Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa
File:                     a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa (raw, json)
Hash identifier:          gXAFu39lwwlpI12OlCxvJgCPXpzQnhzyT8J+QCAO9BM=
Subject key identifier:   94:B1:92:35:51:D2:77:3A:F9:1B:93:49:AC:3B:5B:7F:88:8C:02:44
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584957F411FC92AC1FB597335CC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     203963
IP address blocks:        192.190.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:11:fc:92:ac:1f:b5:97:33:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=4910d51f-cd21-462e-abf7-8751027e3f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:3f:0e:5c:34:ba:8c:20:2b:ea:5f:26:e0:
                    03:2c:13:87:5a:74:a3:0f:76:b1:a5:36:bb:c0:64:
                    4b:26:b3:7b:64:10:d8:98:03:95:66:08:3d:d1:d0:
                    05:9d:2b:b9:94:58:ee:82:90:db:ea:78:fc:3d:d8:
                    96:7e:f7:aa:60:b3:a3:bc:3c:75:4f:d9:9d:c8:58:
                    1c:8b:a0:f1:bb:69:ad:28:a9:d5:28:c6:29:4b:0e:
                    b1:a6:99:54:8a:e4:9b:10:a1:9a:01:21:3d:1d:d0:
                    6f:b4:84:29:19:bf:0f:51:d7:b0:34:e9:ac:f9:29:
                    f0:59:2d:66:44:15:93:92:5c:16:70:62:bb:ae:33:
                    86:3a:2f:16:07:e5:bd:b7:5d:91:fa:98:7f:ba:a9:
                    11:e0:f5:1a:ab:5c:ca:45:47:01:3d:37:16:5f:eb:
                    6d:c6:1c:2f:44:6e:46:a6:26:0b:ef:26:f5:f4:cf:
                    1c:be:d7:cd:a3:75:50:f8:c4:73:ca:8b:51:5b:74:
                    a0:e4:48:65:39:0f:b8:16:aa:91:de:ed:6a:f7:5d:
                    d2:5c:00:a8:4e:a0:f4:77:6f:5d:46:a7:53:95:00:
                    08:0d:ce:a1:d7:ca:8d:ae:03:7c:b2:ee:1f:6e:36:
                    5d:50:f2:e9:f9:82:54:65:12:5b:22:8e:36:07:2b:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:92:35:51:D2:77:3A:F9:1B:93:49:AC:3B:5B:7F:88:8C:02:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a3580318-63e7-3b8d-beb0-d921ec8bbb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bc:37:7e:fe:a7:1e:84:b6:47:0e:66:d4:3c:bd:0a:45:51:
         dc:2f:e7:6b:29:39:33:26:29:7f:5a:75:e9:e9:99:e1:cc:48:
         07:fc:e5:cd:54:8c:55:0c:aa:1a:d5:26:d9:b9:83:61:17:62:
         e2:af:cd:1d:55:4e:5d:d0:b2:ca:b3:52:f3:64:30:de:94:0f:
         f1:0a:24:15:36:49:c2:0e:31:49:c7:4b:1a:6c:50:c3:86:78:
         a9:f9:0b:c9:68:51:fd:ae:72:9b:24:ba:81:3f:97:6c:b7:cf:
         07:c5:11:25:a1:ea:4b:d4:fb:c5:8e:5a:5c:54:18:8c:ec:5b:
         c5:5b:35:70:d9:9d:8c:fb:41:a8:c8:ec:4d:d3:ae:f1:b4:e6:
         01:2e:f1:44:a9:60:c9:2e:2a:ec:3e:fe:b6:a6:56:86:5e:d7:
         d5:66:10:57:a0:08:85:75:f7:dd:5e:c3:e2:5c:70:a7:4d:bd:
         ba:83:7d:b0:f2:27:d2:1c:b4:e1:17:1e:c4:66:60:ea:9f:ad:
         e9:4c:cb:e0:f1:e2:a1:59:6e:36:9a:e8:ce:93:56:3e:47:ef:
         c8:63:e6:4b:d1:cc:29:73:6f:d7:f4:a5:a6:9d:2c:eb:bf:8e:
         a5:5e:11:03:81:97:c1:15:56:de:3b:80:d6:c4:9d:57:9f:11:
         3d:8d:76:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BH8kqwftZczXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NDkxMGQ1MWYtY2QyMS00NjJlLWFiZjctODc1MTAyN2UzZjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB0/Dlw0uowgK+pfJuADLBOHWnSjD3axpTa7
wGRLJrN7ZBDYmAOVZgg90dAFnSu5lFjugpDb6nj8PdiWfveqYLOjvDx1T9mdyFgc
i6Dxu2mtKKnVKMYpSw6xpplUiuSbEKGaASE9HdBvtIQpGb8PUdewNOms+SnwWS1m
RBWTklwWcGK7rjOGOi8WB+W9t12R+ph/uqkR4PUaq1zKRUcBPTcWX+ttxhwvRG5G
piYL7yb19M8cvtfNo3VQ+MRzyotRW3Sg5EhlOQ+4FqqR3u1q913SXACoTqD0d29d
RqdTlQAIDc6h18qNrgN8su4fbjZdUPLp+YJUZRJbIo42ByvuLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSxkjVR0nc6+RuTSaw7W3+IjAJEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYTM1ODAzMTgtNjNlNy0z
YjhkLWJlYjAtZDkyMWVjOGJiYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL7oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEO8N37+px6EtkcOZtQ8vQpFUdwv52spOTMmKX9adenpmeHMSAf85c1U
jFUMqhrVJtm5g2EXYuKvzR1VTl3QssqzUvNkMN6UD/EKJBU2ScIOMUnHSxpsUMOG
eKn5C8loUf2ucpskuoE/l2y3zwfFESWh6kvU+8WOWlxUGIzsW8VbNXDZnYz7QajI
7E3TrvG05gEu8USpYMkuKuw+/ramVoZe19VmEFegCIV1991ew+JccKdNvbqDfbDy
J9IctOEXHsRmYOqfrelMy+Dx4qFZbjaa6M6TVj5H78hj5kvRzClzb9f0paadLOu/
jqVeEQOBl8EVVt47gNbEnVefET2NdpU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:50:10 2025 by rpki-client