Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa
File:                     ae548fa2-acd0-3aa2-9463-b60c668965c8.roa (raw, json)
Hash identifier:          3tsJWCat65SE7eQr41sCQO/Ojl5bCXabpZo0XGtR0p0=
Subject key identifier:   21:D0:CB:CE:43:61:4A:AE:FB:27:5A:3E:AA:31:17:D1:04:C3:08:E5
Certificate issuer:       /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial:       010D0C9F43285849A8E9E37380DEE51381F42FC0
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     40495
IP address blocks:        174.137.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:e3:73:80:de:e5:13:81:f4:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=c8468c62-29cf-4da4-add9-5b5aae8433ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:78:fa:d5:db:f1:fd:e3:40:9a:5c:7a:2d:
                    a6:cd:99:4b:aa:b0:38:ee:88:5c:a9:b7:a6:f7:3d:
                    8a:00:18:09:09:48:20:fc:a4:66:bf:35:67:9c:9e:
                    4d:96:96:77:91:b5:39:da:5b:c2:80:4a:c5:26:75:
                    10:49:de:7b:84:3c:01:5a:11:b5:9d:1e:62:12:cf:
                    cd:43:b1:83:2d:84:9c:e8:f3:03:d0:01:e1:c7:75:
                    06:70:46:31:5c:23:91:b9:dc:67:b6:0e:5d:c4:33:
                    7d:67:f5:a1:08:75:6c:28:8e:b5:bb:0f:cd:d1:e9:
                    49:94:c3:84:29:9e:da:4a:09:94:9c:7d:59:32:9d:
                    f7:e4:c9:0f:3f:69:50:5b:42:f5:29:3d:a0:50:13:
                    9b:f6:7b:40:68:16:bf:0e:d3:a1:f8:a2:0f:7b:72:
                    3d:22:a8:7b:16:31:b5:00:c4:97:10:23:e2:71:f8:
                    ee:a0:17:9b:22:ea:5a:b6:d9:69:19:e3:a8:71:da:
                    cc:45:12:96:93:7f:1c:62:db:e4:71:29:8b:4f:73:
                    66:b8:fa:36:d3:78:82:f6:67:f7:93:f2:a4:72:8c:
                    b4:96:60:2b:0f:45:8d:f0:9a:2e:29:d5:b0:52:d5:
                    88:9c:48:67:ff:23:f1:74:b4:d3:23:1d:31:70:8a:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D0:CB:CE:43:61:4A:AE:FB:27:5A:3E:AA:31:17:D1:04:C3:08:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl

            X509v3 Authority Key Identifier:
                keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:28:39:ff:eb:67:27:b4:18:80:42:92:a0:42:ef:8b:d4:03:
         d9:8a:19:42:23:12:3a:56:29:47:9c:a7:86:58:7a:21:dd:b7:
         20:99:76:11:74:6a:c9:49:6c:cc:47:4c:2a:38:16:80:2a:af:
         fa:94:df:87:9e:72:03:31:92:5f:b9:27:71:93:85:6e:36:be:
         ea:b6:f4:83:3b:a4:33:3d:e7:36:fc:2d:b8:38:19:66:8b:f0:
         fa:79:71:3a:70:fa:20:60:36:23:be:a6:0e:3f:e8:90:71:b8:
         84:b8:8a:9e:59:3a:37:41:3f:99:d3:9b:b2:91:61:3d:49:f4:
         5a:fe:af:93:67:41:c6:1a:38:55:b8:db:49:d7:72:88:b3:ab:
         27:73:d5:73:02:7a:d1:f7:2c:89:80:b8:14:52:0c:fb:3d:cf:
         a2:02:59:88:0e:f2:3d:3d:0e:1b:23:59:85:dc:37:99:00:6a:
         6c:e8:f9:d0:a4:e5:11:71:ba:d2:75:87:f9:13:28:ac:1e:f6:
         8c:66:3b:80:0c:04:3b:65:a3:f0:76:64:1f:7d:5f:b0:a7:27:
         ca:9b:76:d0:1b:6b:09:f8:d1:76:c8:31:29:10:09:1d:7a:9c:
         85:d6:95:a7:35:18:4d:ef:79:d6:6d:75:55:1b:a2:82:43:ea:
         f9:0c:b4:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eNzgN7lE4H0L8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx
ODhmMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk
Yzg0NjhjNjItMjljZi00ZGE0LWFkZDktNWI1YWFlODQzM2VjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnZ4+tXb8f3jQJpcei2mzZlLqrA47ohcqbem
9z2KABgJCUgg/KRmvzVnnJ5NlpZ3kbU52lvCgErFJnUQSd57hDwBWhG1nR5iEs/N
Q7GDLYSc6PMD0AHhx3UGcEYxXCORudxntg5dxDN9Z/WhCHVsKI61uw/N0elJlMOE
KZ7aSgmUnH1ZMp335MkPP2lQW0L1KT2gUBOb9ntAaBa/DtOh+KIPe3I9Iqh7FjG1
AMSXECPicfjuoBebIupattlpGeOocdrMRRKWk38cYtvkcSmLT3NmuPo203iC9mf3
k/Kkcoy0lmArD0WN8JouKdWwUtWInEhn/yPxdLTTIx0xcIoRgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHQy85DYUqu+ydaPqoxF9EEwwjlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw
ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYWU1NDhmYTItYWNkMC0z
YWEyLTk0NjMtYjYwYzY2ODk2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj
NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk
MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0
NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4oOf/rZye0GIBCkqBC74vUA9mKGUIjEjpWKUecp4ZYeiHdtyCZdhF0
aslJbMxHTCo4FoAqr/qU34eecgMxkl+5J3GThW42vuq29IM7pDM95zb8Lbg4GWaL
8Pp5cTpw+iBgNiO+pg4/6JBxuIS4ip5ZOjdBP5nTm7KRYT1J9Fr+r5NnQcYaOFW4
20nXcoizqydz1XMCetH3LImAuBRSDPs9z6ICWYgO8j09DhsjWYXcN5kAamzo+dCk
5RFxutJ1h/kTKKwe9oxmO4AMBDtlo/B2ZB99X7CnJ8qbdtAbawn40XbIMSkQCR16
nIXWlac1GE3vedZtdVUbooJD6vkMtMs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:07:26 2025 by rpki-client