Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/7e44f813-7c1a-3f40-b129-8978271804ed.roa
File:                     7e44f813-7c1a-3f40-b129-8978271804ed.roa (raw, json)
Hash identifier:          nSB8jcoTvyUkygKsDTLvrEhP3LfzxkvQfJxRrtrrPPU=
Subject key identifier:   73:5F:7F:85:3D:50:7D:1F:7F:31:72:98:43:7A:D2:02:49:7F:85:CF
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858498E648AFB0421D5E3679B3800
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/7e44f813-7c1a-3f40-b129-8978271804ed.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     3425
IP address blocks:        192.74.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8a:fb:04:21:d5:e3:67:9b:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=46f36caf-ab25-4fc6-8698-2c9c8b52ef6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:bf:5a:c5:35:4b:fb:68:19:a6:05:07:69:
                    24:dc:42:e0:9e:a6:c6:f5:c6:58:c8:45:d9:50:9d:
                    2d:a3:cd:31:e5:04:17:83:80:61:14:d8:47:55:f0:
                    22:cd:a9:37:ac:97:66:36:4e:a1:07:8b:d4:ed:ad:
                    0b:44:d4:b8:29:43:42:e8:45:09:62:b1:1c:e1:5d:
                    02:28:39:58:76:92:d0:1c:f6:e4:99:b1:36:47:da:
                    8e:a1:69:71:8c:9c:7f:b3:93:d6:41:53:20:85:8f:
                    9d:4a:8a:e7:b5:e7:25:f7:35:b6:bc:56:5e:20:af:
                    49:d4:a2:cd:b8:e8:f7:c2:ea:78:50:a5:2f:54:36:
                    04:fe:95:88:08:d3:f3:18:7a:3a:6f:5e:10:27:13:
                    f9:14:a7:23:17:c0:f3:6b:bc:7f:3d:3a:de:26:70:
                    2b:75:66:6c:85:da:f4:a9:f6:0e:27:a0:f6:2a:12:
                    cb:4d:8f:4e:e3:d8:c2:26:5d:22:3f:d4:d0:bb:3a:
                    15:4f:ec:e4:20:e9:3d:78:80:7a:68:30:25:37:0e:
                    9a:76:e8:23:f7:03:e8:56:9a:c7:1c:67:38:d4:7e:
                    9f:50:d5:93:8e:1b:0b:aa:52:11:97:79:61:d9:e9:
                    25:b1:07:67:dc:08:a4:7e:98:16:2b:6a:ae:9d:73:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:7F:85:3D:50:7D:1F:7F:31:72:98:43:7A:D2:02:49:7F:85:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/7e44f813-7c1a-3f40-b129-8978271804ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:11:f3:31:b9:be:75:46:64:c0:ac:db:0d:e6:7a:31:86:
         56:c3:4e:26:3e:70:75:fc:dc:17:c1:b6:86:f0:0a:ad:cb:5d:
         1e:14:1a:39:76:54:48:ec:39:5b:a2:85:24:6d:36:07:b4:d5:
         a8:d8:48:3c:b4:03:e3:08:7f:96:9a:cd:5a:fc:68:fd:0f:d9:
         ff:48:aa:ff:3b:4b:a4:99:4c:42:fa:52:1d:a8:6f:51:c8:ca:
         7b:7f:df:91:ee:a9:ce:ca:2a:0d:45:97:b5:0a:d6:4d:2d:cc:
         e5:57:54:5c:dd:a7:53:ad:65:f8:24:b6:7b:94:e7:c6:d8:16:
         ce:1b:1a:fa:2a:d7:ec:9b:08:82:ff:dd:85:74:4b:0a:59:c8:
         2b:f2:24:19:e6:e1:37:a3:38:7d:20:75:7b:23:cf:4a:d2:48:
         54:97:c5:41:0d:17:fb:78:63:25:11:47:00:a1:02:0c:55:41:
         09:40:68:15:85:df:fb:d5:e9:0a:5b:6d:f1:82:ec:5b:9c:47:
         6b:b9:dc:7b:48:8a:e2:98:3c:8a:24:76:d5:b9:4d:d6:a3:37:
         03:d8:2e:b9:82:1f:3a:eb:44:09:00:4b:bd:78:45:cb:86:14:
         9f:eb:1a:fc:77:d3:33:dd:5b:60:de:64:d3:e8:e2:c4:35:d2:
         41:b4:cb:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIr7BCHV42ebOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz
ZmM1MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
NDZmMzZjYWYtYWIyNS00ZmM2LTg2OTgtMmM5YzhiNTJlZjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoje/WsU1S/toGaYFB2kk3ELgnqbG9cZYyEXZ
UJ0to80x5QQXg4BhFNhHVfAizak3rJdmNk6hB4vU7a0LRNS4KUNC6EUJYrEc4V0C
KDlYdpLQHPbkmbE2R9qOoWlxjJx/s5PWQVMghY+dSorntecl9zW2vFZeIK9J1KLN
uOj3wup4UKUvVDYE/pWICNPzGHo6b14QJxP5FKcjF8Dza7x/PTreJnArdWZshdr0
qfYOJ6D2KhLLTY9O49jCJl0iP9TQuzoVT+zkIOk9eIB6aDAlNw6adugj9wPoVprH
HGc41H6fUNWTjhsLqlIRl3lh2eklsQdn3AikfpgWK2qunXPemwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHNff4U9UH0ffzFymEN60gJJf4XPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2
ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvN2U0NGY4MTMtN2MxYS0z
ZjQwLWIxMjktODk3ODI3MTgwNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl
MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2
MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwErUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/ZEfMxub51RmTArNsN5noxhlbDTiY+cHX83BfBtobwCq3LXR4UGjl2
VEjsOVuihSRtNge01ajYSDy0A+MIf5aazVr8aP0P2f9Iqv87S6SZTEL6Uh2ob1HI
ynt/35Huqc7KKg1Fl7UK1k0tzOVXVFzdp1OtZfgktnuU58bYFs4bGvoq1+ybCIL/
3YV0SwpZyCvyJBnm4TejOH0gdXsjz0rSSFSXxUENF/t4YyURRwChAgxVQQlAaBWF
3/vV6QpbbfGC7FucR2u53HtIiuKYPIokdtW5TdajNwPYLrmCHzrrRAkAS714RcuG
FJ/rGvx30zPdW2DeZNPo4sQ10kG0y4w=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:59:39 2025 by rpki-client