Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa
File:                     e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa (raw, json)
Hash identifier:          1hnSa4MVFripWFVluvRieNK6xoPHyRtFoumI+racHlA=
Subject key identifier:   68:4F:FF:9D:B1:A4:B4:91:02:9A:15:24:88:EF:75:C0:C6:8D:04:F0
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285849A61F4284A6AF26FCB7002080
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     22885
IP address blocks:        199.0.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:42:84:a6:af:26:fc:b7:00:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=f5797afb-68ce-45a7-a99e-57f4b43b0443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:24:17:79:1e:58:db:65:9d:4d:27:f1:c2:
                    85:ac:88:c5:e3:79:35:2d:20:e2:42:31:26:69:8d:
                    3f:42:db:da:fb:15:b2:ad:02:83:c7:59:8b:81:57:
                    8a:7f:ca:7a:e7:1a:51:3b:c4:61:15:43:6c:92:27:
                    e2:ea:5a:81:94:b0:54:b5:ed:dd:cf:1f:48:72:76:
                    fe:40:4a:ac:84:1e:06:b6:96:75:a4:31:e1:16:4e:
                    2f:eb:56:ab:bd:08:7d:75:db:0d:bd:73:48:72:0a:
                    11:87:19:c7:02:e4:78:ec:1d:60:0c:27:c9:bd:8a:
                    9c:b6:40:dd:46:8a:70:21:c3:29:af:e6:2b:8b:da:
                    79:83:38:3d:be:9e:c3:e2:a8:8f:bb:19:9c:48:84:
                    a7:60:2e:9c:50:e2:38:a0:7f:7c:b0:46:ab:28:d6:
                    ca:ca:96:f4:cb:a1:41:5a:ff:db:be:9b:cc:b4:d8:
                    d1:d3:73:82:43:c1:b3:3a:66:8f:d0:7a:d0:76:76:
                    50:ba:c2:34:c8:9e:39:6e:92:15:fb:a7:71:b1:c0:
                    3d:9b:e3:8c:d4:e8:fb:40:fb:03:a5:c6:18:9e:e5:
                    a6:5a:b4:c8:e0:79:4d:af:f4:42:22:f6:12:0d:6f:
                    83:5f:84:84:7a:87:5b:2c:79:06:09:0e:36:18:4d:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4F:FF:9D:B1:A4:B4:91:02:9A:15:24:88:EF:75:C0:C6:8D:04:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:fb:29:c9:04:15:4a:51:be:4c:fd:22:c2:96:7e:5d:a4:
         4e:92:00:e3:db:3e:ce:32:f0:47:c3:1e:57:33:ce:3a:a5:a3:
         3b:bd:a9:da:fd:a7:d7:02:ad:81:3e:a9:bf:d7:fb:ca:02:30:
         1f:30:d8:27:0b:0d:ab:d1:98:97:a9:82:d0:c9:d0:dc:0b:cb:
         31:5f:6d:9e:87:ed:d6:e5:85:22:63:6f:fe:26:ab:4b:5d:bb:
         fd:c2:7e:08:78:7a:cd:73:0e:70:53:43:a5:f6:e9:3b:f1:28:
         65:d7:1f:6a:19:1d:3d:43:d4:50:d0:33:6d:78:1f:32:9c:c3:
         6b:87:e9:d2:dd:cc:83:31:54:c0:6d:66:52:c5:f6:87:91:e9:
         27:d1:0d:6c:63:4f:55:b3:b5:de:d0:5d:7e:40:43:8f:d9:fe:
         58:d2:09:80:96:fa:63:4e:b5:66:d3:80:be:7b:c8:88:6b:31:
         a7:1a:8f:33:2b:6e:4b:57:45:51:c1:66:03:40:18:14:93:d1:
         1e:0a:47:a9:01:5a:4b:ef:2b:3e:e9:03:2f:96:f3:da:7c:32:
         ad:43:2f:19:87:60:8b:93:47:91:79:51:8a:d3:94:3c:8f:5a:
         f5:21:a1:4e:da:6c:ab:6a:3c:0f:a8:40:59:1e:17:ad:c2:95:
         f0:37:c1:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0KEpq8m/LcAIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy
Y2MyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
ZjU3OTdhZmItNjhjZS00NWE3LWE5OWUtNTdmNGI0M2IwNDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXIkF3keWNtlnU0n8cKFrIjF43k1LSDiQjEm
aY0/Qtva+xWyrQKDx1mLgVeKf8p65xpRO8RhFUNskifi6lqBlLBUte3dzx9Icnb+
QEqshB4GtpZ1pDHhFk4v61arvQh9ddsNvXNIcgoRhxnHAuR47B1gDCfJvYqctkDd
RopwIcMpr+Yri9p5gzg9vp7D4qiPuxmcSISnYC6cUOI4oH98sEarKNbKypb0y6FB
Wv/bvpvMtNjR03OCQ8GzOmaP0HrQdnZQusI0yJ45bpIV+6dxscA9m+OM1Oj7QPsD
pcYYnuWmWrTI4HlNr/RCIvYSDW+DX4SEeodbLHkGCQ42GE3jJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhP/52xpLSRApoVJIjvdcDGjQTwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw
YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZTFlNzljZTMtM2FmYS0z
ZGQ0LTg1N2MtNTBjN2NjZWU1NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz
MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1
MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0
NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwC4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPS+ynJBBVKUb5M/SLCln5dpE6SAOPbPs4y8EfDHlczzjqlozu9qdr9
p9cCrYE+qb/X+8oCMB8w2CcLDavRmJepgtDJ0NwLyzFfbZ6H7dblhSJjb/4mq0td
u/3Cfgh4es1zDnBTQ6X26TvxKGXXH2oZHT1D1FDQM214HzKcw2uH6dLdzIMxVMBt
ZlLF9oeR6SfRDWxjT1Wztd7QXX5AQ4/Z/ljSCYCW+mNOtWbTgL57yIhrMacajzMr
bktXRVHBZgNAGBST0R4KR6kBWkvvKz7pAy+W89p8Mq1DLxmHYIuTR5F5UYrTlDyP
WvUhoU7abKtqPA+oQFkeF63ClfA3wZA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:33 2025 by rpki-client