Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c47ed44b-1b3b-33b4-8c65-bcac51ba9536.roa
File:                     c47ed44b-1b3b-33b4-8c65-bcac51ba9536.roa (raw, json)
Hash identifier:          VjwqJRu9eoWhmOPkAq1m6FyB8qTMnXfBHXrPhRvqgng=
Subject key identifier:   0A:A4:A9:FD:1F:36:CA:F8:30:00:A7:7D:72:73:85:76:1D:E8:B5:10
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849A1EF420EF00D0DF24E2C92C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c47ed44b-1b3b-33b4-8c65-bcac51ba9536.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     7018
IP address blocks:        173.214.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:42:0e:f0:0d:0d:f2:4e:2c:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=5ca2a946-4c0d-4b27-9c46-76b308f7b007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:33:9c:b1:26:61:51:8d:60:9d:e5:17:5b:67:
                    cd:a5:45:21:19:e0:c0:94:83:cf:49:6e:55:bf:32:
                    d7:2f:9b:1c:33:f3:a2:4a:b4:f6:ba:a5:94:fd:46:
                    b6:2c:0f:36:d8:0a:de:db:67:32:f9:3e:1f:8c:cc:
                    d5:3b:a1:39:81:d7:d2:b4:4a:68:39:9e:22:70:5e:
                    df:1f:0a:55:dd:8d:eb:cb:3d:ff:cd:f4:b7:82:15:
                    55:99:42:53:77:24:4a:6d:05:25:da:2e:30:91:a1:
                    5b:cd:e5:d4:f0:50:76:5d:72:9a:f3:46:58:f0:ad:
                    1e:09:1e:15:1a:e8:b7:42:07:12:60:47:f4:c2:5c:
                    e9:64:8c:7e:c7:15:81:4e:f3:43:9b:91:76:38:1b:
                    1d:04:40:9d:24:11:a7:24:6b:9d:b1:1e:59:93:31:
                    7b:02:32:7e:73:d7:16:b0:09:3d:04:24:f4:2f:92:
                    9c:f0:be:3a:8e:13:99:20:42:45:2b:f8:4b:e4:2e:
                    be:5c:54:26:27:83:d2:9f:96:02:76:8e:17:00:8f:
                    7b:9b:da:25:9e:0f:f2:68:45:5f:28:35:33:8a:51:
                    07:12:3f:af:42:9c:31:1d:01:a8:e7:40:2e:61:85:
                    12:7e:dd:20:28:df:2d:e5:85:83:9a:5a:9b:bf:54:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A4:A9:FD:1F:36:CA:F8:30:00:A7:7D:72:73:85:76:1D:E8:B5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c47ed44b-1b3b-33b4-8c65-bcac51ba9536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:c7:a2:06:4c:17:84:5c:a5:75:5e:d6:df:ed:44:82:bc:
         25:42:99:f0:e0:56:05:f0:d5:89:99:0b:33:1f:75:0a:2d:9c:
         ac:99:8e:68:c5:b2:7c:4d:10:82:f2:4d:e9:20:e8:04:0f:da:
         eb:59:7c:07:71:bd:7e:67:2a:5d:b6:ed:a4:e8:95:30:06:fc:
         8d:c0:c3:11:49:95:c1:31:3b:12:2a:a5:31:51:d7:f7:7e:91:
         53:73:2e:2d:ea:93:5f:88:d9:19:d4:23:36:f2:65:b5:e1:b4:
         13:f3:d2:4c:c9:38:dd:a6:b1:87:f0:c3:93:14:e7:16:69:e5:
         cb:eb:be:7b:61:8b:a4:39:01:1f:1f:b7:c0:d7:13:1d:08:c1:
         bb:ad:45:6b:8f:73:08:0f:b7:27:f9:d8:41:fc:37:05:19:7b:
         ae:9e:63:8c:93:58:71:55:3e:fc:5d:5a:72:c8:17:db:c2:ba:
         3a:aa:39:e0:1c:69:61:82:51:fc:3b:f0:bd:58:eb:0f:76:a3:
         99:0e:33:ea:fe:20:f6:19:a8:ad:86:e8:b0:45:e8:78:d4:d1:
         0e:a9:1d:35:69:64:0d:2d:f9:98:c3:b2:cf:66:b0:28:76:2b:
         eb:5e:a1:a3:5b:0f:8b:91:88:cb:7c:7c:87:f1:d5:1e:89:4f:
         d2:8f:3d:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70IO8A0N8k4sksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
NWNhMmE5NDYtNGMwZC00YjI3LTljNDYtNzZiMzA4ZjdiMDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizOcsSZhUY1gneUXW2fNpUUhGeDAlIPPSW5V
vzLXL5scM/OiSrT2uqWU/Ua2LA822Are22cy+T4fjMzVO6E5gdfStEpoOZ4icF7f
HwpV3Y3ryz3/zfS3ghVVmUJTdyRKbQUl2i4wkaFbzeXU8FB2XXKa80ZY8K0eCR4V
Gui3QgcSYEf0wlzpZIx+xxWBTvNDm5F2OBsdBECdJBGnJGudsR5ZkzF7AjJ+c9cW
sAk9BCT0L5Kc8L46jhOZIEJFK/hL5C6+XFQmJ4PSn5YCdo4XAI97m9olng/yaEVf
KDUzilEHEj+vQpwxHQGo50AuYYUSft0gKN8t5YWDmlqbv1R3UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqkqf0fNsr4MACnfXJzhXYd6LUQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzQ3ZWQ0NGItMWIzYi0z
M2I0LThjNjUtYmNhYzUxYmE5NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdbDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrPx6IGTBeEXKV1Xtbf7USCvCVCmfDgVgXw1YmZCzMfdQotnKyZjmjF
snxNEILyTekg6AQP2utZfAdxvX5nKl227aTolTAG/I3AwxFJlcExOxIqpTFR1/d+
kVNzLi3qk1+I2RnUIzbyZbXhtBPz0kzJON2msYfww5MU5xZp5cvrvnthi6Q5AR8f
t8DXEx0IwbutRWuPcwgPtyf52EH8NwUZe66eY4yTWHFVPvxdWnLIF9vCujqqOeAc
aWGCUfw78L1Y6w92o5kOM+r+IPYZqK2G6LBF6HjU0Q6pHTVpZA0t+ZjDss9msCh2
K+teoaNbD4uRiMt8fIfx1R6JT9KPPQY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:37:23 2025 by rpki-client