Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45ffce5a-b879-3c71-a684-99686927ff72.roa
File:                     45ffce5a-b879-3c71-a684-99686927ff72.roa (raw, json)
Hash identifier:          tQCT+qZC+G81VZui+vZwFxwzs+AX2+uYv4XqxUioNhE=
Subject key identifier:   AF:1E:28:96:21:5E:61:34:ED:F5:FD:6D:2A:10:EA:A7:C7:EF:4A:F9
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F432858499C0B0B3CCA8039051D170D00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45ffce5a-b879-3c71-a684-99686927ff72.roa
Signing time:             Tue 22 Apr 2025 10:22:11 +0000
ROA not before:           Tue 22 Apr 2025 10:22:11 +0000
ROA not after:            Mon 21 Jul 2025 10:22:11 +0000
asID:                     32043
IP address blocks:        173.232.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:0b:0b:3c:ca:80:39:05:1d:17:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Apr 22 10:22:11 2025 GMT
            Not After : Jul 21 10:22:11 2025 GMT
        Subject: CN=f568852c-ed79-44c0-868d-a585edacc748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:87:0f:f9:38:e0:d3:c4:fb:8a:f0:89:7c:
                    49:8b:f9:4b:38:47:7f:4b:cf:2c:35:5d:68:f7:d9:
                    f4:af:a8:d3:44:8a:30:44:b8:4d:c9:48:b8:2d:d3:
                    43:da:f3:29:35:84:71:e8:c6:8f:da:41:36:ae:a1:
                    d0:b0:23:e5:08:31:b3:7e:34:24:f0:2e:b1:f6:d1:
                    78:ce:66:40:8c:89:d9:a3:99:2a:43:04:2b:d4:93:
                    59:59:da:ba:4a:b4:43:46:17:ef:a3:69:b8:9a:fa:
                    a4:12:c5:39:4c:a6:f8:19:2a:62:64:b5:62:c7:57:
                    d6:be:b5:15:ee:0d:7e:02:a2:47:2e:18:d6:eb:50:
                    b2:5e:eb:30:23:38:7f:ce:e3:ec:33:6f:74:4a:eb:
                    28:59:b2:8a:06:a2:62:a7:0b:98:06:05:aa:b0:4f:
                    1b:ba:af:11:38:ac:af:e0:8e:2e:11:53:ba:72:16:
                    80:94:5f:62:34:0f:bc:cf:b1:52:52:b4:f0:44:bb:
                    21:f4:4c:cf:db:0b:f6:ed:d2:03:57:34:4f:e3:42:
                    2c:3c:97:90:d1:56:04:c8:61:3d:2e:e8:f5:69:d4:
                    40:39:a2:c6:6c:5b:6c:28:07:b3:b3:9e:04:0e:3b:
                    fd:66:84:31:3f:47:4a:2a:73:c9:e7:ed:e1:b2:4e:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1E:28:96:21:5E:61:34:ED:F5:FD:6D:2A:10:EA:A7:C7:EF:4A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45ffce5a-b879-3c71-a684-99686927ff72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:1e:92:54:bc:fc:c9:ce:7d:2b:b7:da:0f:8e:6b:9e:c5:
         08:8a:c7:de:f3:26:a1:4c:db:fd:12:33:21:2b:76:3a:8b:8c:
         d0:75:6f:88:f8:59:00:3c:78:52:5c:2d:b5:6a:64:64:35:e3:
         5a:99:b3:b8:51:a3:4c:e6:96:b6:74:c0:60:0d:74:51:24:5c:
         c0:46:1f:7d:84:6c:53:cc:2b:5d:81:c7:f3:fc:32:71:17:a2:
         9e:bc:1d:7c:d4:74:1a:92:7b:ca:a6:da:40:a3:62:cf:15:56:
         74:b4:19:60:f8:ce:45:54:2f:60:ac:90:a6:21:54:ce:73:05:
         ea:93:b9:95:4a:25:36:d1:3e:83:d2:1d:e4:2e:5e:de:dd:fc:
         76:d5:5d:dc:b2:82:84:6b:7a:55:bf:6a:d1:d8:0b:33:64:76:
         88:c2:73:e0:f9:eb:fe:22:e0:10:ac:ef:c9:52:e3:96:bd:ea:
         ba:97:4e:2e:f1:00:b7:64:98:d7:75:d6:e6:11:68:b1:e3:6c:
         d5:6c:90:05:c6:5a:ac:1a:1d:e3:c2:fe:8d:20:a5:85:48:47:
         1e:45:65:9f:f9:dc:94:b3:7c:2e:f3:30:f4:7b:e3:4f:70:8d:
         8d:a1:e3:8f:2c:0b:95:9c:c7:53:17:fe:48:fd:4c:18:9b:da:
         b1:d1:65:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcCws8yoA5BR0XDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI1MDQyMjEwMjIxMVoXDTI1MDcyMTEwMjIxMVowLzEtMCsGA1UEAxMk
ZjU2ODg1MmMtZWQ3OS00NGMwLTg2OGQtYTU4NWVkYWNjNzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpiHD/k44NPE+4rwiXxJi/lLOEd/S88sNV1o
99n0r6jTRIowRLhNyUi4LdND2vMpNYRx6MaP2kE2rqHQsCPlCDGzfjQk8C6x9tF4
zmZAjInZo5kqQwQr1JNZWdq6SrRDRhfvo2m4mvqkEsU5TKb4GSpiZLVix1fWvrUV
7g1+AqJHLhjW61CyXuswIzh/zuPsM290SusoWbKKBqJipwuYBgWqsE8buq8ROKyv
4I4uEVO6chaAlF9iNA+8z7FSUrTwRLsh9EzP2wv27dIDVzRP40IsPJeQ0VYEyGE9
Luj1adRAOaLGbFtsKAezs54EDjv9ZoQxP0dKKnPJ5+3hsk4iuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8eKJYhXmE07fX9bSoQ6qfH70r5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDVmZmNlNWEtYjg3OS0z
YzcxLWE2ODQtOTk2ODY5MjdmZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArei3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6OHpJUvPzJzn0rt9oPjmuexQiKx97zJqFM2/0SMyErdjqLjNB1b4j4
WQA8eFJcLbVqZGQ141qZs7hRo0zmlrZ0wGANdFEkXMBGH32EbFPMK12Bx/P8MnEX
op68HXzUdBqSe8qm2kCjYs8VVnS0GWD4zkVUL2CskKYhVM5zBeqTuZVKJTbRPoPS
HeQuXt7d/HbVXdyygoRrelW/atHYCzNkdojCc+D56/4i4BCs78lS45a96rqXTi7x
ALdkmNd11uYRaLHjbNVskAXGWqwaHePC/o0gpYVIRx5FZZ/53JSzfC7zMPR7409w
jY2h448sC5Wcx1MX/kj9TBib2rHRZYs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:31 2025 by rpki-client