Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/479fd856-d95a-391f-870c-32bdb61c6240.roa
File:                     479fd856-d95a-391f-870c-32bdb61c6240.roa (raw, json)
Hash identifier:          as1FqLRwZVns2CEcD4AzqCzSendPi8GL9ygwAsKpXC0=
Subject key identifier:   B5:70:8A:1A:68:52:A5:CC:59:DC:83:1B:1F:11:64:D5:0D:18:ED:BC
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F43285849EA851B628B8DCF0FAEDF4780
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/479fd856-d95a-391f-870c-32bdb61c6240.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     399629
IP address blocks:        193.149.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1b:62:8b:8d:cf:0f:ae:df:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=dec87cd2-6ace-44f8-87ed-2b2ae1f5b339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:78:b3:9e:e2:7f:67:99:e9:a6:23:87:63:
                    c4:b6:82:55:c6:2f:d0:c3:4e:4c:f4:c7:56:66:b8:
                    a2:e5:7f:ac:21:aa:90:97:e4:7e:ac:01:aa:a3:d2:
                    2e:3f:2b:c8:bc:f7:41:b7:b7:55:dc:2d:9b:68:2f:
                    3d:71:77:f6:b7:16:d2:da:34:b7:dc:b0:a7:4f:d9:
                    e4:38:00:ae:d1:74:1d:db:ed:90:a6:4e:e1:b4:89:
                    19:88:58:28:b6:d8:12:3d:34:54:03:d6:38:76:fe:
                    14:a7:bc:84:59:db:b7:ed:08:3f:43:10:70:22:3f:
                    0c:e3:ac:1d:1c:0e:04:4e:a3:6b:e2:5f:de:f1:6e:
                    85:2c:7b:97:c1:99:5d:69:22:30:00:7d:14:ee:7f:
                    79:18:f4:7b:3b:a8:d3:81:67:e2:17:91:88:23:8a:
                    f1:08:fa:05:00:0e:6c:ed:8f:26:13:1c:58:26:c5:
                    80:0b:3e:a5:28:b5:96:01:69:26:2f:62:ae:dc:6b:
                    19:6a:c7:f3:72:4f:38:bc:51:d2:bc:d6:54:0d:61:
                    dc:98:f8:98:8a:de:4e:9a:5b:c2:b3:ce:ff:4c:36:
                    b2:b2:61:e4:1e:70:09:16:0a:36:3b:d5:4d:cb:fa:
                    40:c5:fd:17:56:f0:0e:ad:04:01:27:9e:76:fa:2d:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:8A:1A:68:52:A5:CC:59:DC:83:1B:1F:11:64:D5:0D:18:ED:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/479fd856-d95a-391f-870c-32bdb61c6240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6f:80:62:f0:77:72:16:41:55:c9:1e:69:f3:b8:3e:fa:ed:
         f3:d6:53:df:46:a4:6b:0f:ff:eb:10:86:e4:aa:03:79:a0:cb:
         72:af:49:26:c4:6b:78:fa:e3:cc:63:40:5f:d3:96:1e:9f:95:
         10:29:f5:f1:f0:b1:fe:ff:2a:a0:74:d0:95:ba:73:61:df:5d:
         9f:e3:53:f7:75:9f:8a:86:fa:f8:d2:a3:66:0e:5e:d7:82:54:
         6c:bc:d3:08:73:36:c9:26:f4:18:de:27:36:7e:97:68:58:de:
         8c:58:0f:a3:16:ba:9f:10:b4:19:cf:5f:5b:24:0d:0d:67:22:
         77:36:20:e4:d8:b6:ea:57:db:7b:96:7c:a1:69:eb:48:83:83:
         ad:54:73:e5:f5:b5:72:50:9f:d3:6c:0e:19:2a:ad:7f:16:01:
         1d:dd:80:2a:82:e3:64:b7:0b:85:99:f1:42:41:2d:ae:54:52:
         ea:9e:c6:f3:3e:25:36:38:40:fc:a3:d5:11:10:0b:20:ab:af:
         09:33:76:15:83:c4:c5:d4:ae:d3:20:08:60:04:0d:b3:ab:27:
         ac:10:dc:9d:f3:8e:ca:7d:de:e8:ff:77:33:dd:34:ca:c2:e4:
         fd:6b:f3:d3:19:22:0f:e7:fe:a7:89:33:ca:9b:18:1b:7d:b2:
         70:94:94:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhRtii43PD67fR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
ZGVjODdjZDItNmFjZS00NGY4LTg3ZWQtMmIyYWUxZjViMzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+94s57if2eZ6aYjh2PEtoJVxi/Qw05M9MdW
Zrii5X+sIaqQl+R+rAGqo9IuPyvIvPdBt7dV3C2baC89cXf2txbS2jS33LCnT9nk
OACu0XQd2+2Qpk7htIkZiFgottgSPTRUA9Y4dv4Up7yEWdu37Qg/QxBwIj8M46wd
HA4ETqNr4l/e8W6FLHuXwZldaSIwAH0U7n95GPR7O6jTgWfiF5GII4rxCPoFAA5s
7Y8mExxYJsWACz6lKLWWAWkmL2Ku3GsZasfzck84vFHSvNZUDWHcmPiYit5OmlvC
s87/TDaysmHkHnAJFgo2O9VNy/pAxf0XVvAOrQQBJ552+i00PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVwihpoUqXMWdyDGx8RZNUNGO28MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvNDc5ZmQ4NTYtZDk1YS0z
OTFmLTg3MGMtMzJiZGI2MWM2MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1vgGLwd3IWQVXJHmnzuD767fPWU99GpGsP/+sQhuSqA3mgy3KvSSbE
a3j648xjQF/Tlh6flRAp9fHwsf7/KqB00JW6c2HfXZ/jU/d1n4qG+vjSo2YOXteC
VGy80whzNskm9BjeJzZ+l2hY3oxYD6MWup8QtBnPX1skDQ1nInc2IOTYtupX23uW
fKFp60iDg61Uc+X1tXJQn9NsDhkqrX8WAR3dgCqC42S3C4WZ8UJBLa5UUuqexvM+
JTY4QPyj1REQCyCrrwkzdhWDxMXUrtMgCGAEDbOrJ6wQ3J3zjsp93uj/dzPdNMrC
5P1r89MZIg/n/qeJM8qbGBt9snCUlP8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:13 2025 by rpki-client