Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6e4d7bf9-da34-32ab-9a96-b7023780e91d.roa
File:                     6e4d7bf9-da34-32ab-9a96-b7023780e91d.roa (raw, json)
Hash identifier:          J6z8u5d7FE0im5N8ce2MIo4mtguskpSBw7ClkRdqcLI=
Subject key identifier:   AC:F4:3D:21:7F:4C:9D:F2:A2:C6:5F:71:19:1D:61:29:EF:FB:21:9B
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584957F4126E659197FEDDC247A0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6e4d7bf9-da34-32ab-9a96-b7023780e91d.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     203963
IP address blocks:        149.19.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:12:6e:65:91:97:fe:dd:c2:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=d4b9a5c8-6bb9-4a72-b59b-5566fc94562d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:da:9e:b6:a1:4f:17:14:5a:8a:b7:91:3e:
                    27:c0:69:3a:ad:ce:9b:e0:cb:23:0e:16:34:08:d1:
                    f5:54:ea:c7:e5:de:9a:b5:0d:14:5e:db:85:bb:a6:
                    4f:ad:85:3a:75:3e:1f:51:a7:9e:40:e4:96:d4:11:
                    34:3c:ca:0b:ce:97:38:6d:84:fe:5e:dd:d7:04:c8:
                    39:72:2a:d8:0c:76:ca:c1:6d:e5:b5:0b:a9:f4:ec:
                    65:83:64:07:02:58:9f:6c:88:c0:0f:bd:15:07:d2:
                    21:7a:2e:c7:ef:0b:9a:32:b1:05:bd:65:fe:f0:5a:
                    2b:d7:14:e0:c4:2c:8a:e4:20:23:a0:3b:6f:31:59:
                    d4:d0:2e:79:58:ac:7a:3d:a6:01:2b:f2:71:86:ce:
                    ec:f8:e4:36:1e:b7:2a:f6:45:d6:5a:d0:2c:c6:65:
                    83:be:fd:da:77:62:e2:68:98:0a:97:4e:46:fc:fd:
                    80:e9:b6:86:18:2b:48:08:91:d2:4d:67:b2:65:00:
                    a9:33:d7:15:19:df:a6:2e:8a:c1:ab:aa:f9:23:11:
                    9c:55:d6:bd:b3:05:43:eb:6c:2c:6c:d3:57:55:e9:
                    00:5e:84:93:bf:f8:9b:37:3f:e6:32:d4:c0:68:15:
                    04:d3:a2:85:e6:2d:8b:80:03:f1:01:b6:e2:a1:0e:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F4:3D:21:7F:4C:9D:F2:A2:C6:5F:71:19:1D:61:29:EF:FB:21:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6e4d7bf9-da34-32ab-9a96-b7023780e91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f8:54:cb:05:3e:da:c0:ed:80:24:55:e0:ad:bc:9e:8b:87:
         88:3b:e6:e5:ce:2d:d5:09:7b:c9:5f:64:78:ac:90:89:2a:7a:
         50:05:15:a8:9a:21:27:62:f3:f9:cc:47:31:10:0c:ce:26:f0:
         48:d4:0f:a1:e0:68:10:b0:73:f0:1d:22:8a:31:ac:32:ba:d3:
         c3:75:07:d0:d9:ed:27:a8:34:37:11:4a:a8:51:28:a7:3f:34:
         e9:e0:3c:a4:4d:e9:ea:36:96:2e:54:ed:b0:7b:7f:0f:26:aa:
         0b:11:bc:0d:d3:40:ac:ed:ee:bd:2f:31:ed:8a:af:25:42:91:
         4e:ad:bf:d3:3f:13:32:1a:47:0e:bb:9f:7a:6e:5a:f3:98:a3:
         9b:5c:b7:ad:a3:2d:8a:c2:e9:f9:59:e5:15:00:37:c7:bf:5f:
         df:85:4d:cf:f5:9a:ee:b4:eb:1e:98:dd:dc:2c:1f:78:7a:1a:
         13:aa:09:5e:82:5a:4f:6f:d5:fc:bc:5e:4c:5f:57:f4:e6:66:
         87:a5:91:bf:4f:4e:16:0c:4e:9c:ab:ff:33:bc:d1:b7:4e:30:
         1c:b3:89:67:98:cb:bd:65:4b:2e:ba:80:55:1c:94:e2:69:e5:
         d1:1e:e6:7f:9b:93:cd:a7:61:53:1c:57:f3:5e:36:2d:06:1c:
         dd:57:dc:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BJuZZGX/t3CR6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZDRiOWE1YzgtNmJiOS00YTcyLWI1OWItNTU2NmZjOTQ1NjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzLanrahTxcUWoq3kT4nwGk6rc6b4MsjDhY0
CNH1VOrH5d6atQ0UXtuFu6ZPrYU6dT4fUaeeQOSW1BE0PMoLzpc4bYT+Xt3XBMg5
cirYDHbKwW3ltQup9Oxlg2QHAlifbIjAD70VB9Ihei7H7wuaMrEFvWX+8For1xTg
xCyK5CAjoDtvMVnU0C55WKx6PaYBK/Jxhs7s+OQ2Hrcq9kXWWtAsxmWDvv3ad2Li
aJgKl05G/P2A6baGGCtICJHSTWeyZQCpM9cVGd+mLorBq6r5IxGcVda9swVD62ws
bNNXVekAXoSTv/ibNz/mMtTAaBUE06KF5i2LgAPxAbbioQ5gpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKz0PSF/TJ3yosZfcRkdYSnv+yGbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNmU0ZDdiZjktZGEzNC0z
MmFiLTlhOTYtYjcwMjM3ODBlOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRPGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT4VMsFPtrA7YAkVeCtvJ6Lh4g75uXOLdUJe8lfZHiskIkqelAFFaia
ISdi8/nMRzEQDM4m8EjUD6HgaBCwc/AdIooxrDK608N1B9DZ7SeoNDcRSqhRKKc/
NOngPKRN6eo2li5U7bB7fw8mqgsRvA3TQKzt7r0vMe2KryVCkU6tv9M/EzIaRw67
n3puWvOYo5tct62jLYrC6flZ5RUAN8e/X9+FTc/1mu606x6Y3dwsH3h6GhOqCV6C
Wk9v1fy8XkxfV/TmZoelkb9PThYMTpyr/zO80bdOMByziWeYy71lSy66gFUclOJp
5dEe5n+bk82nYVMcV/NeNi0GHN1X3IE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:22:13 2025 by rpki-client