Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa
File:                     9db9c639-d02d-33c9-bdb4-066c23602c3f.roa (raw, json)
Hash identifier:          uLc64MECUC4NZ3FSpiJEA62fqhBg8GZaPL9njvo8wKA=
Subject key identifier:   E6:B9:C7:3C:D2:A3:36:FA:E5:3A:6C:4C:21:8F:2E:B1:44:3B:52:E6
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F432858498E648B1A7E7DB54FA539EB80
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     293
IP address blocks:        192.188.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8b:1a:7e:7d:b5:4f:a5:39:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=086ce47b-1b49-417a-bc5e-f1631c6984cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:22:4b:0f:a5:30:65:85:8a:22:e3:ec:67:
                    4e:66:48:e7:1c:66:c8:b0:c5:2a:64:03:1d:84:c7:
                    a0:42:af:3d:8a:f9:01:49:f7:da:62:53:a7:b2:24:
                    4a:bd:34:f7:30:54:31:c0:b7:3e:23:dd:b9:ee:70:
                    0b:6b:37:24:90:05:92:41:9f:4d:86:99:5e:8d:23:
                    60:eb:68:1c:ff:20:25:54:7e:c0:8d:27:d3:e2:bc:
                    ec:06:dd:54:58:7b:15:42:45:94:a7:df:2c:f7:0a:
                    6e:1b:ca:a7:f7:d3:43:36:f1:fb:c3:b0:53:13:68:
                    1d:d2:8d:af:f5:56:14:05:a1:7c:4a:ff:2d:b1:65:
                    ed:1f:54:2a:d2:c0:94:dd:8b:07:4b:83:a2:80:2e:
                    c7:03:77:34:7a:d6:0f:18:ac:63:55:fc:c0:00:86:
                    4b:10:e7:96:6e:ac:38:26:17:4b:0e:1b:03:20:a5:
                    8d:94:78:aa:24:6f:ae:aa:20:a6:b6:8d:c6:b5:57:
                    00:e7:02:7c:c7:59:a2:e2:5e:a3:de:49:4b:83:c8:
                    f0:12:e6:29:36:6f:2f:bf:17:de:e9:1d:a8:66:ef:
                    dd:b4:29:c3:0e:ee:b4:53:4f:ea:f0:51:b0:96:e3:
                    ff:c7:4d:be:87:ed:f8:c9:84:78:6b:3b:e0:75:07:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B9:C7:3C:D2:A3:36:FA:E5:3A:6C:4C:21:8F:2E:B1:44:3B:52:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/9db9c639-d02d-33c9-bdb4-066c23602c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:45:38:90:4d:b8:eb:83:d1:1b:76:99:61:04:78:5a:54:
         2b:15:06:4c:6a:7b:0d:9d:ea:09:91:3e:78:8a:22:2a:11:23:
         6e:17:1c:74:0e:c9:e6:ed:95:30:b8:60:fa:f6:90:bf:30:70:
         ff:f5:49:4e:48:d7:67:82:51:de:49:01:22:1b:cf:fa:16:ae:
         71:6e:b2:c6:a0:ed:9e:13:8c:f8:6f:be:32:f3:08:b7:af:4f:
         d2:4f:e5:b2:6e:ce:9a:1f:bb:47:69:69:8e:44:94:67:e6:9d:
         97:6f:8b:c3:1c:c2:74:7c:19:c9:be:fb:30:1e:06:83:ae:1e:
         cf:33:ee:5c:b4:58:64:ae:f7:ff:c8:41:62:32:92:8e:60:5e:
         0a:15:0b:34:03:8f:a2:1c:1d:e4:2e:ea:cb:00:8b:e9:8f:17:
         63:aa:5e:d6:3e:87:e4:3d:10:36:b2:ff:72:f0:dc:5c:d9:90:
         35:a3:d3:89:5e:18:5e:8a:d5:40:0a:5d:45:7a:39:ba:6e:07:
         54:1f:af:a6:6f:f5:85:8b:c4:8d:d4:de:63:e0:e0:24:18:fb:
         fa:aa:65:3c:13:70:e3:fd:b0:10:2a:29:45:e6:61:79:3e:dc:
         61:00:93:0b:eb:15:22:da:ce:b1:22:34:75:3b:56:49:72:c6:
         d9:18:ce:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIsafn21T6U564AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz
ZmM1MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
MDg2Y2U0N2ItMWI0OS00MTdhLWJjNWUtZjE2MzFjNjk4NGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s4iSw+lMGWFiiLj7GdOZkjnHGbIsMUqZAMd
hMegQq89ivkBSffaYlOnsiRKvTT3MFQxwLc+I9257nALazckkAWSQZ9NhplejSNg
62gc/yAlVH7AjSfT4rzsBt1UWHsVQkWUp98s9wpuG8qn99NDNvH7w7BTE2gd0o2v
9VYUBaF8Sv8tsWXtH1Qq0sCU3YsHS4OigC7HA3c0etYPGKxjVfzAAIZLEOeWbqw4
JhdLDhsDIKWNlHiqJG+uqiCmto3GtVcA5wJ8x1mi4l6j3klLg8jwEuYpNm8vvxfe
6R2oZu/dtCnDDu60U0/q8FGwluP/x02+h+34yYR4azvgdQe7YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOa5xzzSozb65TpsTCGPLrFEO1LmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2
ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvOWRiOWM2MzktZDAyZC0z
M2M5LWJkYjQtMDY2YzIzNjAyYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl
MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2
MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwLwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/GRTiQTbjrg9EbdplhBHhaVCsVBkxqew2d6gmRPniKIioRI24XHHQO
yebtlTC4YPr2kL8wcP/1SU5I12eCUd5JASIbz/oWrnFussag7Z4TjPhvvjLzCLev
T9JP5bJuzpofu0dpaY5ElGfmnZdvi8McwnR8Gcm++zAeBoOuHs8z7ly0WGSu9//I
QWIyko5gXgoVCzQDj6IcHeQu6ssAi+mPF2OqXtY+h+Q9EDay/3Lw3FzZkDWj04le
GF6K1UAKXUV6ObpuB1Qfr6Zv9YWLxI3U3mPg4CQY+/qqZTwTcOP9sBAqKUXmYXk+
3GEAkwvrFSLazrEiNHU7VklyxtkYzvk=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:02:16 2025 by rpki-client