Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
File:                     e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (raw, json)
Hash identifier:          L7Jr6U1ucV8zHiQUfHCVZP8e/UGrb5RuGg6+Ny1WqPU=
Subject key identifier:   39:AA:6F:37:31:D1:E0:74:E7:64:9A:33:BF:A3:5B:D4:53:A3:72:5A
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F43285849C4D4C571CDADBC227F1A0C80
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     65104
IP address blocks:        199.212.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c5:71:cd:ad:bc:22:7f:1a:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=d6f2393a-989d-41cd-b930-aed15a59a461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:13:89:c7:ce:b0:80:db:45:b2:88:06:84:
                    99:c2:19:8b:ec:25:17:23:46:5b:46:6e:d1:47:1f:
                    f7:0c:89:15:18:cc:64:85:06:29:59:99:80:9b:94:
                    f7:bc:5c:3f:79:16:2e:a4:19:99:6c:b3:a6:30:cf:
                    d2:bc:81:f9:80:83:df:5f:a9:44:9c:51:26:7e:2b:
                    b8:5b:80:2d:78:43:dc:82:cb:32:75:f4:43:83:7b:
                    5d:ee:03:1a:92:5d:b9:64:a9:a0:f2:23:ec:b1:f4:
                    8f:d8:02:d7:c7:a8:f3:79:9f:a9:65:1d:3e:79:84:
                    0c:08:b0:73:7c:3d:fa:d0:e8:72:6a:c0:fe:fb:29:
                    76:c1:d9:e2:12:16:89:82:bd:42:99:fd:7c:39:8e:
                    3e:cf:20:8e:a9:8c:9e:65:98:4b:35:06:09:5e:e0:
                    53:36:d1:6e:0e:b5:93:fe:74:e7:00:de:a2:ae:a2:
                    9e:0c:44:06:cf:2f:63:52:09:43:c5:e1:a3:6a:e6:
                    0c:02:23:59:72:53:9a:cf:9b:4c:8f:8c:26:15:eb:
                    40:4b:9c:26:0f:37:bd:24:bc:4d:b0:df:39:c6:73:
                    1b:2a:f3:8d:1b:6b:18:e6:a5:80:77:10:7d:de:ee:
                    59:ff:72:a2:fd:8a:03:41:7e:d5:eb:be:9e:f4:d4:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:6F:37:31:D1:E0:74:E7:64:9A:33:BF:A3:5B:D4:53:A3:72:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:89:77:ef:71:4e:e9:a9:b2:e2:c9:75:30:6b:34:fa:c5:7e:
         b6:22:9e:55:64:bb:83:24:05:f4:f7:e3:96:1f:00:c0:6f:8f:
         bd:8d:98:bc:28:d4:14:19:b4:c4:31:a3:e6:0f:ae:ef:d4:90:
         ab:9a:ab:05:97:34:d8:c5:e8:12:22:c9:5c:94:7b:01:81:03:
         be:33:23:ce:49:6f:8b:63:32:49:99:94:93:d7:db:ea:5a:23:
         54:ce:67:20:d0:10:05:bb:50:25:c7:94:92:67:8e:16:2e:d6:
         7e:96:71:2b:08:f0:81:cf:50:a1:93:fc:60:93:c8:8f:5a:d6:
         5a:b5:10:df:14:e2:8e:ff:47:7e:6c:55:09:32:94:7c:79:da:
         35:f3:bb:e2:51:fd:63:ff:f0:ce:f2:96:65:64:62:f0:c6:4a:
         42:7b:4c:30:a7:07:1b:69:1a:a7:49:9c:d5:32:e8:c1:57:93:
         bb:6e:d3:56:ea:5d:bb:be:de:38:88:76:6b:01:63:69:e3:50:
         d5:6c:39:9e:0c:97:c9:38:2a:8a:9d:c5:1d:66:2a:d0:04:0c:
         ed:46:d1:4c:7d:0c:08:92:20:4c:8c:05:6c:35:31:c8:e0:88:
         4a:c4:9a:47:44:9b:7c:32:4d:6b:dd:a9:ca:ee:a7:82:d9:e1:
         69:f6:1c:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MVxza28In8aDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx
NDU4MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
ZDZmMjM5M2EtOTg5ZC00MWNkLWI5MzAtYWVkMTVhNTlhNDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrcTicfOsIDbRbKIBoSZwhmL7CUXI0ZbRm7R
Rx/3DIkVGMxkhQYpWZmAm5T3vFw/eRYupBmZbLOmMM/SvIH5gIPfX6lEnFEmfiu4
W4AteEPcgssydfRDg3td7gMakl25ZKmg8iPssfSP2ALXx6jzeZ+pZR0+eYQMCLBz
fD360OhyasD++yl2wdniEhaJgr1Cmf18OY4+zyCOqYyeZZhLNQYJXuBTNtFuDrWT
/nTnAN6irqKeDEQGzy9jUglDxeGjauYMAiNZclOaz5tMj4wmFetAS5wmDze9JLxN
sN85xnMbKvONG2sY5qWAdxB93u5Z/3Ki/YoDQX7V676e9NR/SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmqbzcx0eB052SaM7+jW9RTo3JaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl
ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvZTViMzEyNTAtNGE1My0z
YzdlLTliMjItNjVhMzUyNGI1NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk
ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0
MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz
MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9QPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiJd+9xTumpsuLJdTBrNPrFfrYinlVku4MkBfT345YfAMBvj72NmLwo
1BQZtMQxo+YPru/UkKuaqwWXNNjF6BIiyVyUewGBA74zI85Jb4tjMkmZlJPX2+pa
I1TOZyDQEAW7UCXHlJJnjhYu1n6WcSsI8IHPUKGT/GCTyI9a1lq1EN8U4o7/R35s
VQkylHx52jXzu+JR/WP/8M7ylmVkYvDGSkJ7TDCnBxtpGqdJnNUy6MFXk7tu01bq
Xbu+3jiIdmsBY2njUNVsOZ4Ml8k4KoqdxR1mKtAEDO1G0Ux9DAiSIEyMBWw1Mcjg
iErEmkdEm3wyTWvdqcrup4LZ4Wn2HBg=
-----END CERTIFICATE-----
Generated at Tue May 13 05:58:08 2025 by rpki-client