Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c4dd922-1790-3e26-bfdf-61f086af0ef8.roa
File:                     9c4dd922-1790-3e26-bfdf-61f086af0ef8.roa (raw, json)
Hash identifier:          h6d0ShvLVL6YqGfntngymEVOZit0xk9cCmfGaN99mD4=
Subject key identifier:   69:EA:3E:42:66:D3:A7:44:9F:64:A1:FB:5A:B6:8A:52:81:70:A9:E6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858499AF4845ECDC77849D1347240
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c4dd922-1790-3e26-bfdf-61f086af0ef8.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     2158
IP address blocks:        192.57.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:84:5e:cd:c7:78:49:d1:34:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=ab7a8e15-91c7-4358-8550-c8cf016bde8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:65:e8:4b:54:0a:cb:ee:ae:f0:8a:71:d7:
                    8a:e4:4c:42:1a:d2:a0:e8:de:5a:33:90:9d:3f:9e:
                    13:76:32:e0:9d:20:10:8b:12:70:06:dc:0c:6e:cc:
                    c6:f6:d6:1f:5a:b6:77:da:06:2f:ee:b5:43:66:0a:
                    5a:c8:67:5c:58:ed:6c:4b:d8:d1:0c:d3:c5:b3:14:
                    6c:14:11:47:de:04:95:d9:52:1c:f9:5c:27:3e:05:
                    19:8a:9c:2b:a2:f9:74:bb:09:f0:ce:27:c0:e7:7d:
                    b3:a6:dc:3e:a8:74:45:09:97:20:29:28:71:64:f1:
                    a7:f7:af:89:3e:d3:b5:7d:cc:8d:41:c9:e5:50:c4:
                    76:df:3e:fd:9f:c2:24:d0:df:be:bd:16:11:f7:1c:
                    86:dc:95:90:0d:16:3a:96:b8:5d:a5:9f:e4:30:0f:
                    8c:33:83:38:d7:ea:64:d9:d2:74:62:c9:63:94:c5:
                    10:cb:02:6c:3d:9e:22:f2:f3:d6:84:32:87:30:4f:
                    a0:3b:d2:74:43:18:6b:62:97:f0:0f:b4:70:b7:a4:
                    6f:0c:3f:48:30:31:42:9e:09:c8:51:f7:57:1b:53:
                    6c:a3:be:50:06:f0:1e:81:a2:00:5c:ca:04:4d:21:
                    7b:1c:a0:6d:c3:8c:ac:b4:f3:41:87:3b:54:08:f9:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EA:3E:42:66:D3:A7:44:9F:64:A1:FB:5A:B6:8A:52:81:70:A9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c4dd922-1790-3e26-bfdf-61f086af0ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.57.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:f1:c5:32:a8:de:dd:27:cf:36:22:5f:47:c4:68:5a:48:
         30:a7:e5:23:e7:19:c1:78:01:6a:80:d9:c9:a8:de:0d:59:12:
         94:d6:40:74:ac:9f:01:bb:0e:33:4c:df:2c:06:c2:95:5a:b2:
         be:da:8c:cf:14:8f:bb:d4:3b:18:c4:b4:6b:d2:c3:c2:ae:42:
         6d:10:11:35:78:e3:2e:7a:f0:4e:5a:0c:ba:de:a1:a9:af:02:
         d9:93:69:d1:4c:aa:80:14:3a:5e:e5:d9:d9:15:b3:c4:d0:c9:
         be:15:ad:d5:cb:30:9c:d9:ae:bd:95:65:6e:57:02:13:82:fb:
         6c:30:4e:f6:60:f8:a0:57:9e:d0:5c:0e:5a:48:43:24:d3:e5:
         c9:ae:9d:44:11:bd:e4:d5:7a:de:dd:f7:1f:2d:4f:3f:ac:66:
         03:2e:ab:02:ab:9d:9d:02:1a:5d:ca:7b:62:c7:9a:ed:a6:26:
         2d:f7:b1:25:e6:b9:8e:4b:47:f0:6d:d3:c4:bd:61:6c:61:ca:
         51:07:b6:50:e2:c2:8f:90:8f:81:a2:96:b9:7f:83:44:cf:ef:
         da:fa:e3:59:7a:b9:39:96:cf:26:a8:a2:3e:17:15:91:88:2e:
         ca:f0:11:7f:ba:e9:e8:e1:6c:b8:fa:41:06:07:b8:17:be:63:
         d2:97:a2:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IRezcd4SdE0ckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
YWI3YThlMTUtOTFjNy00MzU4LTg1NTAtYzhjZjAxNmJkZThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRxl6EtUCsvurvCKcdeK5ExCGtKg6N5aM5Cd
P54TdjLgnSAQixJwBtwMbszG9tYfWrZ32gYv7rVDZgpayGdcWO1sS9jRDNPFsxRs
FBFH3gSV2VIc+VwnPgUZipwrovl0uwnwzifA532zptw+qHRFCZcgKShxZPGn96+J
PtO1fcyNQcnlUMR23z79n8Ik0N++vRYR9xyG3JWQDRY6lrhdpZ/kMA+MM4M41+pk
2dJ0YsljlMUQywJsPZ4i8vPWhDKHME+gO9J0QxhrYpfwD7Rwt6RvDD9IMDFCngnI
UfdXG1Nso75QBvAegaIAXMoETSF7HKBtw4ystPNBhztUCPmnKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnqPkJm06dEn2Sh+1q2ilKBcKnmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWM0ZGQ5MjItMTc5MC0z
ZTI2LWJmZGYtNjFmMDg2YWYwZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDlyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSi8cUyqN7dJ882Il9HxGhaSDCn5SPnGcF4AWqA2cmo3g1ZEpTWQHSs
nwG7DjNM3ywGwpVasr7ajM8Uj7vUOxjEtGvSw8KuQm0QETV44y568E5aDLreoamv
AtmTadFMqoAUOl7l2dkVs8TQyb4VrdXLMJzZrr2VZW5XAhOC+2wwTvZg+KBXntBc
DlpIQyTT5cmunUQRveTVet7d9x8tTz+sZgMuqwKrnZ0CGl3Ke2LHmu2mJi33sSXm
uY5LR/Bt08S9YWxhylEHtlDiwo+Qj4Gilrl/g0TP79r641l6uTmWzyaooj4XFZGI
LsrwEX+66ejhbLj6QQYHuBe+Y9KXoho=
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:37:07 2025 by rpki-client