Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa
File:                     4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa (raw, json)
Hash identifier:          5lC4BL5Kf+524/Hxfk61qzzooj8k+4upBXgR+QfBQ8U=
Subject key identifier:   0C:82:3E:57:BE:58:1E:F3:EC:0F:F8:FC:7E:F1:00:48:4C:7E:BB:03
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F43285849CE9A671D5320C02197312580
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     46632
IP address blocks:        199.47.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:67:1d:53:20:c0:21:97:31:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=629be02a-4919-441a-959a-2c6526433482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:37:ac:88:b3:78:4e:51:93:b7:55:1c:26:
                    ae:7b:6f:b6:3f:9d:d5:42:c4:63:7f:4f:00:7b:4c:
                    d6:e0:17:de:02:55:1f:d5:55:fa:1e:e9:b2:75:a4:
                    27:db:50:7e:1e:e5:1b:1d:47:d4:6f:3e:5d:d6:bc:
                    67:01:43:6f:0f:be:9e:a3:c9:17:b3:7a:3d:20:34:
                    f8:18:63:62:7d:2f:d2:e6:6f:b6:f9:70:e7:0b:89:
                    46:1b:5c:f6:a0:01:14:7f:87:4c:11:2c:f7:b1:d6:
                    cf:7b:45:18:00:b2:3d:e9:ea:f4:48:2c:4a:6e:61:
                    50:33:49:03:f7:22:03:85:26:57:c7:79:a8:6c:5b:
                    cd:5d:7e:53:16:46:14:aa:3f:73:2e:9b:31:45:b5:
                    d6:df:16:9d:09:d0:85:a6:99:2f:5a:df:41:50:00:
                    7f:15:d1:9e:c9:58:2d:c9:ec:70:db:36:75:17:2d:
                    69:b7:9a:e1:f3:d1:28:a5:e8:b8:9a:f6:83:35:c9:
                    9d:68:e8:15:c6:56:11:0e:04:44:5d:d8:8a:50:65:
                    cb:9b:01:34:d6:64:f5:d4:8f:1d:46:cf:08:2e:fb:
                    bf:d5:29:26:43:4d:d1:4d:cd:3c:19:4a:74:50:8e:
                    8d:a2:bc:7b:91:1a:3f:00:1a:80:a1:f2:ed:d3:79:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:3E:57:BE:58:1E:F3:EC:0F:F8:FC:7E:F1:00:48:4C:7E:BB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:25:f7:df:44:5e:21:1d:65:9f:12:9d:df:1e:87:27:2b:5e:
         9b:eb:d6:97:b2:df:ac:98:9b:b6:6f:46:ba:ac:4a:ef:bc:ce:
         29:3e:90:3e:87:bf:35:b1:33:e4:6b:9d:7b:b0:98:c4:b7:5a:
         84:fa:18:7f:18:3f:24:62:ac:42:94:42:23:82:3a:65:cf:cb:
         8a:f7:b6:cb:2f:4a:c8:9b:f2:36:95:91:ee:71:4b:1d:05:61:
         f9:91:a8:6e:be:30:89:3d:bb:d9:45:6a:69:7b:b7:d4:25:0a:
         11:59:73:a6:34:8a:1b:8f:6d:c6:d4:89:96:c7:b4:dc:df:0a:
         39:92:fa:b7:d5:b5:ef:df:f3:e1:7f:da:87:59:b1:f5:5f:1c:
         54:8b:65:80:db:19:dc:e1:53:4d:15:1c:4a:df:c1:a4:90:95:
         db:cc:ef:e0:7e:dc:de:69:b1:9d:56:e5:96:e8:65:1c:1c:f1:
         d2:4e:80:1f:9c:1b:1b:70:45:cf:69:9a:84:d8:99:3c:cb:65:
         15:1c:47:ac:98:52:52:d1:82:ab:ce:3e:d7:c7:43:79:73:a5:
         7a:2e:b8:40:bf:2f:22:1f:cd:ca:81:cb:10:7a:84:b2:e2:c3:
         0b:19:c7:04:dc:ef:75:d6:44:fa:fa:f8:30:44:53:a7:d6:a1:
         83:b1:8c:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmcdUyDAIZcxJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
NjI5YmUwMmEtNDkxOS00NDFhLTk1OWEtMmM2NTI2NDMzNDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBk3rIizeE5Rk7dVHCaue2+2P53VQsRjf08A
e0zW4BfeAlUf1VX6HumydaQn21B+HuUbHUfUbz5d1rxnAUNvD76eo8kXs3o9IDT4
GGNifS/S5m+2+XDnC4lGG1z2oAEUf4dMESz3sdbPe0UYALI96er0SCxKbmFQM0kD
9yIDhSZXx3mobFvNXX5TFkYUqj9zLpsxRbXW3xadCdCFppkvWt9BUAB/FdGeyVgt
yexw2zZ1Fy1pt5rh89Eopei4mvaDNcmdaOgVxlYRDgREXdiKUGXLmwE01mT11I8d
Rs8ILvu/1SkmQ03RTc08GUp0UI6Norx7kRo/ABqAofLt03kGyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyCPle+WB7z7A/4/H7xAEhMfrsDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvNGVhMWRmZDgtZGU5ZC0z
ZjU4LWE3ZDktZTNlYjExNzY4YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQl999EXiEdZZ8Snd8ehycrXpvr1pey36yYm7ZvRrqsSu+8zik+kD6H
vzWxM+RrnXuwmMS3WoT6GH8YPyRirEKUQiOCOmXPy4r3tssvSsib8jaVke5xSx0F
YfmRqG6+MIk9u9lFaml7t9QlChFZc6Y0ihuPbcbUiZbHtNzfCjmS+rfVte/f8+F/
2odZsfVfHFSLZYDbGdzhU00VHErfwaSQldvM7+B+3N5psZ1W5ZboZRwc8dJOgB+c
GxtwRc9pmoTYmTzLZRUcR6yYUlLRgqvOPtfHQ3lzpXouuEC/LyIfzcqByxB6hLLi
wwsZxwTc73XWRPr6+DBEU6fWoYOxjPc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:40:18 2025 by rpki-client