Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa
File:                     f39188b9-36fa-3da1-b751-9158b3ac9d67.roa (raw, json)
Hash identifier:          Uj9PV2CX9XHAEkyk4IoYplsbdEtU45Rb6bfVYZ2CxKo=
Subject key identifier:   C0:BE:51:CB:07:43:79:00:FB:15:71:CD:F0:21:45:8F:C6:D1:3A:F5
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F432858498769B9359D43757108E59F80
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     16072
IP address blocks:        170.186.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b9:35:9d:43:75:71:08:e5:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=432b5e3c-feb7-4f11-8bee-cae5fcee25d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:89:72:0a:65:49:17:d4:ee:3d:e4:ec:7a:
                    09:b6:b6:ec:fc:82:68:55:ee:d3:11:fd:03:2c:d5:
                    5e:a0:e8:62:47:ff:f4:43:39:fc:bd:a7:47:d4:36:
                    eb:b7:75:51:ad:59:89:08:6e:f9:fe:f2:32:db:bf:
                    d2:9e:1f:29:86:5c:17:37:96:34:39:31:40:05:40:
                    41:15:1b:7f:b3:44:f1:c1:bc:df:70:e2:e6:76:92:
                    26:68:e8:08:b9:f5:d9:7a:86:2d:91:57:16:dc:25:
                    13:16:ff:fe:4c:87:dd:59:ff:71:ec:21:53:ca:a3:
                    12:a9:48:57:06:c9:2b:7a:8c:0a:ce:41:9f:b8:13:
                    24:cc:46:eb:2a:8f:27:63:43:ca:35:70:4a:43:43:
                    da:9b:56:34:ca:37:fb:18:3b:10:ca:93:a7:77:e8:
                    ba:89:8c:db:57:53:04:4b:39:eb:7d:ca:e6:b2:d5:
                    aa:3d:a7:df:c3:e8:b0:a4:2f:e2:aa:c8:a3:38:7b:
                    8a:f6:c5:81:dd:b4:b9:2b:74:82:4a:a4:fc:f3:0a:
                    43:24:56:89:b5:b2:ff:f3:4d:06:fd:dd:a4:34:bd:
                    d7:62:59:4b:5f:69:07:72:9d:63:a4:23:83:1e:86:
                    19:37:37:5a:c4:70:54:32:99:78:c6:2f:93:b7:23:
                    1d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BE:51:CB:07:43:79:00:FB:15:71:CD:F0:21:45:8F:C6:D1:3A:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/f39188b9-36fa-3da1-b751-9158b3ac9d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:f1:ff:84:c3:f7:d2:28:e6:15:d8:70:00:59:0c:bf:8e:
         ba:86:0e:4c:f6:93:60:87:8a:35:49:2a:a9:b9:3f:b2:76:77:
         c3:39:e0:87:1c:3e:0f:eb:cc:e6:b7:08:79:e7:aa:f3:59:98:
         66:2b:5e:2a:a7:93:54:2c:9c:b7:67:65:de:62:26:49:e0:eb:
         2e:44:fa:64:a0:e5:0d:fe:91:66:00:b9:5c:42:b2:1c:07:98:
         44:13:e4:9f:f3:86:ac:7b:89:6a:db:36:27:4a:f6:ec:03:b9:
         13:21:42:b2:5f:51:25:0d:a0:a9:cd:93:c2:30:f7:c0:c5:e7:
         16:59:a0:39:89:b1:60:a5:19:de:e8:c8:18:fe:a4:13:4b:a2:
         33:3b:ee:71:63:88:38:fb:79:c6:ce:6b:3c:d4:89:c6:d8:fa:
         34:39:b9:da:ae:3f:aa:c9:7c:7f:05:b4:45:b0:da:a6:09:03:
         60:ca:f3:1f:6b:f9:84:ee:65:36:b5:cf:12:a9:6f:63:e3:94:
         e7:5d:66:13:77:cb:b7:28:11:ef:16:f1:b2:5f:e9:f4:55:48:
         a2:fb:58:12:01:5e:d9:af:92:f5:6e:27:cd:4f:92:72:b8:32:
         e7:69:0e:19:26:dc:9b:20:27:3c:43:58:9b:d4:be:0b:18:4e:
         79:a2:c7:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabk1nUN1cQjln4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0
ZDUyMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
NDMyYjVlM2MtZmViNy00ZjExLThiZWUtY2FlNWZjZWUyNWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA+JcgplSRfU7j3k7HoJtrbs/IJoVe7TEf0D
LNVeoOhiR//0Qzn8vadH1Dbrt3VRrVmJCG75/vIy27/Snh8phlwXN5Y0OTFABUBB
FRt/s0TxwbzfcOLmdpImaOgIufXZeoYtkVcW3CUTFv/+TIfdWf9x7CFTyqMSqUhX
BskreowKzkGfuBMkzEbrKo8nY0PKNXBKQ0Pam1Y0yjf7GDsQypOnd+i6iYzbV1ME
SznrfcrmstWqPaffw+iwpC/iqsijOHuK9sWB3bS5K3SCSqT88wpDJFaJtbL/800G
/d2kNL3XYllLX2kHcp1jpCODHoYZNzdaxHBUMpl4xi+TtyMdPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMC+UcsHQ3kA+xVxzfAhRY/G0Tr1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl
ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZjM5MTg4YjktMzZmYS0z
ZGExLWI3NTEtOTE1OGIzYWM5ZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5
ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4
NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4
MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrrNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADL/8f+Ew/fSKOYV2HAAWQy/jrqGDkz2k2CHijVJKqm5P7J2d8M54Icc
Pg/rzOa3CHnnqvNZmGYrXiqnk1QsnLdnZd5iJkng6y5E+mSg5Q3+kWYAuVxCshwH
mEQT5J/zhqx7iWrbNidK9uwDuRMhQrJfUSUNoKnNk8Iw98DF5xZZoDmJsWClGd7o
yBj+pBNLojM77nFjiDj7ecbOazzUicbY+jQ5udquP6rJfH8FtEWw2qYJA2DK8x9r
+YTuZTa1zxKpb2PjlOddZhN3y7coEe8W8bJf6fRVSKL7WBIBXtmvkvVuJ81PknK4
MudpDhkm3JsgJzxDWJvUvgsYTnmix+s=
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:18:55 2025 by rpki-client