Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa
File:                     81de4d19-de8b-37b4-889e-02591c2ce7e5.roa (raw, json)
Hash identifier:          xxUr7nfDFBDXBYHGhmYDeGcUerSAkdCH88NVuFhpwfM=
Subject key identifier:   F6:68:B2:9F:82:6D:15:AA:3D:5A:2B:E7:BD:15:B2:F3:E4:BB:B4:B5
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F43285849EA8516D3EC394E3A1013CD80
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     399629
IP address blocks:        193.149.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:16:d3:ec:39:4e:3a:10:13:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=4e1533a8-a449-42a7-bb37-c7d80939eb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:bb:72:44:ab:9d:17:38:0a:08:dd:ef:c1:
                    1d:9b:f6:2a:b1:95:ed:72:b0:9b:12:af:4f:df:58:
                    9c:88:ce:94:47:eb:dd:c6:74:94:85:77:79:34:ab:
                    52:08:a6:ab:0b:a8:46:70:3e:0b:58:f7:8e:89:90:
                    88:ef:3b:38:2d:31:6d:ed:72:32:17:be:2e:1f:47:
                    a5:07:8f:96:f1:ba:74:41:3e:90:a7:bd:e4:5a:78:
                    be:28:44:a2:97:d9:76:fc:e3:58:7e:d3:cb:a8:46:
                    1e:c9:5f:5a:bd:9f:6d:c7:37:97:e7:ab:14:bf:e1:
                    82:38:e9:60:a1:78:4d:63:44:51:a4:7e:30:fa:f1:
                    3f:be:84:7d:b2:78:cc:0e:72:e3:a6:17:f2:84:a7:
                    26:e5:4a:fe:89:8c:04:b8:f7:fc:0b:59:e3:36:48:
                    ec:f1:b7:44:0e:1d:2c:f1:af:e6:c1:ec:ab:6c:b6:
                    b4:b1:58:84:bf:e6:75:9b:dd:28:9b:ca:69:c9:82:
                    f8:09:cf:8c:d1:e2:28:93:2f:80:40:65:7c:5e:cc:
                    aa:cf:66:25:69:a9:5c:12:48:96:2d:27:04:62:6f:
                    4a:75:a7:90:35:2d:29:4f:94:9a:9d:82:43:ab:0c:
                    c3:29:34:41:cf:69:74:6d:4f:ee:0c:a8:1c:2f:0a:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:68:B2:9F:82:6D:15:AA:3D:5A:2B:E7:BD:15:B2:F3:E4:BB:B4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/81de4d19-de8b-37b4-889e-02591c2ce7e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:01:0a:2a:2a:0b:80:6c:a2:ab:a9:79:93:f4:5c:71:6b:08:
         85:0c:82:56:db:6d:b8:5e:a3:ba:57:18:5f:5c:b7:f8:c2:62:
         c0:de:16:27:ab:1d:9e:48:6b:09:ca:ef:ff:c2:00:35:2e:a3:
         cf:e8:8e:2c:4f:a8:3c:f0:3b:a0:da:0d:72:9c:74:00:4a:0b:
         bb:04:c8:6f:e6:d0:d3:1d:4e:3b:eb:8c:4e:a7:bd:2d:70:ed:
         3c:f6:90:e8:81:14:16:87:47:66:b7:27:b9:77:3d:a9:04:b7:
         be:07:22:17:a1:31:04:56:ef:c3:44:75:f4:9b:80:c7:86:48:
         31:ec:8c:af:8e:b4:a0:bc:68:bc:13:db:96:a2:1b:94:cd:d9:
         93:7e:25:40:87:d2:b1:3f:c5:65:ab:41:44:33:3f:46:ee:63:
         a8:8b:98:85:f9:19:36:cd:f7:8d:18:7c:b3:cc:96:b6:70:43:
         15:b0:b8:fc:fb:67:a9:7c:28:9b:af:fd:9e:40:af:e1:80:ca:
         f7:e2:bb:18:b5:d0:1d:b4:10:b6:00:20:00:c9:10:a9:13:c1:
         3d:dc:6e:99:7b:c9:85:a3:6f:91:f7:78:44:b4:02:6d:bb:97:
         44:df:1b:d0:14:7c:ef:2e:7a:98:b0:89:ac:85:93:45:f2:a9:
         1b:89:75:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhRbT7DlOOhATzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
NGUxNTMzYTgtYTQ0OS00MmE3LWJiMzctYzdkODA5MzllYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu27ckSrnRc4Cgjd78Edm/YqsZXtcrCbEq9P
31iciM6UR+vdxnSUhXd5NKtSCKarC6hGcD4LWPeOiZCI7zs4LTFt7XIyF74uH0el
B4+W8bp0QT6Qp73kWni+KESil9l2/ONYftPLqEYeyV9avZ9txzeX56sUv+GCOOlg
oXhNY0RRpH4w+vE/voR9snjMDnLjphfyhKcm5Ur+iYwEuPf8C1njNkjs8bdEDh0s
8a/mweyrbLa0sViEv+Z1m90om8ppyYL4Cc+M0eIoky+AQGV8Xsyqz2YlaalcEkiW
LScEYm9KdaeQNS0pT5SanYJDqwzDKTRBz2l0bU/uDKgcLwrjhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZosp+CbRWqPVor570VsvPku7S1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvODFkZTRkMTktZGU4Yi0z
N2I0LTg4OWUtMDI1OTFjMmNlN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZW0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQBCioqC4BsoqupeZP0XHFrCIUMglbbbbheo7pXGF9ct/jCYsDeFier
HZ5IawnK7//CADUuo8/ojixPqDzwO6DaDXKcdABKC7sEyG/m0NMdTjvrjE6nvS1w
7Tz2kOiBFBaHR2a3J7l3PakEt74HIhehMQRW78NEdfSbgMeGSDHsjK+OtKC8aLwT
25aiG5TN2ZN+JUCH0rE/xWWrQUQzP0buY6iLmIX5GTbN940YfLPMlrZwQxWwuPz7
Z6l8KJuv/Z5Ar+GAyvfiuxi10B20ELYAIADJEKkTwT3cbpl7yYWjb5H3eES0Am27
l0TfG9AUfO8uepiwiayFk0XyqRuJdTA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:13 2025 by rpki-client