Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/8ea67710-8f45-38a8-aa9e-c7c0898082cd.roa
File:                     8ea67710-8f45-38a8-aa9e-c7c0898082cd.roa (raw, json)
Hash identifier:          R/DZKFmTOQVyUbdKHZCecTp2Cgky9Iymb/f0jFAdwYc=
Subject key identifier:   A5:61:F7:46:C6:B7:74:85:E3:8B:50:C9:58:E4:55:8A:D6:FD:5D:37
Certificate issuer:       /CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c
Certificate serial:       010D0C9F432858499CE8249340CA8F52EA16CD00
Authority key identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/8ea67710-8f45-38a8-aa9e-c7c0898082cd.roa
Signing time:             Tue 22 Apr 2025 17:47:40 +0000
ROA not before:           Tue 22 Apr 2025 17:47:40 +0000
ROA not after:            Mon 21 Jul 2025 17:47:40 +0000
asID:                     54223
IP address blocks:        192.12.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:e8:24:93:40:ca:8f:52:ea:16:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c
        Validity
            Not Before: Apr 22 17:47:40 2025 GMT
            Not After : Jul 21 17:47:40 2025 GMT
        Subject: CN=fedfc938-173b-4841-9059-0e6e05921507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:9e:74:5a:60:e4:1e:32:45:08:b1:87:61:
                    3b:6e:27:35:62:e4:15:7c:d6:22:63:7f:3f:4a:a0:
                    1c:06:eb:6b:23:58:3e:ac:13:21:c3:3b:d5:ae:2d:
                    00:30:a1:a0:fa:13:ba:36:d0:c8:2d:23:8f:2a:9b:
                    b0:74:1c:67:5c:39:56:fc:74:96:3c:24:e0:4e:60:
                    a9:15:34:66:36:1c:a4:97:46:45:ed:35:5e:30:ba:
                    a8:27:94:0c:59:6c:7f:b9:d0:68:84:3d:9d:ae:52:
                    58:43:89:50:8b:32:43:31:76:ae:85:4e:50:a7:a6:
                    a4:ce:48:9a:0c:d5:09:d9:d3:41:74:b9:53:29:be:
                    ca:84:0d:a1:24:af:1f:93:3b:78:12:ae:93:e8:e5:
                    bc:d8:18:10:53:ec:c2:bd:72:c5:b8:7b:08:43:e3:
                    80:04:f4:f1:ab:aa:49:cf:14:14:5a:71:98:ea:3f:
                    34:47:d7:e0:e2:fc:5a:26:79:36:15:13:9f:a0:c0:
                    02:04:83:90:6a:63:80:5e:6a:81:e9:90:60:e8:a9:
                    03:09:47:2e:df:f6:33:09:18:1d:06:d0:0a:42:2a:
                    ca:8a:a4:8d:86:e7:38:ce:02:e9:69:47:fa:94:82:
                    07:2a:33:03:5a:77:62:d3:cc:3f:87:3c:06:09:6f:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:61:F7:46:C6:B7:74:85:E3:8B:50:C9:58:E4:55:8A:D6:FD:5D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/8ea67710-8f45-38a8-aa9e-c7c0898082cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl

            X509v3 Authority Key Identifier:
                keyid:DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fc:eb:09:51:32:bf:a7:0b:28:ee:04:9a:6c:52:44:f7:93:
         29:b5:f4:6d:93:34:a0:3f:f5:7f:91:b8:af:73:91:e5:24:dc:
         bf:95:32:88:30:cc:77:0e:ee:0c:5d:dd:3a:93:22:f1:ed:fd:
         a1:bc:f3:c1:cd:b4:1f:d9:36:4d:8e:bd:95:bb:93:97:f5:3d:
         92:99:6f:ec:86:2d:4e:c8:9a:be:bc:14:eb:15:e0:f1:6a:e4:
         1a:e9:67:09:bf:60:50:a7:30:15:72:f3:92:a1:d1:e2:9d:52:
         5a:9a:4a:5f:74:a0:0f:dd:5e:1a:c5:08:11:89:6d:85:cc:fd:
         db:a0:84:81:af:06:c2:1d:7b:3e:7a:dd:44:19:21:34:35:25:
         98:b7:5e:48:2f:87:4f:26:e2:47:a5:eb:84:34:55:e0:08:af:
         67:2a:2d:5c:d6:57:da:67:14:c8:b2:5a:79:96:e3:9b:b5:f3:
         aa:3a:2e:60:2c:3c:56:15:7e:63:be:1c:fa:ee:53:db:be:76:
         cd:d3:d4:59:50:d6:9f:ad:db:97:95:16:c9:23:85:df:33:cf:
         16:1f:8c:d5:68:df:87:5b:0c:88:3f:b1:c1:bb:3e:60:0f:27:
         88:ac:92:89:8b:20:a5:6c:21:e9:2e:49:1f:5e:e1:37:8b:d7:
         d0:96:c1:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmc6CSTQMqPUuoWzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U2NjBiY2MtNWYwNi00MzAyLWJkMDQtNzZhNmFmZjhi
NDBjMB4XDTI1MDQyMjE3NDc0MFoXDTI1MDcyMTE3NDc0MFowLzEtMCsGA1UEAxMk
ZmVkZmM5MzgtMTczYi00ODQxLTkwNTktMGU2ZTA1OTIxNTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1yedFpg5B4yRQixh2E7bic1YuQVfNYiY38/
SqAcButrI1g+rBMhwzvVri0AMKGg+hO6NtDILSOPKpuwdBxnXDlW/HSWPCTgTmCp
FTRmNhykl0ZF7TVeMLqoJ5QMWWx/udBohD2drlJYQ4lQizJDMXauhU5Qp6akzkia
DNUJ2dNBdLlTKb7KhA2hJK8fkzt4Eq6T6OW82BgQU+zCvXLFuHsIQ+OABPTxq6pJ
zxQUWnGY6j80R9fg4vxaJnk2FROfoMACBIOQamOAXmqB6ZBg6KkDCUcu3/YzCRgd
BtAKQirKiqSNhuc4zgLpaUf6lIIHKjMDWndi08w/hzwGCW+F2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVh90bGt3SF44tQyVjkVYrW/V03MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZTY2
MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2YWZmOGI0MGMvOGVhNjc3MTAtOGY0NS0z
OGE4LWFhOWUtYzdjMDg5ODA4MmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2U2NjBiY2MtNWYwNi00MzAyLWJk
MDQtNzZhNmFmZjhiNDBjL2NlNjYwYmNjLTVmMDYtNDMwMi1iZDA0LTc2YTZhZmY4
YjQwYy5jcmwwHwYDVR0jBBgwFoAU2nV7pHGWjPj1zQTMP7gapf4X3ZgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZTY2MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2
YWZmOGI0MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACT86wlRMr+nCyjuBJpsUkT3kym19G2TNKA/9X+RuK9zkeUk3L+VMogw
zHcO7gxd3TqTIvHt/aG888HNtB/ZNk2OvZW7k5f1PZKZb+yGLU7Imr68FOsV4PFq
5BrpZwm/YFCnMBVy85Kh0eKdUlqaSl90oA/dXhrFCBGJbYXM/dughIGvBsIdez56
3UQZITQ1JZi3Xkgvh08m4kel64Q0VeAIr2cqLVzWV9pnFMiyWnmW45u186o6LmAs
PFYVfmO+HPruU9u+ds3T1FlQ1p+t25eVFskjhd8zzxYfjNVo34dbDIg/scG7PmAP
J4iskomLIKVsIekuSR9e4TeL19CWwa8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:43:25 2025 by rpki-client