Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa
File:                     b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa (raw, json)
Hash identifier:          IhnN7Rsafr4/NIiDO1pYVCespe/3oCBG3znkM+WVdgk=
Subject key identifier:   30:21:7E:9F:0A:53:78:EC:80:FF:D9:2C:B0:47:0C:20:B9:9F:FE:C4
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F432858499829D2C627E5BE72393878C0
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     54885
IP address blocks:        192.207.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d2:c6:27:e5:be:72:39:38:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=c84f5ef2-7b6b-4e9e-b404-c9299d281b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a2:59:47:1d:15:70:82:7b:54:06:9a:a4:a3:
                    d0:13:e8:1e:cf:9a:68:f1:ea:51:6e:f0:d2:ad:49:
                    f9:9c:f5:b9:9a:7a:52:b3:9a:79:67:db:fc:8c:d2:
                    4a:83:1b:10:b2:bd:8a:e5:1d:49:1d:15:0e:27:19:
                    db:da:58:96:bb:47:30:41:50:38:84:bf:d7:ff:f1:
                    99:3f:66:45:1a:49:08:2a:e6:76:de:bd:21:42:f6:
                    2b:28:0c:ff:93:25:5c:bb:aa:2b:82:f8:cb:46:71:
                    7d:34:9b:85:7d:b3:00:50:0e:6d:6e:94:56:b9:bd:
                    8c:01:37:17:e3:47:70:16:28:15:fb:ac:c5:17:c8:
                    a7:c6:01:eb:c5:1f:c0:d8:69:0e:34:3d:6f:e2:0d:
                    ac:f0:37:67:74:52:49:36:10:d3:f1:51:56:ba:f1:
                    28:53:f3:ca:dd:01:bd:4a:57:e5:50:27:f3:2e:ed:
                    02:9f:26:27:7d:8a:87:a6:59:d5:5f:23:9a:c9:1d:
                    a9:94:be:9c:9d:3b:79:22:7b:68:2a:1a:ad:cf:23:
                    b1:4b:d3:53:b4:cb:86:95:3d:c9:ca:29:7b:c9:01:
                    ed:32:8a:66:15:dd:2e:a4:61:77:da:a4:53:7d:74:
                    f1:5b:8d:12:6d:c1:10:36:92:2c:68:fb:bc:78:56:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:21:7E:9F:0A:53:78:EC:80:FF:D9:2C:B0:47:0C:20:B9:9F:FE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:57:be:44:76:93:ac:97:4f:62:5f:cc:4b:e7:a5:6a:b3:1c:
         7e:c1:eb:f9:70:28:57:96:c8:e2:b3:e9:70:f5:82:32:31:e8:
         62:98:4b:28:1a:11:7e:38:36:cf:a8:b5:39:23:5d:00:9f:3c:
         c3:0b:22:6e:b2:36:2a:96:be:ac:17:45:c7:dc:b4:49:af:e5:
         11:b2:1d:ab:ee:1c:d4:ff:46:94:9e:66:0b:df:37:c1:59:15:
         41:f8:99:37:85:da:4a:09:1d:b3:2f:95:d8:0e:6e:7e:12:92:
         4f:e3:46:91:86:00:25:c5:6d:17:d6:7e:4e:cb:98:dc:0f:7d:
         24:67:b5:05:6c:e5:8b:f8:6d:41:cd:fc:a2:89:95:fb:4e:cd:
         bf:57:71:41:35:e8:89:24:0d:3d:49:70:2a:d6:31:16:d6:b9:
         15:5e:66:49:4e:6e:dd:84:0c:0b:94:71:2e:25:c5:ad:14:59:
         17:79:4c:e2:ec:7d:75:5e:eb:91:95:9a:11:b7:54:f6:24:2a:
         7b:ea:82:1e:f8:e8:1b:93:74:44:c7:fc:fe:e7:7b:aa:33:0b:
         c6:d2:13:b6:2c:7a:c2:19:31:0f:4c:27:6d:b6:a5:f6:82:b6:
         d6:1d:86:71:b3:2a:7e:66:71:a8:96:42:a4:09:60:d9:b6:ac:
         c6:1c:27:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdLGJ+W+cjk4eMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE2MzYxZDItYmNlNy00MDlhLThmMTktZGRkODFhMWY2
MjQ5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
Yzg0ZjVlZjItN2I2Yi00ZTllLWI0MDQtYzkyOTlkMjgxYjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKJZRx0VcIJ7VAaapKPQE+gez5po8epRbvDS
rUn5nPW5mnpSs5p5Z9v8jNJKgxsQsr2K5R1JHRUOJxnb2liWu0cwQVA4hL/X//GZ
P2ZFGkkIKuZ23r0hQvYrKAz/kyVcu6orgvjLRnF9NJuFfbMAUA5tbpRWub2MATcX
40dwFigV+6zFF8inxgHrxR/A2GkOND1v4g2s8DdndFJJNhDT8VFWuvEoU/PK3QG9
SlflUCfzLu0CnyYnfYqHplnVXyOayR2plL6cnTt5IntoKhqtzyOxS9NTtMuGlT3J
yil7yQHtMopmFd0upGF32qRTfXTxW40SbcEQNpIsaPu8eFZQGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAhfp8KU3jsgP/ZLLBHDCC5n/7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YTYz
NjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWExZjYyNDkvYjkzMjdhMDgtZjRjYy0z
NGE1LTkyYTktMjYxOTBlZDllZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWE2MzYxZDItYmNlNy00MDlhLThm
MTktZGRkODFhMWY2MjQ5LzlhNjM2MWQyLWJjZTctNDA5YS04ZjE5LWRkZDgxYTFm
NjI0OS5jcmwwHwYDVR0jBBgwFoAU7aJGTlftF2Y9jLAvYYv0eGpLW7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4
MWExZjYyNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM8tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZXvkR2k6yXT2JfzEvnpWqzHH7B6/lwKFeWyOKz6XD1gjIx6GKYSyga
EX44Ns+otTkjXQCfPMMLIm6yNiqWvqwXRcfctEmv5RGyHavuHNT/RpSeZgvfN8FZ
FUH4mTeF2koJHbMvldgObn4Skk/jRpGGACXFbRfWfk7LmNwPfSRntQVs5Yv4bUHN
/KKJlftOzb9XcUE16IkkDT1JcCrWMRbWuRVeZklObt2EDAuUcS4lxa0UWRd5TOLs
fXVe65GVmhG3VPYkKnvqgh746BuTdETH/P7ne6ozC8bSE7YsesIZMQ9MJ222pfaC
ttYdhnGzKn5mcaiWQqQJYNm2rMYcJzo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:25:57 2025 by rpki-client