Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
File:                     4bdc7401-6d0e-314a-aae3-b523f7944319.roa (raw, json)
Hash identifier:          BIX4D9qulFtl/rrbGQd+jGysYI8x3Mzy1zvhHfcgjyw=
Subject key identifier:   CF:CA:F2:9D:28:A6:36:41:58:03:9E:49:1C:E4:13:4B:7A:4C:35:D5
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584965E97E6D5B8E93D3FEEF9DF0
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     8987
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7e:6d:5b:8e:93:d3:fe:ef:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=c5878997-c614-4448-ab56-ae59db6055e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4b:17:74:e8:09:0f:c9:12:72:76:45:88:a8:
                    3a:ee:44:10:11:67:95:f1:de:c2:52:58:76:cf:7d:
                    0e:62:db:fe:78:f2:02:8e:69:33:39:4f:80:86:6d:
                    6c:c6:0d:6e:62:dd:24:6e:66:37:60:d0:5e:73:3d:
                    0b:16:c2:3d:03:87:31:85:90:4a:55:9f:39:c7:0f:
                    6d:f4:47:0d:a4:c0:cc:fa:bb:0f:0b:ae:39:bb:b6:
                    30:c6:41:5d:a1:30:a7:bb:d7:c8:f8:e3:dd:1a:0b:
                    37:68:8b:26:59:85:3c:96:9c:98:97:b4:73:57:f0:
                    19:3d:c7:8b:47:fa:03:a5:bd:7d:23:d5:17:f6:52:
                    dd:0e:22:19:ec:54:30:1b:a7:25:82:8f:ae:98:7e:
                    9a:bf:ca:63:e5:2a:5b:5a:99:28:5e:60:5f:71:4b:
                    08:5a:0d:42:66:4a:74:88:99:3c:6b:19:74:5b:66:
                    a8:2c:04:f1:38:dd:7d:2e:e4:3c:97:30:c6:92:d4:
                    94:8e:3a:da:a6:7f:06:89:73:e5:1c:75:2b:39:0a:
                    e1:a3:18:98:bf:ce:a3:d4:2e:55:9d:3b:ae:87:6d:
                    ad:42:28:4f:ff:a1:61:cf:b7:05:b8:66:92:83:27:
                    33:da:1a:a6:3b:bd:c7:25:56:02:82:dc:09:96:b7:
                    c7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CA:F2:9D:28:A6:36:41:58:03:9E:49:1C:E4:13:4B:7A:4C:35:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:dc:e3:d5:66:b1:31:5b:db:45:4e:89:51:ca:f0:89:7a:
         60:0d:f4:dd:82:ba:42:d9:16:c2:70:b5:ee:b7:6d:ee:4d:52:
         01:4b:88:09:2e:64:dd:57:b3:03:d0:49:97:e9:ae:51:e0:95:
         d3:21:6e:58:9c:34:07:fe:29:95:e2:c4:21:e2:1d:b2:55:f7:
         a1:e4:ff:13:ac:ed:a3:87:70:66:6b:c7:dc:81:ee:82:2b:68:
         4d:ba:be:1a:94:cc:88:c7:e7:8a:4f:0e:e2:0f:d0:a0:72:75:
         cd:19:a5:05:e4:01:6a:d4:4f:ce:5c:42:f8:a5:79:3b:0a:f2:
         fb:61:0e:37:a9:80:09:73:1a:c2:a3:d8:59:4d:47:2c:9b:da:
         e1:ab:63:15:51:49:60:b7:05:c0:4e:db:a6:ac:4e:f6:9d:df:
         26:c5:5a:63:af:aa:b1:91:85:6e:d6:c2:d6:ad:6a:0f:eb:08:
         b7:82:72:6e:8d:af:a3:13:9a:b5:38:31:b3:ef:90:f9:1b:c0:
         69:69:4e:29:14:e8:d4:d1:82:7d:9f:7f:0d:28:3c:da:1f:8d:
         6e:3c:da:6f:d7:6c:73:5c:ad:5e:a0:0e:79:ba:e8:91:5e:f1:
         f1:93:d2:8a:d1:70:61:19:e9:5c:10:20:a3:69:11:5f:5d:15:
         62:06:fb:e4
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEll6X5tW46T0/7vnfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGExZDE1ZmUtOTRlOS00YWViLTkzYzctZDQ4MWIzYzJm
MWE0MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk
YzU4Nzg5OTctYzYxNC00NDQ4LWFiNTYtYWU1OWRiNjA1NWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEsXdOgJD8kScnZFiKg67kQQEWeV8d7CUlh2
z30OYtv+ePICjmkzOU+Ahm1sxg1uYt0kbmY3YNBecz0LFsI9A4cxhZBKVZ85xw9t
9EcNpMDM+rsPC645u7YwxkFdoTCnu9fI+OPdGgs3aIsmWYU8lpyYl7RzV/AZPceL
R/oDpb19I9UX9lLdDiIZ7FQwG6clgo+umH6av8pj5SpbWpkoXmBfcUsIWg1CZkp0
iJk8axl0W2aoLATxON19LuQ8lzDGktSUjjrapn8GiXPlHHUrOQrhoxiYv86j1C5V
nTuuh22tQihP/6Fhz7cFuGaSgycz2hqmO73HJVYCgtwJlrfHrwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFM/K8p0opjZBWAOeSRzkE0t6TDXVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFk
MTVmZS05NGU5LTRhZWItOTNjNy1kNDgxYjNjMmYxYTQvNGJkYzc0MDEtNmQwZS0z
MTRhLWFhZTMtYjUyM2Y3OTQ0MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGExZDE1ZmUtOTRlOS00YWViLTkz
YzctZDQ4MWIzYzJmMWE0L2RhMWQxNWZlLTk0ZTktNGFlYi05M2M3LWQ0ODFiM2My
ZjFhNC5jcmwwHwYDVR0jBBgwFoAUsatP9jRpe1vt4l1FMAAUN2UlFIowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTFkMTVmZS05NGU5LTRhZWItOTNjNy1kNDgx
YjNjMmYxYTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwJ0kMA4E
AgACMAgDBgAmAvfbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLvdzj1WaxMVvbRU6JUcrwiXpgDfTdgrpC
2RbCcLXut23uTVIBS4gJLmTdV7MD0EmX6a5R4JXTIW5YnDQH/imV4sQh4h2yVfeh
5P8TrO2jh3Bma8fcge6CK2hNur4alMyIx+eKTw7iD9CgcnXNGaUF5AFq1E/OXEL4
pXk7CvL7YQ43qYAJcxrCo9hZTUcsm9rhq2MVUUlgtwXATtumrE72nd8mxVpjr6qx
kYVu1sLWrWoP6wi3gnJuja+jE5q1ODGz75D5G8BpaU4pFOjU0YJ9n38NKDzaH41u
PNpv12xzXK1eoA55uuiRXvHxk9KK0XBhGelcECCjaRFfXRViBvvk
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:51 2025 by rpki-client