Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa
File:                     9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa (raw, json)
Hash identifier:          Nm9RcYRNZcWOrgA6wXvQydcBJL+hn4dtR7reNkkSdag=
Subject key identifier:   06:E0:C6:F8:93:28:55:1E:76:F0:FD:CA:D8:6B:9B:59:74:34:5C:F6
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F432858499294A633D4B93B782D2C3500
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     19886
IP address blocks:        171.162.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a6:33:d4:b9:3b:78:2d:2c:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=aa4924f8-cd7e-4d06-9812-78ff6ef759f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:81:6f:6c:1f:88:a5:30:ba:e1:2f:4a:b9:
                    c3:b5:fe:20:84:f7:cf:46:d2:fe:5f:3d:8a:ab:82:
                    6d:64:f3:07:b8:40:1d:2b:33:8b:07:83:58:20:aa:
                    85:cf:77:6a:a5:84:b5:4b:bd:2d:8e:97:ad:11:3a:
                    a4:01:f8:78:7b:8c:6a:94:4a:74:cf:3e:2f:05:98:
                    8c:d9:ff:3c:08:ce:dc:e3:b1:9a:ce:53:c5:c4:04:
                    1e:a0:0d:c7:ec:2e:7e:cb:3e:2b:90:53:27:1c:14:
                    75:18:f7:e4:b2:f1:ce:ad:48:ec:96:ff:6a:ba:24:
                    d4:6b:04:04:7d:ef:ac:fd:6c:a1:82:c8:20:77:32:
                    7c:67:d2:e1:4a:cd:35:58:6b:3f:bf:df:85:4e:0b:
                    ce:ce:f8:4c:06:8b:b1:07:fa:c5:66:3a:52:7c:37:
                    44:c8:fd:4a:b9:fb:b1:b9:9b:8e:b4:43:7d:08:0c:
                    1a:c1:ca:84:3c:14:a6:6a:1f:4a:83:eb:93:83:c2:
                    3c:cc:f3:0d:04:bc:80:94:8e:0a:f0:7c:86:5e:c1:
                    1f:b0:19:a4:10:b3:06:ea:1e:38:81:c2:1e:26:a0:
                    59:ea:32:18:49:3f:74:90:47:dc:a3:b5:a0:0b:d3:
                    e2:52:a1:82:d5:f1:00:11:40:1f:f3:43:7d:e0:8e:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E0:C6:F8:93:28:55:1E:76:F0:FD:CA:D8:6B:9B:59:74:34:5C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:2b:55:99:cd:06:29:fc:cc:36:8c:df:7e:8d:e4:2f:87:24:
         56:7f:c1:32:1e:c0:38:8e:3a:2e:53:a2:f7:98:05:4b:c3:fc:
         08:df:0d:62:ec:6b:4c:b2:96:d6:ea:61:e7:c6:9c:7b:13:82:
         e5:5b:62:8d:6c:4c:96:b2:24:0e:b0:1b:96:85:a0:37:4e:32:
         21:53:2e:f7:1e:d9:35:0f:28:39:fa:a9:32:dd:54:19:34:d4:
         9f:fa:61:e2:06:66:60:bd:b4:56:2c:83:21:85:c4:95:c6:10:
         61:75:cd:91:50:1e:d0:18:47:ef:07:71:34:d9:54:2f:6d:f2:
         78:9c:66:3d:c9:89:72:89:f9:c5:3d:1e:ce:ff:ac:83:42:64:
         f3:20:ab:80:00:ae:f3:dc:86:5b:84:d5:e9:c1:a6:bc:2b:9b:
         01:29:1f:a6:e8:38:69:e4:a4:06:a7:87:45:71:13:79:65:35:
         ec:90:9f:69:04:e8:40:76:17:0c:b0:aa:d1:ee:b6:cb:1c:af:
         c8:3c:9f:ce:05:7f:44:49:26:a9:a0:62:fd:18:09:c7:1a:b3:
         55:f2:a1:cd:62:36:77:ae:4b:a2:d3:1c:d6:eb:eb:62:49:f4:
         22:89:0b:e1:7d:da:cf:3a:51:23:da:97:1e:36:cf:9b:25:1b:
         3c:61:d2:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKYz1Lk7eC0sNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk
YWE0OTI0ZjgtY2Q3ZS00ZDA2LTk4MTItNzhmZjZlZjc1OWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK+Bb2wfiKUwuuEvSrnDtf4ghPfPRtL+Xz2K
q4JtZPMHuEAdKzOLB4NYIKqFz3dqpYS1S70tjpetETqkAfh4e4xqlEp0zz4vBZiM
2f88CM7c47GazlPFxAQeoA3H7C5+yz4rkFMnHBR1GPfksvHOrUjslv9quiTUawQE
fe+s/WyhgsggdzJ8Z9LhSs01WGs/v9+FTgvOzvhMBouxB/rFZjpSfDdEyP1Kufux
uZuOtEN9CAwawcqEPBSmah9Kg+uTg8I8zPMNBLyAlI4K8HyGXsEfsBmkELMG6h44
gcIeJqBZ6jIYST90kEfco7WgC9PiUqGC1fEAEUAf80N94I6mmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbgxviTKFUedvD9ythrm1l0NFz2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvOWVhMDhkODEtYWY4ZS0z
Mjg3LWI5ZmMtYjFkYzY5NzMxMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4rVZnNBin8zDaM336N5C+HJFZ/wTIewDiOOi5ToveYBUvD/AjfDWLs
a0yyltbqYefGnHsTguVbYo1sTJayJA6wG5aFoDdOMiFTLvce2TUPKDn6qTLdVBk0
1J/6YeIGZmC9tFYsgyGFxJXGEGF1zZFQHtAYR+8HcTTZVC9t8nicZj3JiXKJ+cU9
Hs7/rINCZPMgq4AArvPchluE1enBprwrmwEpH6boOGnkpAanh0VxE3llNeyQn2kE
6EB2FwywqtHutsscr8g8n84Ff0RJJqmgYv0YCccas1Xyoc1iNneuS6LTHNbr62JJ
9CKJC+F92s86USPalx42z5slGzxh0lY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:15:19 2025 by rpki-client