Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa
File:                     ed3a5a88-86fa-36da-a653-e12390ec8538.roa (raw, json)
Hash identifier:          uR4RxyNMSy7EPtZtVK+DzBzLf3Re34jdLfdTNqy0lgM=
Subject key identifier:   47:54:F4:11:7A:35:12:C4:A6:4D:7C:80:BE:BC:6A:F6:FB:CF:E2:D2
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584A0A9FD0EAF0CEE02BE743E600
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa
Signing time:             Sun 01 Jun 2025 01:00:49 +0000
ROA not before:           Sun 01 Jun 2025 01:00:49 +0000
ROA not after:            Sat 30 Aug 2025 01:00:49 +0000
asID:                     64267
IP address blocks:        198.1.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:9f:d0:ea:f0:ce:e0:2b:e7:43:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  1 01:00:49 2025 GMT
            Not After : Aug 30 01:00:49 2025 GMT
        Subject: CN=9f8ef643-cd48-4786-8702-b33393916952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:b4:49:0d:b5:cb:a2:d4:65:7a:33:ca:5e:
                    d1:d8:25:06:f4:2f:08:cd:de:f8:3a:6a:8a:ad:ab:
                    bd:13:c9:6d:66:41:bc:66:61:a1:76:1b:ff:13:5b:
                    19:ca:18:54:65:a7:41:5f:a7:40:e6:64:ec:80:5d:
                    66:57:49:59:7d:19:f3:46:55:6c:7b:8b:6b:b5:ea:
                    c4:dc:70:17:dc:aa:52:04:1b:ee:cd:7a:0c:17:5b:
                    cd:5e:d9:2e:84:40:79:3e:3b:28:63:5b:28:18:86:
                    3a:dc:52:ff:11:5c:4a:ab:55:30:ec:67:43:9a:b1:
                    a7:c6:fb:a7:77:bc:3d:60:f3:0c:82:88:5b:07:2c:
                    7c:ff:d0:8f:ad:52:33:a5:e7:62:b3:a4:9a:9f:16:
                    47:b5:d3:80:af:e5:41:95:b7:24:2c:e1:a7:05:ac:
                    42:ee:b8:27:24:4f:a4:46:b2:fd:aa:d2:52:bb:41:
                    a6:c0:e4:4c:56:80:49:01:ec:0f:4c:7b:d3:08:c1:
                    ef:b7:e5:56:ca:d4:81:3c:10:31:c3:3e:1d:a8:1e:
                    92:84:40:32:23:c9:32:35:95:b8:d8:43:23:a7:21:
                    11:a0:19:14:fa:b5:e4:df:35:b3:4d:52:30:31:d8:
                    f9:39:6a:5f:03:6b:8f:29:be:f0:0c:88:1e:ab:f1:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:F4:11:7A:35:12:C4:A6:4D:7C:80:BE:BC:6A:F6:FB:CF:E2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/ed3a5a88-86fa-36da-a653-e12390ec8538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:08:9b:25:72:9c:df:32:3c:ec:8b:77:28:6c:af:20:5d:00:
         6b:c6:be:a7:e0:7e:e2:7f:f8:e8:25:67:6c:74:bd:72:9d:5c:
         93:00:02:d4:0a:1b:54:69:5d:d2:c6:fb:5f:54:14:d3:50:e4:
         ff:2a:89:7d:e5:31:ba:07:96:8e:bc:d0:d8:c2:34:be:60:2b:
         e8:03:7d:d4:24:70:9d:6b:5f:c7:89:76:fc:99:07:74:9f:d2:
         23:3e:ac:69:7e:65:b9:26:f8:0c:bb:5d:73:6a:ad:18:ba:cf:
         c4:4e:78:8e:35:68:e0:6c:87:79:a0:8f:40:5a:01:9d:b6:97:
         5d:46:38:89:1f:2a:0e:de:ae:3e:38:28:60:e3:0e:c7:2c:78:
         a2:8a:36:9d:34:16:17:a3:a9:e2:7b:d0:5f:fd:d7:08:52:8f:
         54:f2:66:0f:1a:4b:ec:0a:c4:6f:36:e4:7c:f1:a8:08:63:a6:
         85:77:f6:bd:ab:74:35:8d:33:37:84:d0:fb:19:e3:5b:98:25:
         89:61:b8:3c:9e:4a:b4:e7:fc:2f:fd:ed:b4:39:b4:d6:94:98:
         0f:4f:d9:af:08:81:1b:6a:05:39:85:26:8d:19:9d:a7:57:21:
         71:5c:a8:30:e6:1a:8d:b4:29:cc:c6:0e:aa:e4:89:a4:90:0b:
         b0:49:d2:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoKn9Dq8M7gK+dD5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MDYwMTAxMDA0OVoXDTI1MDgzMDAxMDA0OVowLzEtMCsGA1UEAxMk
OWY4ZWY2NDMtY2Q0OC00Nzg2LTg3MDItYjMzMzkzOTE2OTUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApga0SQ21y6LUZXozyl7R2CUG9C8Izd74OmqK
rau9E8ltZkG8ZmGhdhv/E1sZyhhUZadBX6dA5mTsgF1mV0lZfRnzRlVse4trterE
3HAX3KpSBBvuzXoMF1vNXtkuhEB5PjsoY1soGIY63FL/EVxKq1Uw7GdDmrGnxvun
d7w9YPMMgohbByx8/9CPrVIzpedis6SanxZHtdOAr+VBlbckLOGnBaxC7rgnJE+k
RrL9qtJSu0GmwORMVoBJAewPTHvTCMHvt+VWytSBPBAxwz4dqB6ShEAyI8kyNZW4
2EMjpyERoBkU+rXk3zWzTVIwMdj5OWpfA2uPKb7wDIgeq/FxRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEdU9BF6NRLEpk18gL68avb7z+LSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZWQzYTVhODgtODZmYS0z
NmRhLWE2NTMtZTEyMzkwZWM4NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQImyVynN8yPOyLdyhsryBdAGvGvqfgfuJ/+OglZ2x0vXKdXJMAAtQK
G1RpXdLG+19UFNNQ5P8qiX3lMboHlo680NjCNL5gK+gDfdQkcJ1rX8eJdvyZB3Sf
0iM+rGl+Zbkm+Ay7XXNqrRi6z8ROeI41aOBsh3mgj0BaAZ22l11GOIkfKg7erj44
KGDjDscseKKKNp00FhejqeJ70F/91whSj1TyZg8aS+wKxG825HzxqAhjpoV39r2r
dDWNMzeE0PsZ41uYJYlhuDyeSrTn/C/97bQ5tNaUmA9P2a8IgRtqBTmFJo0ZnadX
IXFcqDDmGo20KczGDqrkiaSQC7BJ0sU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:36:36 2025 by rpki-client