Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45f2f5c6-27b7-333c-b7f3-8b7c1b2c348f.roa
File:                     45f2f5c6-27b7-333c-b7f3-8b7c1b2c348f.roa (raw, json)
Hash identifier:          eDYzWpxzelj6ngE0Y8pR4pQ/YzN8/SG3MlG8SU2WDuc=
Subject key identifier:   E7:63:66:B8:D1:F5:3F:62:94:13:7E:44:64:B2:12:E5:F1:57:7D:C6
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849ABB4A47FE4AA3FE7B9190D80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45f2f5c6-27b7-333c-b7f3-8b7c1b2c348f.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     64267
IP address blocks:        173.214.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a4:7f:e4:aa:3f:e7:b9:19:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=7b1bb8c9-e6c2-4403-ad9c-cfc64195ebae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:fc:c5:60:b0:a4:1b:b7:a8:e8:1d:0c:72:
                    a3:3e:31:a9:f7:26:61:19:28:64:a4:c1:5a:c7:37:
                    85:fc:6a:31:49:a1:d4:ab:2b:ba:c9:d8:28:f9:94:
                    68:59:3c:46:13:da:c6:0e:22:0c:0f:40:8d:83:2a:
                    82:08:42:a3:16:9b:8f:2c:73:3c:bd:50:e9:a4:57:
                    7c:33:90:9a:5c:55:f6:95:ff:60:1a:37:1f:a1:9e:
                    33:5d:9b:02:27:b2:c5:7f:f1:eb:2d:2b:f3:2a:83:
                    1f:6a:1c:32:79:52:ba:07:18:ae:4c:99:58:e7:05:
                    d9:65:a3:22:e2:49:df:e9:28:2a:3c:cc:e9:b1:0e:
                    90:0c:b2:97:b4:e1:23:ca:32:09:ef:15:73:e8:16:
                    b5:f5:3e:b1:8e:fa:c5:bb:ce:49:6b:d5:b9:04:51:
                    25:5e:e1:df:97:28:d7:9c:e8:b4:5c:74:9d:c4:cd:
                    e4:84:8f:93:06:ff:d3:73:9d:f5:b8:59:ba:14:cc:
                    d7:0f:2b:ae:c0:0d:c0:6c:aa:91:5d:ba:70:cc:45:
                    58:f4:1d:09:36:bb:d5:86:44:4c:52:a7:5a:40:96:
                    f5:25:c1:bf:fa:01:9b:38:d2:bf:8e:3a:d2:36:ea:
                    4f:22:12:ce:88:9d:ad:dd:a2:f2:df:aa:d9:e0:ae:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:66:B8:D1:F5:3F:62:94:13:7E:44:64:B2:12:E5:F1:57:7D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45f2f5c6-27b7-333c-b7f3-8b7c1b2c348f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:72:87:91:72:2f:55:d4:6c:83:27:58:9c:53:96:db:ff:c8:
         f0:7c:4f:b0:77:21:7a:be:dc:fb:ba:63:82:22:53:e0:fa:50:
         45:bf:47:4f:51:40:3c:85:a6:2a:f3:e5:94:de:68:36:db:a7:
         d2:c5:17:de:e9:0d:f7:44:3c:e6:6d:11:53:1c:d8:40:9b:5c:
         4c:88:31:52:3b:80:34:d6:a2:fd:16:21:d2:65:bf:88:83:e6:
         f6:07:16:12:13:29:c3:76:b4:c0:8f:4b:6b:01:f5:bb:cc:90:
         a1:aa:c7:99:c0:d8:a4:94:2e:7a:64:90:78:b1:2f:2a:81:a1:
         fc:93:ee:49:e4:b3:46:8e:42:27:20:78:31:fc:81:43:c2:4a:
         56:17:cd:6a:93:22:50:7b:21:b3:72:1e:86:47:da:9f:dd:57:
         90:48:04:26:bc:62:3c:46:4d:26:50:ec:89:6a:26:c6:a8:71:
         47:2d:45:14:26:fe:27:2e:5d:d7:b0:7e:e4:19:f2:e4:c5:66:
         49:f5:07:c9:53:79:13:fd:d1:fe:e2:ec:17:a9:c9:09:33:37:
         6e:04:b8:cb:68:86:5e:14:b5:ae:ce:ec:98:5b:52:70:af:95:
         fb:f3:af:6e:b3:a1:30:74:05:1f:41:e8:8e:85:e8:91:57:af:
         94:3c:07:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKR/5Ko/57kZDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
N2IxYmI4YzktZTZjMi00NDAzLWFkOWMtY2ZjNjQxOTVlYmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkf8xWCwpBu3qOgdDHKjPjGp9yZhGShkpMFa
xzeF/GoxSaHUqyu6ydgo+ZRoWTxGE9rGDiIMD0CNgyqCCEKjFpuPLHM8vVDppFd8
M5CaXFX2lf9gGjcfoZ4zXZsCJ7LFf/HrLSvzKoMfahwyeVK6BxiuTJlY5wXZZaMi
4knf6SgqPMzpsQ6QDLKXtOEjyjIJ7xVz6Ba19T6xjvrFu85Ja9W5BFElXuHflyjX
nOi0XHSdxM3khI+TBv/Tc531uFm6FMzXDyuuwA3AbKqRXbpwzEVY9B0JNrvVhkRM
UqdaQJb1JcG/+gGbONK/jjrSNupPIhLOiJ2t3aLy36rZ4K59ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdjZrjR9T9ilBN+RGSyEuXxV33GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDVmMmY1YzYtMjdiNy0z
MzNjLWI3ZjMtOGI3YzFiMmMzNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdbBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFyh5FyL1XUbIMnWJxTltv/yPB8T7B3IXq+3Pu6Y4IiU+D6UEW/R09R
QDyFpirz5ZTeaDbbp9LFF97pDfdEPOZtEVMc2ECbXEyIMVI7gDTWov0WIdJlv4iD
5vYHFhITKcN2tMCPS2sB9bvMkKGqx5nA2KSULnpkkHixLyqBofyT7knks0aOQicg
eDH8gUPCSlYXzWqTIlB7IbNyHoZH2p/dV5BIBCa8YjxGTSZQ7IlqJsaocUctRRQm
/icuXdewfuQZ8uTFZkn1B8lTeRP90f7i7BepyQkzN24EuMtohl4Uta7O7JhbUnCv
lfvzr26zoTB0BR9B6I6F6JFXr5Q8B1g=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:39:56 2025 by rpki-client