Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bb00790e-a3a2-3946-8150-be163d48b16e.roa
File:                     bb00790e-a3a2-3946-8150-be163d48b16e.roa (raw, json)
Hash identifier:          g+UUlaYMp/zvkoQEEWJPTJXVLmxW3DQAfbPYeinhrXY=
Subject key identifier:   D2:F1:AF:D8:84:2A:3E:8B:1B:DD:FB:73:A3:30:7C:CF:F1:42:5B:E2
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584A193A414243CA7E72E35B9820
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bb00790e-a3a2-3946-8150-be163d48b16e.roa
Signing time:             Fri 06 Jun 2025 06:33:21 +0000
ROA not before:           Fri 06 Jun 2025 06:33:21 +0000
ROA not after:            Thu 04 Sep 2025 06:33:21 +0000
asID:                     26879
IP address blocks:        161.129.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:19:3a:41:42:43:ca:7e:72:e3:5b:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Jun  6 06:33:21 2025 GMT
            Not After : Sep  4 06:33:21 2025 GMT
        Subject: CN=80d3b467-af7f-4717-96a8-23c87445c90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2d:f9:1e:ef:4c:48:1b:13:7e:ac:bd:7f:cb:
                    a4:34:58:e2:46:c5:ff:6d:4e:89:ba:e9:79:2f:b2:
                    03:0d:cc:79:39:f3:54:e2:7d:88:3b:6b:16:b3:fd:
                    95:11:2f:6a:5c:d0:17:6e:f9:fc:8e:d9:92:7d:af:
                    6c:25:60:1c:49:26:c9:89:5e:1f:80:ce:be:74:06:
                    0f:d9:1c:ec:9e:ab:f4:7c:29:f5:df:ec:c8:54:99:
                    74:49:c5:28:96:90:e3:b1:71:1d:58:38:b9:52:e8:
                    bd:3d:40:84:49:63:fa:07:ab:26:ca:a4:61:93:ec:
                    5c:85:8b:bf:f6:73:90:3f:c0:29:41:3b:35:5c:f1:
                    19:fb:63:2d:de:e5:cf:0e:69:f9:7a:3c:2e:ee:b8:
                    83:04:e3:97:67:8c:2b:4d:47:4c:db:81:ce:7e:59:
                    a3:cb:75:fe:d2:8b:bf:47:f9:28:40:67:85:6e:2b:
                    a5:bf:60:18:52:9c:b1:ae:ce:ad:83:ab:3e:61:4c:
                    ce:f8:2a:32:ce:87:2e:64:bf:ce:b1:86:af:23:70:
                    dc:11:e2:1b:ff:8a:bc:0a:d8:41:55:e2:94:6b:03:
                    ee:54:90:ad:4b:98:15:11:c5:72:fc:bd:63:8d:91:
                    c6:7a:bd:18:67:59:5b:b4:a6:fd:54:67:31:f4:ac:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:AF:D8:84:2A:3E:8B:1B:DD:FB:73:A3:30:7C:CF:F1:42:5B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bb00790e-a3a2-3946-8150-be163d48b16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:9a:c3:0e:44:74:6a:b8:c6:2c:fb:74:ba:b8:b9:21:f0:d6:
         8a:4b:b1:4c:8c:0d:9a:41:1d:e7:4c:97:7b:ab:a4:83:04:69:
         41:1d:5f:db:6e:27:d5:1b:aa:8f:a2:bb:43:35:7c:6b:00:ae:
         21:fe:1d:b3:b2:8c:de:ba:c8:3c:ce:d6:dc:19:22:fe:58:b6:
         f4:17:fc:7a:f2:df:54:0c:8c:e8:b8:7a:fe:5a:f2:5c:13:d5:
         6d:09:22:6c:a1:13:b2:db:2b:86:4b:ba:e0:61:7f:42:54:f7:
         d5:01:77:77:3d:65:20:9f:7e:b7:73:fd:5a:0a:dd:a1:f4:0b:
         6d:73:0e:f4:af:9c:01:71:37:e3:d7:be:f7:e3:56:5e:44:53:
         62:29:9f:c8:b5:9b:82:50:c0:d8:ab:68:56:5c:89:82:61:e5:
         fb:23:3e:b5:73:13:8b:91:42:cb:12:e6:07:29:6f:1e:5d:8d:
         96:77:82:da:0d:d9:5e:de:ef:73:fd:f4:fa:fe:96:dd:58:6b:
         bb:f8:78:e5:bc:6b:f6:83:03:20:10:46:63:b9:72:9d:03:35:
         87:fc:79:d3:3f:ca:f5:83:fa:52:b8:e2:3f:1c:b9:69:3b:76:
         47:d8:80:96:45:e6:d9:6c:13:55:41:94:4e:bb:b3:2d:83:23:
         df:25:ed:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZOkFCQ8p+cuNbmCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI1MDYwNjA2MzMyMVoXDTI1MDkwNDA2MzMyMVowLzEtMCsGA1UEAxMk
ODBkM2I0NjctYWY3Zi00NzE3LTk2YTgtMjNjODc0NDVjOTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi35Hu9MSBsTfqy9f8ukNFjiRsX/bU6Juul5
L7IDDcx5OfNU4n2IO2sWs/2VES9qXNAXbvn8jtmSfa9sJWAcSSbJiV4fgM6+dAYP
2Rzsnqv0fCn13+zIVJl0ScUolpDjsXEdWDi5Uui9PUCESWP6B6smyqRhk+xchYu/
9nOQP8ApQTs1XPEZ+2Mt3uXPDmn5ejwu7riDBOOXZ4wrTUdM24HOflmjy3X+0ou/
R/koQGeFbiulv2AYUpyxrs6tg6s+YUzO+CoyzocuZL/OsYavI3DcEeIb/4q8CthB
VeKUawPuVJCtS5gVEcVy/L1jjZHGer0YZ1lbtKb9VGcx9Ky98QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLxr9iEKj6LG937c6MwfM/xQlviMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYmIwMDc5MGUtYTNhMi0z
OTQ2LTgxNTAtYmUxNjNkNDhiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOaaww5EdGq4xiz7dLq4uSHw1opLsUyMDZpBHedMl3urpIMEaUEdX9tu
J9Ubqo+iu0M1fGsAriH+HbOyjN66yDzO1twZIv5YtvQX/Hry31QMjOi4ev5a8lwT
1W0JImyhE7LbK4ZLuuBhf0JU99UBd3c9ZSCffrdz/VoK3aH0C21zDvSvnAFxN+PX
vvfjVl5EU2Ipn8i1m4JQwNiraFZciYJh5fsjPrVzE4uRQssS5gcpbx5djZZ3gtoN
2V7e73P99Pr+lt1Ya7v4eOW8a/aDAyAQRmO5cp0DNYf8edM/yvWD+lK44j8cuWk7
dkfYgJZF5tlsE1VBlE67sy2DI98l7VA=
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:04:54 2025 by rpki-client