Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1bd174ac-9526-3675-a2a8-329f3fd12aeb.roa
File:                     1bd174ac-9526-3675-a2a8-329f3fd12aeb.roa (raw, json)
Hash identifier:          T2D+U62Fkc4xTGB/iw0scIUfX+tOixLM21dXbet26fo=
Subject key identifier:   13:EA:DE:87:FA:3E:87:10:EA:9E:FE:3B:DB:27:8A:B7:EE:FA:78:2C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339CFE7C424FD1526BF1880
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1bd174ac-9526-3675-a2a8-329f3fd12aeb.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        192.200.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:cf:e7:c4:24:fd:15:26:bf:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=abebf57f-2454-4152-b34f-3317a59609b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:d9:dd:29:94:e0:44:7f:58:fb:b4:f7:04:
                    63:dc:d2:4e:9f:07:52:58:db:74:97:1a:d9:69:89:
                    1e:9a:4c:15:e1:48:b1:c9:c3:dc:ab:39:5b:cc:89:
                    e1:8b:87:39:38:2a:da:af:12:28:8d:79:0a:31:cc:
                    7d:80:dd:f9:a7:01:e8:a5:c3:0f:51:b0:33:0e:64:
                    8f:b3:24:11:e9:9b:4c:15:15:73:63:5c:a2:b9:c1:
                    21:a6:a9:4a:51:11:d4:38:a2:3b:9b:4c:35:d6:b6:
                    bb:d1:98:79:f4:2f:5b:69:ee:a0:48:8f:2a:3b:11:
                    74:82:96:7f:49:fa:45:b4:d0:34:f3:cb:13:0c:f4:
                    c4:32:1d:a4:ec:3e:42:78:85:05:ac:7f:70:c8:53:
                    33:ff:5d:b9:45:2e:d9:80:86:43:fc:9d:74:f0:2e:
                    19:b6:2e:ac:51:41:08:37:d8:62:5f:96:f1:44:2b:
                    b9:50:2c:ea:c6:6c:97:be:53:5c:f0:fe:58:97:66:
                    6e:10:82:4b:70:ea:c8:5e:55:6d:4b:51:ba:d9:ab:
                    b5:20:d0:88:53:3a:a7:dd:a5:1b:7d:b2:b4:34:ef:
                    71:0e:44:c0:6f:1a:7c:7e:91:7a:9d:a9:ab:92:79:
                    8f:d2:30:42:74:3e:c4:cc:7b:67:e4:44:7a:17:36:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EA:DE:87:FA:3E:87:10:EA:9E:FE:3B:DB:27:8A:B7:EE:FA:78:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1bd174ac-9526-3675-a2a8-329f3fd12aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a6:6b:52:b2:bb:6f:d1:f8:94:c5:e5:7d:c0:9b:fe:20:b7:
         ff:f1:9c:9f:32:a0:79:3a:5f:e0:05:84:a8:02:9c:a4:56:83:
         a0:0e:d2:c3:de:53:fd:4f:9d:a8:b0:3c:b0:ba:cf:5b:19:13:
         8b:64:e9:59:5b:af:38:4f:d0:2e:8f:91:de:7e:1a:05:f0:1b:
         1b:ec:d5:0b:b6:8d:79:e6:62:82:a7:8f:51:3f:9b:59:82:72:
         52:16:f1:1c:f6:eb:bb:39:7a:2e:c8:0f:a4:72:72:fc:83:3f:
         27:d1:5f:86:fd:77:b0:d2:6a:01:e9:e0:5b:48:6a:21:e8:71:
         36:bc:e3:27:8f:f6:7c:09:2a:dc:e6:4f:39:14:44:26:28:67:
         3f:dd:bc:c9:44:47:e6:3d:24:3a:b7:8f:5d:70:e2:ef:00:b0:
         1b:f6:9c:9b:27:d8:77:42:1e:f0:eb:e7:a8:6a:17:32:61:c4:
         26:a4:a6:80:da:9f:38:9e:41:59:bc:4e:0c:b5:76:fc:c8:60:
         ea:17:3e:61:f1:c2:43:15:46:cd:c9:6e:cf:16:30:2b:d3:55:
         a4:06:24:6b:60:0f:b0:c4:f3:57:32:f0:4a:30:d6:b6:0a:36:
         db:c5:7e:96:59:05:2b:08:7d:ab:34:49:b6:74:d8:ed:57:db:
         ce:a8:8d:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc/nxCT9FSa/GIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
YWJlYmY1N2YtMjQ1NC00MTUyLWIzNGYtMzMxN2E1OTYwOWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9vZ3SmU4ER/WPu09wRj3NJOnwdSWNt0lxrZ
aYkemkwV4UixycPcqzlbzInhi4c5OCrarxIojXkKMcx9gN35pwHopcMPUbAzDmSP
syQR6ZtMFRVzY1yiucEhpqlKURHUOKI7m0w11ra70Zh59C9bae6gSI8qOxF0gpZ/
SfpFtNA088sTDPTEMh2k7D5CeIUFrH9wyFMz/125RS7ZgIZD/J108C4Zti6sUUEI
N9hiX5bxRCu5UCzqxmyXvlNc8P5Yl2ZuEIJLcOrIXlVtS1G62au1INCIUzqn3aUb
fbK0NO9xDkTAbxp8fpF6namrknmP0jBCdD7EzHtn5ER6Fzb1ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPq3of6PocQ6p7+O9snirfu+ngsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWJkMTc0YWMtOTUyNi0z
Njc1LWEyYTgtMzI5ZjNmZDEyYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwMjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyma1Kyu2/R+JTF5X3Am/4gt//xnJ8yoHk6X+AFhKgCnKRWg6AO0sPe
U/1PnaiwPLC6z1sZE4tk6VlbrzhP0C6Pkd5+GgXwGxvs1Qu2jXnmYoKnj1E/m1mC
clIW8Rz267s5ei7ID6RycvyDPyfRX4b9d7DSagHp4FtIaiHocTa84yeP9nwJKtzm
TzkURCYoZz/dvMlER+Y9JDq3j11w4u8AsBv2nJsn2HdCHvDr56hqFzJhxCakpoDa
nzieQVm8Tgy1dvzIYOoXPmHxwkMVRs3Jbs8WMCvTVaQGJGtgD7DE81cy8Eow1rYK
NtvFfpZZBSsIfas0SbZ02O1X286ojSM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:34:35 2025 by rpki-client