Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
File:                     aa132d09-6f7c-30f0-91e8-edc325846360.roa (raw, json)
Hash identifier:          7gQSkmOQ8P9jJnJNtH0qL4pnoBNHHaTaEehTHRSMaDw=
Subject key identifier:   9F:51:99:90:54:C8:81:D8:A0:FF:3E:C6:78:CE:70:DA:25:76:1A:5E
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F432858493ED3CBAC369814DDB1FD1D80
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     55091
IP address blocks:        198.73.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:cb:ac:36:98:14:dd:b1:fd:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=98096ecc-14b6-4d77-8b13-893d5b79cf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:9f:fb:62:82:ec:4b:5f:f0:52:90:06:87:
                    fd:03:8a:75:9b:c9:fb:3a:98:03:5c:a3:3d:e9:1e:
                    3a:23:25:51:9b:a9:77:3d:42:2f:e6:ac:42:dc:02:
                    bd:ab:54:11:b1:83:b4:c9:75:52:a6:28:1b:ba:ac:
                    f7:b4:bb:56:0f:9a:72:a1:0c:0a:50:cd:c7:35:9a:
                    14:03:8b:8d:16:83:31:40:00:61:7c:ea:9f:86:7f:
                    2f:0b:e2:45:b9:f0:d1:a6:b2:f8:d3:09:0c:1c:b7:
                    64:08:3d:af:12:34:41:a8:ac:ef:1f:7f:84:5e:77:
                    9a:6b:f7:35:c7:b6:d0:81:81:20:17:41:a5:ca:f4:
                    ec:92:8c:00:fa:31:5f:b7:c9:cb:1c:c5:1b:0a:6a:
                    35:9b:30:5e:d4:da:55:38:39:60:74:60:88:8a:b5:
                    b9:c5:0c:b1:11:5c:b4:6a:94:26:d5:34:b8:55:80:
                    5a:87:73:b0:07:7e:c9:13:d4:99:40:71:76:ee:39:
                    5c:c3:25:f0:b5:6c:15:16:a4:2e:a8:bd:0f:19:cc:
                    8f:6e:13:bf:77:bb:bd:3f:e7:31:46:0f:13:26:8c:
                    51:15:af:36:a5:c6:f9:01:78:5b:fb:7a:73:64:31:
                    0f:ef:62:8a:73:36:29:ec:aa:e9:2a:5c:63:22:f7:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:51:99:90:54:C8:81:D8:A0:FF:3E:C6:78:CE:70:DA:25:76:1A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:74:7f:71:7f:d9:24:f8:20:b1:54:2a:0e:6f:16:fe:39:17:
         67:ca:99:d8:ce:de:28:9a:7f:a2:e4:b7:25:0d:34:f1:3f:c7:
         4b:c9:84:33:20:f5:db:d2:02:8c:61:36:72:db:86:a9:b2:5f:
         dd:20:00:ef:12:d2:f5:f6:cf:61:a6:0a:76:7c:37:97:d6:a7:
         cc:59:b6:07:1c:9c:62:fd:fe:2a:af:28:d0:8b:1d:26:3b:92:
         6b:49:4a:53:5e:dd:f1:75:73:c2:2e:ac:83:3d:59:8d:e4:d1:
         c6:64:2f:81:3d:7e:95:5c:32:72:76:1f:81:d8:27:42:1b:f7:
         83:e9:d8:94:75:de:ac:41:0b:0c:08:c7:61:fb:a7:d3:ca:44:
         18:46:a9:33:ff:f6:c0:78:3d:5a:65:dd:3c:ff:83:00:79:1b:
         43:0d:d6:12:8f:4f:78:ae:14:a6:10:b0:9d:41:e8:40:cf:57:
         be:55:63:b6:e6:a5:39:95:c6:83:43:c2:9f:be:01:df:4f:7a:
         59:58:ac:64:e9:cb:21:88:88:84:50:cc:9b:2d:97:8b:ab:f8:
         f7:7b:51:7b:45:94:c5:85:a5:1b:78:17:76:ab:26:c0:4c:ef:
         8b:14:cc:04:50:75:e2:b8:2d:54:ee:a8:6e:da:0d:5b:5d:b4:
         12:a3:55:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+08usNpgU3bH9HYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhNzUyNjEtNGUyNy00NzhhLThmOWUtNzFhOTkxNWNl
OWI0MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
OTgwOTZlY2MtMTRiNi00ZDc3LThiMTMtODkzZDViNzljZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOSf+2KC7Etf8FKQBof9A4p1m8n7OpgDXKM9
6R46IyVRm6l3PUIv5qxC3AK9q1QRsYO0yXVSpigbuqz3tLtWD5pyoQwKUM3HNZoU
A4uNFoMxQABhfOqfhn8vC+JFufDRprL40wkMHLdkCD2vEjRBqKzvH3+EXneaa/c1
x7bQgYEgF0GlyvTskowA+jFft8nLHMUbCmo1mzBe1NpVODlgdGCIirW5xQyxEVy0
apQm1TS4VYBah3OwB37JE9SZQHF27jlcwyXwtWwVFqQuqL0PGcyPbhO/d7u9P+cx
Rg8TJoxRFa82pcb5AXhb+3pzZDEP72KKczYp7KrpKlxjIvciTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9RmZBUyIHYoP8+xnjOcNoldhpeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3
NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5OTE1Y2U5YjQvYWExMzJkMDktNmY3Yy0z
MGYwLTkxZTgtZWRjMzI1ODQ2MzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTZhNzUyNjEtNGUyNy00NzhhLThm
OWUtNzFhOTkxNWNlOWI0LzU2YTc1MjYxLTRlMjctNDc4YS04ZjllLTcxYTk5MTVj
ZTliNC5jcmwwHwYDVR0jBBgwFoAUpD4W+eX7d/UJhUBw50W6Yj2uG0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5
OTE1Y2U5YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkkPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADd0f3F/2ST4ILFUKg5vFv45F2fKmdjO3iiaf6LktyUNNPE/x0vJhDMg
9dvSAoxhNnLbhqmyX90gAO8S0vX2z2GmCnZ8N5fWp8xZtgccnGL9/iqvKNCLHSY7
kmtJSlNe3fF1c8IurIM9WY3k0cZkL4E9fpVcMnJ2H4HYJ0Ib94Pp2JR13qxBCwwI
x2H7p9PKRBhGqTP/9sB4PVpl3Tz/gwB5G0MN1hKPT3iuFKYQsJ1B6EDPV75VY7bm
pTmVxoNDwp++Ad9PellYrGTpyyGIiIRQzJstl4ur+Pd7UXtFlMWFpRt4F3arJsBM
74sUzARQdeK4LVTuqG7aDVtdtBKjVQ4=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:40:31 2025 by rpki-client