtOTI1YS0z
MTE1LWI0ZWYtNjcyZGZiOGE2YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAPglKJMV6QqlXpY1wXC7ZS4u8tNguP5KEarEfYr7g4f1pm1l/rTYXW
FqqO0+8xl73d2yznAr9j1IBAFaR4l9m2rlderPJGPt3ATYAHocinO07XCe4Q8+Nf
/pJX3WYdUuL67u4p4IoD9LpO9Z5JMpLg6I7E8P5L4ECbzl/xBDE0ReXrQN9FY/ci
p3k2WB5YwVwI2rlfHyqI8FOLEM7FxBKRCW+J+Uxmj7E+LBvGqwJkWZFj9z4xZQbn
mWJXaAWgSzse+aoH5E9P9jK8Op3Eq1mTih5HTA79uTz6R1yuiQSHL736xOvX59xa
H9Aonv4z+n2Ju8zk9HtoFGj8T2ytgvU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:59:53 2025 by rpki-client