Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e487f9e4-1dc5-3425-8349-36cc7c5cef63.roa
File:                     e487f9e4-1dc5-3425-8349-36cc7c5cef63.roa (raw, json)
Hash identifier:          297Y5bv9HIeVs86wf1gdLW0spnm+IvIwj8Os7xWzVSc=
Subject key identifier:   F9:27:E2:E8:77:FB:13:58:8B:BA:33:76:12:29:34:02:C7:C2:95:E4
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F43285849E22517C13F1EC013EB236000
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e487f9e4-1dc5-3425-8349-36cc7c5cef63.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     1273
IP address blocks:        208.175.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:17:c1:3f:1e:c0:13:eb:23:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=38a65e33-9f91-40bc-8223-26a8926fe158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:29:69:79:6c:e3:3d:7d:08:00:b7:ed:42:
                    26:6d:8e:b2:2d:df:a3:bc:38:d6:5b:9a:85:b7:62:
                    72:41:09:2c:e5:66:03:b8:69:b8:c1:80:07:65:1e:
                    7b:5a:0b:1a:da:78:20:52:28:98:d7:24:22:50:2b:
                    55:ef:30:60:aa:04:dd:3a:2f:dd:35:47:9e:34:75:
                    ab:61:29:8d:5c:4c:34:93:0b:e8:dd:07:c0:05:8b:
                    72:ac:67:8e:ce:7d:5b:67:e9:82:84:07:22:ea:b6:
                    43:5f:32:38:28:08:1a:ce:4b:ce:64:1a:04:34:64:
                    8e:cf:bb:55:82:02:ff:84:7b:7b:ac:30:7e:5f:8c:
                    52:33:6b:ca:df:2d:bd:6e:07:8a:ef:d4:d7:09:0b:
                    6e:7f:34:6f:9c:57:29:16:eb:9d:f3:69:a9:0e:48:
                    0e:86:3c:2f:63:32:06:87:c1:28:68:b4:24:79:53:
                    16:e0:e1:fe:15:61:45:1c:8a:3e:27:77:e5:16:c2:
                    a4:95:eb:18:e9:ff:4e:30:4e:75:c1:e0:49:db:b3:
                    9c:78:a2:59:7e:44:38:a8:d5:0b:6d:a7:8e:7c:dd:
                    b2:83:2c:bb:e7:54:a4:dc:dc:d2:00:74:22:e1:dd:
                    b8:e9:a7:04:4d:99:8a:a7:87:50:2b:bc:33:2e:c0:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:27:E2:E8:77:FB:13:58:8B:BA:33:76:12:29:34:02:C7:C2:95:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/e487f9e4-1dc5-3425-8349-36cc7c5cef63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.175.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:8d:70:c5:e3:ea:08:1a:eb:c6:44:ed:7d:b3:94:aa:83:
         d6:fc:48:9a:05:3a:9a:55:66:c5:41:da:c5:92:70:50:82:1b:
         09:00:bf:35:b7:84:dc:0f:86:e4:41:82:32:64:ec:be:cc:de:
         b1:81:dc:79:fe:8e:d0:5d:2f:e3:89:20:76:63:4f:96:f1:60:
         a2:b6:49:fa:b6:48:15:e1:ee:5c:80:5d:d8:50:3e:9d:17:96:
         c6:09:b9:e4:93:f2:f2:ec:cc:83:5b:41:bf:46:86:c7:ca:33:
         88:aa:5f:b7:48:c5:f2:ae:b9:46:6a:02:ba:c9:eb:a9:ff:89:
         d1:a7:c3:f9:6c:45:e5:eb:3d:db:31:cd:80:5a:1c:3f:c5:03:
         24:8d:5b:1f:b2:a1:6e:1b:bf:17:b2:96:06:ae:ed:f3:a1:9c:
         ab:ba:54:5a:2f:4a:be:8f:37:60:8f:c0:db:b2:b7:ed:a2:3d:
         17:57:c3:85:5e:9d:45:62:cf:a7:73:3a:56:15:28:ba:a8:ec:
         42:23:9e:29:85:04:75:b0:b5:2b:a9:34:85:4c:c8:ac:22:2f:
         7f:5c:f1:fa:1f:b8:48:48:a7:77:7b:a0:fc:fc:a5:07:99:b4:
         25:ac:b2:6b:56:9f:09:48:b1:cf:53:b1:6d:26:a2:82:60:c1:
         e6:24:2a:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRfBPx7AE+sjYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MzhhNjVlMzMtOWY5MS00MGJjLTgyMjMtMjZhODkyNmZlMTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKopaXls4z19CAC37UImbY6yLd+jvDjWW5qF
t2JyQQks5WYDuGm4wYAHZR57Wgsa2nggUiiY1yQiUCtV7zBgqgTdOi/dNUeeNHWr
YSmNXEw0kwvo3QfABYtyrGeOzn1bZ+mChAci6rZDXzI4KAgazkvOZBoENGSOz7tV
ggL/hHt7rDB+X4xSM2vK3y29bgeK79TXCQtufzRvnFcpFuud82mpDkgOhjwvYzIG
h8EoaLQkeVMW4OH+FWFFHIo+J3flFsKklesY6f9OME51weBJ27OceKJZfkQ4qNUL
baeOfN2ygyy751Sk3NzSAHQi4d246acETZmKp4dQK7wzLsCBAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkn4uh3+xNYi7ozdhIpNALHwpXkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZTQ4N2Y5ZTQtMWRjNS0z
NDI1LTgzNDktMzZjYzdjNWNlZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0K/gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbYjXDF4+oIGuvGRO19s5Sqg9b8SJoFOppVZsVB2sWScFCCGwkAvzW3
hNwPhuRBgjJk7L7M3rGB3Hn+jtBdL+OJIHZjT5bxYKK2Sfq2SBXh7lyAXdhQPp0X
lsYJueST8vLszINbQb9GhsfKM4iqX7dIxfKuuUZqArrJ66n/idGnw/lsReXrPdsx
zYBaHD/FAySNWx+yoW4bvxeylgau7fOhnKu6VFovSr6PN2CPwNuyt+2iPRdXw4Ve
nUViz6dzOlYVKLqo7EIjnimFBHWwtSupNIVMyKwiL39c8fofuEhIp3d7oPz8pQeZ
tCWssmtWnwlIsc9TsW0mooJgweYkKvQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:55 2025 by rpki-client