Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3420136-4026-31ac-9d5f-c3696810ee9d.roa
File:                     c3420136-4026-31ac-9d5f-c3696810ee9d.roa (raw, json)
Hash identifier:          KCu22lPZmT4IsEnB8pgsLP3Pwcw7y3xA+XEZWdWxOgA=
Subject key identifier:   9D:A8:EF:CE:6B:BF:45:5D:DB:57:ED:66:40:0B:B0:EA:15:F0:6C:DC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858499F24B527463EBBAC1924F380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3420136-4026-31ac-9d5f-c3696810ee9d.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.197.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:b5:27:46:3e:bb:ac:19:24:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=d85133d7-5748-4785-9c93-017dac8fa214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fd:8b:f4:ef:90:8d:71:1e:f1:c3:36:de:69:
                    ab:6f:f0:23:e4:42:d3:36:60:7d:0e:d9:55:b9:c4:
                    af:6c:47:8d:ef:10:e6:99:9a:d7:d5:17:79:d9:2d:
                    90:12:59:a7:6c:80:42:08:7f:1a:bb:aa:b9:a1:5e:
                    a3:3c:04:ab:f1:0d:24:44:84:af:5b:89:d4:fb:a3:
                    cc:c6:d5:7f:74:7c:76:36:6a:e4:ce:e1:27:fa:78:
                    85:70:26:0a:ec:75:4e:42:40:98:72:81:5b:ff:a0:
                    02:78:95:a4:f3:32:1e:cd:86:57:73:3d:49:8b:5d:
                    49:89:3b:fd:2e:99:3c:ed:cb:c1:13:21:53:ab:a4:
                    e7:da:52:a2:87:12:da:75:ed:4c:f5:dc:00:1d:70:
                    45:33:31:fd:28:e7:5e:6a:67:8b:ef:f4:02:9b:1b:
                    47:fe:ad:97:2e:d3:1e:29:09:55:82:34:45:1a:2e:
                    40:46:a4:b1:8d:8e:92:ad:36:9f:2b:30:8d:52:10:
                    e8:55:6b:34:a8:08:47:56:47:34:b0:91:54:87:bb:
                    06:ef:aa:df:9e:e0:0b:8a:ff:37:0b:b0:cb:8c:20:
                    5a:6e:44:81:06:09:6f:4c:d4:41:90:52:4a:aa:60:
                    36:e7:eb:6b:48:4b:ed:26:4b:8f:99:fc:b3:82:e9:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A8:EF:CE:6B:BF:45:5D:DB:57:ED:66:40:0B:B0:EA:15:F0:6C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3420136-4026-31ac-9d5f-c3696810ee9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:87:c4:a8:2c:81:b7:ce:4d:95:bc:93:67:d0:db:43:1c:
         88:18:d1:58:62:01:ec:e8:3a:91:ac:d3:7f:74:73:90:6a:94:
         64:3e:a7:1c:49:63:a9:78:76:d8:50:6c:c8:76:ef:be:aa:5f:
         3a:11:f0:b7:a5:0a:0c:d3:1b:53:31:d4:b9:b5:da:43:75:b8:
         1a:18:ba:cd:73:bd:63:1b:bd:89:04:84:30:87:2f:98:fd:cc:
         d6:12:9e:cf:0d:07:32:af:ff:40:0f:e8:5d:50:e9:ea:f5:da:
         d1:9d:fa:97:28:3c:3d:fa:25:ec:9e:b1:76:0b:cf:b0:66:b5:
         25:dc:6c:61:b7:12:ed:8f:cf:be:29:2a:20:7e:56:9e:d7:d7:
         7f:c5:a0:17:c8:81:53:23:59:4e:ea:a8:6d:4c:b5:2c:25:0e:
         c5:fc:a7:a1:d0:cd:c7:5c:64:37:30:01:e1:12:ac:2a:97:b2:
         06:82:89:70:e9:ff:cb:b0:59:28:17:c9:4d:fc:9a:f7:f7:db:
         07:89:81:22:34:a4:e2:f0:10:5b:3b:f7:0d:3e:d5:04:08:11:
         a6:d7:9c:90:2a:c4:19:52:86:7a:93:7e:c8:f4:02:3c:37:96:
         ee:2d:66:99:96:71:ea:93:fb:64:a7:f1:7f:04:f9:9e:ef:3c:
         33:58:71:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLUnRj67rBkk84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
ZDg1MTMzZDctNTc0OC00Nzg1LTljOTMtMDE3ZGFjOGZhMjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/2L9O+QjXEe8cM23mmrb/Aj5ELTNmB9DtlV
ucSvbEeN7xDmmZrX1Rd52S2QElmnbIBCCH8au6q5oV6jPASr8Q0kRISvW4nU+6PM
xtV/dHx2NmrkzuEn+niFcCYK7HVOQkCYcoFb/6ACeJWk8zIezYZXcz1Ji11JiTv9
Lpk87cvBEyFTq6Tn2lKihxLade1M9dwAHXBFMzH9KOdeameL7/QCmxtH/q2XLtMe
KQlVgjRFGi5ARqSxjY6SrTafKzCNUhDoVWs0qAhHVkc0sJFUh7sG76rfnuALiv83
C7DLjCBabkSBBglvTNRBkFJKqmA25+trSEvtJkuPmfyzgulSowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2o785rv0Vd21ftZkALsOoV8GzcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzM0MjAxMzYtNDAyNi0z
MWFjLTlkNWYtYzM2OTY4MTBlZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH16h8SoLIG3zk2VvJNn0NtDHIgY0VhiAezoOpGs0390c5BqlGQ+pxxJ
Y6l4dthQbMh2776qXzoR8LelCgzTG1Mx1Lm12kN1uBoYus1zvWMbvYkEhDCHL5j9
zNYSns8NBzKv/0AP6F1Q6er12tGd+pcoPD36JeyesXYLz7BmtSXcbGG3Eu2Pz74p
KiB+Vp7X13/FoBfIgVMjWU7qqG1MtSwlDsX8p6HQzcdcZDcwAeESrCqXsgaCiXDp
/8uwWSgXyU38mvf32weJgSI0pOLwEFs79w0+1QQIEabXnJAqxBlShnqTfsj0Ajw3
lu4tZpmWceqT+2Sn8X8E+Z7vPDNYcYc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:04:55 2025 by rpki-client